Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          EmrkeXuNeJrJ+0P+7Ei/USWYjlryv95mfpQW+IJd1w8=
Subject key identifier:   4B:EE:5C:B4:78:26:B2:2F:EA:29:8F:06:9B:FD:1E:D8:FC:8C:3C:42
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       5C88C8C3807F557AFB345AFCD047B57EC64F7CD0
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        2804:4c0c:b000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:88:c8:c3:80:7f:55:7a:fb:34:5a:fc:d0:47:b5:7e:c6:4f:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:9f:e3:30:db:e3:76:e6:1e:0d:13:c1:38:
                    e8:ff:44:b6:76:69:35:0e:4f:39:ad:4f:33:d7:f7:
                    1b:48:ab:94:40:d0:ab:ff:5f:18:50:2e:2a:0d:6d:
                    84:87:ad:3f:e7:23:e8:fd:21:7b:4d:f2:a1:cc:ca:
                    a8:ea:3e:4f:29:98:39:f9:1f:41:24:87:39:9b:00:
                    4f:84:07:51:59:26:7e:24:ea:e3:f8:eb:e8:22:a0:
                    e3:dd:90:0c:eb:d0:0d:42:3d:b7:d3:e5:83:c9:85:
                    ca:b8:8e:a5:a3:91:20:36:13:55:44:8b:4a:bb:bd:
                    ff:c8:88:77:37:8e:5b:cf:d9:0d:f3:78:82:66:f2:
                    21:31:67:3d:61:97:d6:a7:05:0c:5b:1a:f3:c9:67:
                    0f:08:3f:89:e2:4e:98:13:96:e2:b4:8a:b6:95:2d:
                    df:b0:b4:40:ba:77:d2:6e:77:fb:14:ab:25:bd:b1:
                    9a:9d:79:5e:9d:ae:94:b6:82:96:d4:e0:a1:bd:c0:
                    4b:83:ab:c4:5d:29:eb:34:9d:59:9f:21:59:4c:c0:
                    40:50:69:ec:20:60:2c:4c:dd:38:a5:41:59:46:1a:
                    30:96:63:c3:25:1b:de:78:7e:69:2a:7d:9f:7b:ef:
                    03:43:db:a7:e0:af:76:01:54:a1:b3:d3:dc:56:95:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EE:5C:B4:78:26:B2:2F:EA:29:8F:06:9B:FD:1E:D8:FC:8C:3C:42
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a623030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:18:d0:0e:d7:de:1e:52:fa:ce:7c:e5:93:25:21:d2:e7:
         38:0f:b8:dd:0f:00:76:4b:83:c9:1b:b9:72:34:79:c8:e0:43:
         08:1d:3e:28:f8:ad:c1:71:a4:59:10:a3:c2:0d:9c:36:96:31:
         a7:5a:33:cb:7b:26:af:4a:0c:33:88:85:24:3d:03:8d:77:7e:
         59:70:7b:1d:5a:10:bd:bb:76:f1:77:2c:13:c0:d2:50:f2:91:
         0f:f0:7d:01:bf:1b:68:6a:eb:29:8e:f4:46:e4:74:e6:f8:d0:
         3a:34:cd:fc:65:dd:ca:37:88:65:da:6f:d8:f4:8b:f3:be:cd:
         17:54:9b:26:39:22:c3:12:db:03:76:87:b7:0b:a4:4a:f0:7d:
         d3:c7:85:a6:87:f6:d0:88:40:a1:01:44:29:90:0a:ae:89:c2:
         c4:05:bb:1f:c6:c8:df:44:79:eb:e1:ae:ef:0e:1d:f8:c9:c0:
         58:7f:e5:cf:f3:21:db:67:90:19:23:87:fc:e0:7c:89:4b:f1:
         33:36:fb:91:30:c6:af:3c:09:4c:61:9e:70:e5:4a:1a:15:9f:
         a3:7f:8a:ab:a2:ba:0a:98:4b:87:64:a7:16:c5:70:15:e2:56:
         eb:54:0d:f3:c6:43:0d:1e:59:43:00:19:1b:7b:7b:13:2f:c9:
         10:c8:85:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org