Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          LJ5z8waXEyVCiS6BT9xcyNtBIhW2vKpNbIdprWm5aG8=
Subject key identifier:   AC:3D:24:4E:02:23:36:23:EA:C0:31:38:E1:1C:5F:B8:80:2C:75:6A
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       2CAEEC02C4449CD157299CF50C13ED690BB993AA
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        2804:4c0c:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ae:ec:02:c4:44:9c:d1:57:29:9c:f5:0c:13:ed:69:0b:b9:93:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:6b:d0:a8:74:58:94:3d:e0:35:7a:25:5d:
                    1b:a9:dd:45:5b:99:e1:05:ab:79:3c:06:70:0c:6d:
                    8d:92:eb:67:0d:27:cc:bc:57:7b:40:47:d3:f3:53:
                    2f:c5:dd:34:0d:55:bf:64:21:94:d9:48:0d:9a:ea:
                    50:ed:9b:44:3c:03:9e:d8:3f:0f:cc:9f:3d:a2:1e:
                    ad:1d:5a:35:a0:62:ae:4a:6c:f8:09:b8:fa:59:63:
                    bc:26:3d:e0:30:7d:4d:11:ca:c7:89:34:00:7a:ab:
                    f7:e8:37:e4:f2:88:5c:f9:b4:19:96:78:0b:a1:0d:
                    66:ce:66:db:b9:6b:c5:f5:75:18:76:f4:19:39:01:
                    64:cd:fb:05:cc:88:63:c5:51:ec:81:22:30:47:18:
                    60:14:f4:ab:9e:fc:80:0f:2b:36:4b:7c:be:a7:fc:
                    53:5a:84:d3:13:cb:a1:2d:78:65:6c:3c:f8:f3:ed:
                    0b:57:07:7b:b4:a1:ea:d0:3e:b8:61:1c:8f:f6:23:
                    9d:47:d7:df:0b:bb:cc:8b:77:4c:f6:2e:65:7a:f9:
                    7c:b2:e8:f8:79:97:b7:d4:a9:7d:ac:d8:ea:ad:47:
                    d2:bc:93:a1:cd:a2:07:ab:e9:29:94:f0:aa:36:c8:
                    22:7a:9e:8d:3a:53:42:2f:01:6a:7b:88:55:ce:7d:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3D:24:4E:02:23:36:23:EA:C0:31:38:E1:1C:5F:B8:80:2C:75:6A
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a653030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:fd:7e:76:3e:b2:10:73:1a:e6:23:a4:30:fd:b8:4a:3e:
         51:b7:ee:ea:83:cd:d3:a4:3a:3e:69:b7:f1:e0:a7:dc:b3:e6:
         60:fe:e1:1d:e4:fb:8e:02:36:4d:f3:44:ad:0c:3e:0d:21:f9:
         32:1c:3f:10:88:6f:cc:04:db:d1:f1:06:05:9d:94:79:c1:4a:
         97:c6:41:93:cd:28:3c:94:6d:da:c2:a3:a5:ac:df:a8:29:47:
         a1:83:cb:88:b4:6b:99:77:d0:54:69:48:f8:5c:e3:5a:a3:7c:
         dd:bc:83:a1:e9:78:22:33:fc:44:ac:99:91:b5:28:c2:1e:dc:
         c1:2a:61:71:30:e0:01:9f:a7:7e:5b:2d:71:f2:2b:58:cc:5e:
         85:98:d4:2e:1c:32:fc:94:69:4f:3a:df:93:f4:95:2f:02:8b:
         27:b0:f9:66:4a:12:3e:45:94:a3:e0:24:42:e1:23:f5:14:01:
         d2:5b:df:a9:16:ab:84:3b:e3:50:ef:66:55:0a:4b:b9:a7:50:
