Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          3YKK8aVAuahxW44t0RMVAcMR6ZjWXlnibE1m10Axt9w=
Subject key identifier:   7E:25:4B:25:F6:EE:74:BF:68:D8:99:16:92:49:4A:40:A4:E4:9C:CF
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       54D7DF8A35DBE5B94847582B5884C39CA7BE7C76
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        2804:4c0c:d000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d7:df:8a:35:db:e5:b9:48:47:58:2b:58:84:c3:9c:a7:be:7c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:d0:1d:59:59:8b:31:40:86:7e:75:59:0c:
                    f9:e0:5b:6e:22:17:40:42:d1:6a:cf:8b:21:cf:2f:
                    0e:4c:45:a0:8b:af:59:02:73:1e:b4:a0:3c:61:83:
                    97:2e:bb:20:5f:38:3a:da:0a:85:0d:0b:1d:72:51:
                    2f:49:04:5a:95:f4:29:93:06:9d:60:f3:d3:e7:0f:
                    98:8f:c7:54:81:69:d3:47:ff:f3:e8:60:2d:b0:45:
                    af:6e:71:fb:ba:5f:a0:7b:2c:18:4e:e1:fb:bf:7d:
                    74:40:87:95:76:47:9e:b5:f4:e4:3a:3f:9c:2e:87:
                    b2:3f:f5:98:e5:45:e2:a1:c4:b6:4c:ff:2d:0f:77:
                    70:28:8f:fb:89:1c:1b:e3:b5:53:e9:34:40:f6:98:
                    62:0e:70:9f:41:ef:4f:01:bc:e6:a3:83:98:7e:6f:
                    27:db:14:56:ab:3a:5b:cb:49:98:24:bf:eb:7d:70:
                    c0:f0:2b:75:6b:28:0f:d4:d4:fa:7c:88:42:0f:67:
                    d4:b8:6e:ea:08:83:ba:54:d2:e1:e5:13:fe:41:9e:
                    c8:f7:1f:a3:f0:06:d9:30:7f:09:db:bb:3f:b7:7f:
                    f1:3a:93:ae:2e:99:3b:89:9e:68:8b:64:49:f9:49:
                    be:7b:f4:e5:bd:58:10:ea:22:d4:cb:ea:31:a6:da:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:4B:25:F6:EE:74:BF:68:D8:99:16:92:49:4A:40:A4:E4:9C:CF
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a643030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:07:4f:95:35:8f:df:12:73:f4:de:88:3f:59:a7:82:01:c0:
         8e:04:6c:5b:0e:89:26:a8:3e:b0:0a:9e:24:90:b1:4f:4f:68:
         81:c2:fe:8a:1e:6a:92:3a:ba:59:6a:ff:7e:05:c9:67:84:5a:
         f0:34:71:59:b2:5b:29:6e:7a:94:5a:3a:66:79:c5:76:f7:b1:
         36:ad:55:18:f6:c5:98:bc:f5:a4:27:62:a3:74:39:4e:fd:af:
         c9:68:62:5d:ff:6d:df:62:02:22:3b:f8:f6:14:3e:dd:2c:4c:
         f4:a9:04:e6:61:7a:02:22:47:85:1e:52:bc:d7:7b:2f:14:aa:
         74:a2:0a:27:4c:7d:aa:b7:d3:c4:7b:ef:8e:ee:92:7a:6e:e8:
         e8:86:3c:27:eb:32:4f:a6:7b:32:f9:0e:a6:40:31:6d:d0:7e:
         ac:ff:ac:51:90:61:f6:d1:a1:12:b9:1e:98:62:fa:99:e7:f7:
         6d:6a:d9:c5:5f:23:a9:be:f2:70:37:c7:3c:d8:90:04:58:af:
         75:d4:c4:fb:b5:f6:d6:14:ed:9a:58:0c:9e:05:ff:e1:69:ae:
         e1:c2:49:e9:53:40:77:d5:a8:f1:76:c5:4b:b0:a5:d5:a6:67:
         a4:66:dc:38:9d:27:b4:14:4f:16:49:ad:ca:57:30:dc:ce:a2:
         6a:26:6e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org