Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          j8bihWK1+b838oaB/yV3tdHoMpsIJ+qAsII5xSaNNco=
Subject key identifier:   E8:18:C8:98:4E:19:E3:44:05:E1:05:90:72:D4:36:45:5E:18:B4:FE
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       1D84F1BD5FD014EB2B5A322A3A3FC07E2875D2E2
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:26 +0000
ROA not before:           Wed 03 Apr 2024 18:26:26 +0000
ROA not after:            Wed 02 Apr 2025 18:31:26 +0000
asID:                     267345
IP address blocks:        2804:4c0c:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:84:f1:bd:5f:d0:14:eb:2b:5a:32:2a:3a:3f:c0:7e:28:75:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:26 2024 GMT
            Not After : Apr  2 18:31:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:38:9e:d2:cd:65:43:6e:99:b7:0e:f3:ae:11:
                    45:77:5e:88:86:34:ad:5d:47:0c:51:05:b5:ab:8e:
                    8c:b7:15:4c:77:3d:5b:e3:66:4e:cf:45:48:55:2e:
                    a4:60:28:fd:32:61:1a:72:d1:fb:6b:6b:08:2f:30:
                    84:63:5f:4d:e4:8b:0b:31:c8:de:f4:d2:f1:17:30:
                    28:73:2c:c6:74:d3:8d:3b:91:72:38:b0:2a:a7:01:
                    9c:50:ec:7f:71:ed:fe:8d:7c:f8:84:93:fe:d9:e9:
                    56:9c:94:2e:68:bb:18:1d:1d:a4:91:0c:6b:2a:b4:
                    db:f5:5a:10:31:b6:bc:28:9e:92:13:8b:91:44:b5:
                    e0:b0:1a:dd:d7:a8:9a:a5:8c:b9:86:c7:ad:05:6f:
                    10:65:30:dc:58:37:c5:39:b0:d3:4d:46:26:46:e2:
                    1e:d8:29:47:4c:24:58:a3:c3:55:61:e0:9e:85:ef:
                    0e:e7:15:09:86:e5:12:2c:82:6b:36:34:47:02:57:
                    2e:ce:e5:cf:27:ef:e8:6a:70:47:f8:39:9e:a6:f7:
                    2e:35:60:c5:85:05:a5:5a:29:70:5e:4f:4b:b4:71:
                    f0:06:94:b1:60:37:06:c3:65:dd:2c:fa:19:36:36:
                    4f:08:4a:64:a0:1a:0c:e8:34:50:80:d6:05:c0:7e:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:18:C8:98:4E:19:E3:44:05:E1:05:90:72:D4:36:45:5E:18:B4:FE
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a633030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:f9:b2:2e:d8:11:3b:53:16:d7:98:15:fe:77:df:7d:6a:
         3d:2c:43:12:0a:cb:12:92:a1:b4:a4:a1:7a:d4:55:a5:99:37:
         6f:30:bc:c4:c0:29:08:24:d6:70:72:de:33:9d:3f:a9:df:3d:
         4e:ed:65:e0:b7:9f:bf:9d:34:70:82:e3:5a:78:a0:e1:14:46:
         04:88:7a:b1:52:f2:82:e6:ad:00:ad:b4:50:15:0e:98:df:13:
         09:57:2c:4b:b4:58:ec:d0:37:62:e8:df:f0:a5:10:ee:b2:75:
         46:34:c7:29:94:e1:4a:4c:a7:eb:a5:12:18:47:29:df:6b:83:
         83:c1:72:a1:4e:f8:05:bd:5d:87:7c:f9:7d:be:63:53:31:0e:
         f1:e3:f3:06:0c:5e:6b:63:52:cc:ca:21:94:18:90:f4:0c:c9:
         06:a3:97:e0:57:8d:a2:f5:2c:34:a0:50:ee:24:46:c3:04:a8:
         10:e7:5c:d0:db:de:75:64:95:e9:94:68:dd:7c:88:9c:af:a2:
         61:5f:d4:3a:4f:37:a3:e5:8d:8b:bd:14:6d:36:c8:25:33:4a:
         3e:a5:0d:9c:2d:cf:74:92:56:b4:cc:ae:9c:45:ca:5c:82:05:
         3c:c7:25:94:fd:f5:12:a5:ff:39:c7:a5:b9:d7:2b:df:54:62:
         16:3d:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org