         a6:fd:d6:89:8f:56:a1:cc:75:4c:71:3e:71:0b:8b:48:b2:87:
         58:a0:ef:5c:8c:85:91:a0:79:2a:69:71:40:69:6c:f1:90:26:
         17:79:48:5c:65:d8:67:b8:11:f1:78:73:d6:03:b4:9e:8d:dd:
         f2:ef:2f:8e
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIULK7sAsREnNFXKZz1DBPtaQu5k6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwRDYyNkVBRTBDNENDMkZEQzY3NjdDNjJBQTQ3NEM1
ODZCOUQwNTAeFw0yNDA0MDMxODI2MjdaFw0yNTA0MDIxODMxMjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZDNjZCRDBBODc0NTg5NDNE
RTAzNTdBMjU1RDFCQTlERDQ1NUI5OUUxMDVBQjc5M0MwNjcwMEM2RDhEOTJFQjY3
MEQyN0NDQkM1NzdCNDA0N0QzRjM1MzJGQzVERDM0MEQ1NUJGNjQyMTk0RDk0ODBE
OUFFQTUwRUQ5QjQ0M0MwMzlFRDgzRjBGQ0M5RjNEQTIxRUFEMUQ1QTM1QTA2MkFF
NEE2Q0Y4MDlCOEZBNTk2M0JDMjYzREUwMzA3RDREMTFDQUM3ODkzNDAwN0FBQkY3
RTgzN0U0RjI4ODVDRjlCNDE5OTY3ODBCQTEwRDY2Q0U2NkRCQjk2QkM1RjU3NTE4
NzZGNDE5MzkwMTY0Q0RGQjA1Q0M4ODYzQzU1MUVDODEyMjMwNDcxODYwMTRGNEFC
OUVGQzgwMEYyQjM2NEI3Q0JFQTdGQzUzNUE4NEQzMTNDQkExMkQ3ODY1NkMzQ0Y4
RjNFRDBCNTcwNzdCQjRBMUVBRDAzRUI4NjExQzhGRjYyMzlENDdEN0RGMEJCQkND
OEI3NzRDRjYyRTY1N0FGOTdDQjJFOEY4Nzk5N0I3RDRBOTdEQUNEOEVBQUQ0N0Qy
QkM5M0ExQ0RBMjA3QUJFOTI5OTRGMEFBMzZDODIyN0E5RThEM0E1MzQyMkYwMTZB
N0I4ODU1Q0U3RDczRDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtsZr0Kh0WJQ94DV6JV0bqd1FW5nhBat5PAZwDG2NkutnDSfMvFd7
QEfT81Mvxd00DVW/ZCGU2UgNmupQ7ZtEPAOe2D8PzJ89oh6tHVo1oGKuSmz4Cbj6
WWO8Jj3gMH1NEcrHiTQAeqv36Dfk8ohc+bQZlngLoQ1mzmbbuWvF9XUYdvQZOQFk
zfsFzIhjxVHsgSIwRxhgFPSrnvyADys2S3y+p/xTWoTTE8uhLXhlbDz48+0LVwd7
tKHq0D64YRyP9iOdR9ffC7vMi3dM9i5levl8suj4eZe31Kl9rNjqrUfSvJOhzaIH
q+kplPCqNsgiep6NOlNCLwFqe4hVzn1z1wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKw9JE4CIzYj6sAxOOEcX7iALHVqMB8GA1UdIwQYMBaAFGkNYm6uDEzC/cZ2fGKq
R0xYa50FMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzEvNjkwRDYyNkVBRTBDNEND
MkZEQzY3NjdDNjJBQTQ3NEM1ODZCOUQwNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82OTBENjI2RUFFMEM0Q0MyRkRDNjc2N0M2MkFBNDc0QzU4NkI5
RDA1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8xLzMyMzgzMDM0M2EzNDYzMzA2MzNh
NjUzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwM4DANBgkqhkiG9w0BAQsFAAOCAQEAZSr9fnY+shBzGuYjpDD9
uEo+Ubfu6oPN06Q6Pmm38eCn3LPmYP7hHeT7jgI2TfNErQw+DSH5Mhw/EIhvzATb
0fEGBZ2UecFKl8ZBk80oPJRt2sKjpazfqClHoYPLiLRrmXfQVGlI+FzjWqN83byD
oel4IjP8RKyZkbUowh7cwSphcTDgAZ+nflstcfIrWMxehZjULhwy/JRpTzrfk/SV
LwKLJ7D5ZkoSPkWUo+AkQuEj9RQB0lvfqRarhDvjUO9mVQpLuadQpv3WiY9Wocx1
THE+cQuLSLKHWKDvXIyFkaB5KmlxQGls8ZAmF3lIXGXYZ7gR8Xhz1gO0no3d8u8v
jg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org