Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          3tSzrRPpEedzHy/P994Sy4HO5s6Alolv2MprG3x+fZw=
Subject key identifier:   55:78:3D:46:30:FB:12:E7:EA:3E:C3:0A:1C:09:66:53:BB:F6:AE:4D
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       7ED57DADEAD8C49DE6182063FD66BDF4BAE5A855
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:7d:ad:ea:d8:c4:9d:e6:18:20:63:fd:66:bd:f4:ba:e5:a8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:28:3e:66:22:89:dd:b3:d6:85:55:17:1d:
                    6e:9b:16:8e:2b:f9:d2:71:a3:c7:b9:18:7b:3f:c6:
                    65:fb:75:36:24:90:be:bb:f1:65:c3:2e:43:65:48:
                    ea:01:a2:e2:6f:95:56:28:d0:3f:57:24:35:b0:98:
                    ab:2a:36:1b:3b:65:49:2b:99:a1:88:b1:fe:d2:16:
                    4f:8a:a2:31:a3:7b:4d:9d:e1:71:99:32:92:d8:6c:
                    a7:66:01:7c:84:a5:94:6c:5e:6b:e5:4d:62:36:d3:
                    bf:88:d7:fc:62:60:21:c0:8c:9c:fb:4a:d2:cb:66:
                    4f:c1:02:a3:03:fe:33:8e:4b:48:7e:28:27:bc:88:
                    ee:a3:85:56:65:3c:b6:af:2e:20:fe:4e:b7:1a:5e:
                    14:55:e7:34:8e:c1:82:e6:a2:c7:00:7d:14:d5:71:
                    73:aa:7a:ac:33:87:2b:66:5c:22:14:e9:47:ef:08:
                    a1:26:c3:6c:1e:0c:ed:a2:bf:05:64:05:6b:20:3f:
                    4f:5c:b8:b3:46:d8:9e:c4:05:8c:b1:c7:54:de:c9:
                    71:f9:1d:1c:93:78:9c:b2:45:ac:64:07:26:d6:80:
                    7b:51:e4:cf:c3:da:1e:f9:fb:5a:ac:b5:33:c0:92:
                    51:6e:ba:ed:77:9a:e8:a6:16:40:5c:26:6b:2c:77:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:78:3D:46:30:FB:12:E7:EA:3E:C3:0A:1C:09:66:53:BB:F6:AE:4D
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:6b:ed:28:c5:84:cf:13:ce:ad:4e:26:67:78:eb:56:d9:
         ce:06:f5:92:28:66:fd:3f:8c:69:86:3c:6d:52:ef:31:c1:7a:
         b3:ea:6b:15:08:d2:3d:f3:0e:96:22:a0:6c:53:91:74:b8:ee:
         ca:d7:82:2b:d8:8b:b0:5f:96:6b:0b:d0:f5:78:42:5a:6d:6a:
         12:7c:bd:b6:bb:e9:f8:14:c7:e4:b4:10:64:98:e0:a5:43:50:
         73:aa:55:6c:7f:f9:0a:fe:59:a2:27:6b:f2:79:bc:06:9f:85:
         71:68:6c:77:05:ab:04:da:12:66:b6:55:37:c2:02:65:55:46:
         7b:0f:58:1f:6a:91:4c:14:6d:8a:73:09:55:14:01:ff:dc:2b:
         37:d4:57:08:30:df:a0:6e:19:31:c9:d8:02:9f:c6:df:13:94:
         b3:29:19:c0:b6:4f:1d:44:0a:6c:df:ba:1c:26:1c:d7:ad:a0:
         37:ef:92:50:c7:91:56:94:15:21:38:d9:f7:dc:d4:b4:c6:e1:
         46:7b:92:8c:fc:55:61:cd:7e:17:b3:e8:0e:58:39:a5:65:c1:
         ee:95:2c:48:ca:0d:09:7d:ce:ce:4f:bd:96:9b:3a:64:9c:3f:
         91:52:ee:b2:ff:78:df:14:85:8c:f7:27:9e:7b:e5:62:cd:95:
         40:ca:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org