Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          nYVi2we1aLhG0eM7y8ApCW+zA1nvkuEvilt45LpvFVI=
Subject key identifier:   A8:F0:08:7A:6B:51:C0:42:DA:63:BA:05:63:8E:B1:96:DC:65:22:90
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       6144E6EAFB6B4DE0BE31F872899615FF8D61167A
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:a000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:44:e6:ea:fb:6b:4d:e0:be:31:f8:72:89:96:15:ff:8d:61:16:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:06:28:82:fc:5d:b6:78:a4:6b:b3:ee:e7:
                    f2:13:9f:5b:23:e0:d3:0b:47:5e:2b:3b:14:7c:e3:
                    f5:15:e1:29:b1:d1:13:b4:cf:44:ee:5c:65:ad:d5:
                    d7:8c:64:35:72:dd:8c:41:96:5f:16:3b:55:e9:10:
                    0a:70:02:c1:52:c8:41:f2:29:fd:d8:9e:50:e5:f6:
                    15:50:c5:2a:71:ab:48:db:af:11:3a:98:83:6a:69:
                    da:a4:af:3a:5f:6a:ea:bc:48:31:f3:ee:79:98:08:
                    5e:d2:29:fc:12:80:2d:e2:1d:a6:9b:8e:56:7d:d5:
                    9d:d8:e3:91:b2:34:5d:8d:5f:11:dc:d5:65:75:11:
                    96:c5:e9:f5:1a:46:bf:b0:58:fa:39:f0:3f:03:16:
                    c5:8c:56:25:29:cd:e5:0b:63:ac:4a:1c:2d:48:66:
                    c6:78:9f:db:14:60:d4:7e:95:be:be:60:a1:37:a1:
                    8b:0c:5e:da:00:e1:c7:a5:75:20:94:80:cc:e7:e6:
                    30:0d:6f:a1:5f:31:3b:7f:33:06:d6:63:12:0c:a2:
                    86:a0:8b:20:fe:92:25:3b:8a:5a:cd:9f:63:71:87:
                    8f:ee:26:34:ae:ad:43:aa:d7:41:87:61:c0:fb:32:
                    c3:a7:f5:18:dc:7b:be:89:92:f5:56:4d:6a:bf:79:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:08:7A:6B:51:C0:42:DA:63:BA:05:63:8E:B1:96:DC:65:22:90
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a613030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:5c:aa:62:f5:c5:63:82:c2:3a:88:6c:03:fc:0e:58:19:
         44:e6:1e:f5:54:30:b8:87:06:93:9f:40:43:92:0d:28:e1:03:
         89:9c:7e:0e:43:48:cd:3c:25:c5:49:48:5a:c0:ae:fa:f3:d8:
         04:e9:ff:de:cb:57:ea:9a:4c:b7:97:3c:57:4e:5b:1a:92:bb:
         f4:8c:5d:ff:6f:d8:36:95:e0:d5:7b:a8:9c:dc:b4:7d:a3:d8:
         52:a6:a4:ed:fe:c4:59:11:18:90:fe:70:65:3f:52:c1:0a:53:
         07:8a:db:c8:15:69:77:bc:bd:3b:6f:46:1d:54:ae:87:4c:d4:
         9a:eb:a6:fc:a0:a9:a9:5c:9e:6f:00:ac:24:a3:50:d2:45:f4:
         02:4c:f6:80:98:f4:47:61:bd:59:75:44:54:ba:49:05:21:36:
         83:99:e9:c6:6f:3e:4c:57:01:69:4e:cf:6e:80:8b:2c:1f:43:
         57:c5:17:c5:3b:3a:85:cf:a2:9c:b2:fd:d6:48:81:08:d1:73:
         f1:f8:fa:f5:07:92:80:e3:3d:60:76:b0:16:f1:5b:77:b4:80:
         fd:e5:c0:9e:28:2c:53:2b:fb:6d:ae:7b:4c:9d:54:57:b6:b2:
         4d:dd:6d:c9:98:6b:8f:2c:f4:a3:28:c1:54:6f:16:e6:e4:12:
         ae:ee:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org