Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa
File:                     323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa (raw, json)
Hash identifier:          /857vSJkmNlNMRjKA0JrHz3kWUE5PpEpsH9cZD4weyY=
Subject key identifier:   1E:93:A0:05:76:4D:E9:B8:D6:D7:94:C6:74:6E:76:7D:08:6A:2D:0E
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       41FDDD2E1BE7E8A8FB75EBBF866D3EA9A1DEB926
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa
Signing time:             Wed 03 Apr 2024 18:31:27 +0000
ROA not before:           Wed 03 Apr 2024 18:26:27 +0000
ROA not after:            Wed 02 Apr 2025 18:31:27 +0000
asID:                     267345
IP address blocks:        2804:4c0c:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fd:dd:2e:1b:e7:e8:a8:fb:75:eb:bf:86:6d:3e:a9:a1:de:b9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: Apr  3 18:26:27 2024 GMT
            Not After : Apr  2 18:31:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:2a:55:37:4f:b3:7a:f2:b0:5a:1f:e5:ac:
                    5a:ae:20:10:47:1a:3d:95:28:bd:b2:21:5b:31:d2:
                    e5:22:f3:e3:81:a8:b4:86:4f:86:66:ad:d5:9a:56:
                    4b:52:69:b1:3c:24:0d:d8:7e:82:73:21:f4:b7:91:
                    b2:0b:e0:d5:a5:c0:50:d6:d3:eb:5b:45:bb:8b:7d:
                    03:b6:8c:b9:21:58:54:cd:03:29:c0:92:6b:6b:a1:
                    5c:22:63:15:39:d0:8d:3f:07:b4:42:72:27:9e:1c:
                    fb:bd:76:4f:30:d1:b9:68:bf:56:f6:69:39:b1:ca:
                    04:da:ed:fe:7b:16:c5:23:21:47:13:18:66:f4:28:
                    24:b4:6c:e6:33:aa:18:79:5a:0e:9f:d2:d6:e7:c1:
                    e1:de:f0:e2:fb:fe:3b:93:2c:21:3d:a4:ed:fb:d7:
                    3c:5c:3e:77:06:90:f7:e7:bb:54:fb:2f:cb:ea:0a:
                    dd:27:30:6e:35:3a:34:73:39:99:40:da:9d:a7:ec:
                    c4:9e:e5:eb:23:c5:65:c0:0c:d4:70:c2:37:27:96:
                    e7:69:e0:f5:fc:64:32:ef:2e:57:17:62:96:8a:8f:
                    c9:95:fc:e9:4d:7b:54:c5:44:95:9c:bd:dc:76:e2:
                    df:77:0b:5f:bf:95:bf:f2:64:bc:44:72:ff:2f:3b:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:93:A0:05:76:4D:E9:B8:D6:D7:94:C6:74:6E:76:7D:08:6A:2D:0E
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a663030303a3a2f33362d3336203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:c4:cd:3b:41:a7:e6:db:a0:19:59:a4:03:fd:9d:5c:7c:
         34:e0:9a:b4:5a:b0:26:c8:b8:89:96:39:06:a1:3c:0a:be:72:
         20:24:b3:e0:37:b7:79:1a:28:e0:32:03:39:fb:a2:45:b9:82:
         54:5a:cc:0e:f5:a7:30:87:4f:e5:c1:f4:0b:eb:4f:0e:24:4c:
         da:07:bc:ed:34:3c:00:39:0e:17:f8:ca:00:a0:55:9b:79:d6:
         02:d5:06:fd:b9:bb:5c:54:1f:34:43:25:84:c6:cd:f3:f1:24:
         82:c2:19:ee:4c:d4:6d:02:08:43:39:f1:47:c9:8f:82:55:e0:
         fc:bb:0a:1d:03:37:ff:d6:c2:8d:be:4d:f4:f7:b4:f4:be:3a:
         e9:a9:cf:d3:ca:b2:7c:e2:a0:4a:f1:e2:cf:64:98:ea:a5:84:
         38:ad:df:1a:e6:c4:62:e4:31:36:5a:da:76:44:d7:23:66:02:
         c6:34:ab:be:b1:c8:13:98:ab:de:68:7a:04:26:ef:dd:17:19:
         4c:14:3e:c6:29:94:94:ca:67:60:2d:e0:01:a6:62:8b:39:b3:
         55:9c:f2:83:b6:d9:11:28:35:8c:eb:d3:6e:9e:df:a8:8b:d9:
         64:83:1d:a5:8f:3d:42:59:a8:e8:11:e2:36:f1:7a:a1:11:8e:
         7d:56:cc:64
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUQf3dLhvn6Kj7deu/hm0+qaHeuSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwRDYyNkVBRTBDNENDMkZEQzY3NjdDNjJBQTQ3NEM1
ODZCOUQwNTAeFw0yNDA0MDMxODI2MjdaFw0yNTA0MDIxODMxMjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTM0QjJBNTUzNzRGQjM3QUYy
QjA1QTFGRTVBQzVBQUUyMDEwNDcxQTNEOTUyOEJEQjIyMTVCMzFEMkU1MjJGM0Uz
ODFBOEI0ODY0Rjg2NjZBREQ1OUE1NjRCNTI2OUIxM0MyNDBERDg3RTgyNzMyMUY0
Qjc5MUIyMEJFMEQ1QTVDMDUwRDZEM0VCNUI0NUJCOEI3RDAzQjY4Q0I5MjE1ODU0
Q0QwMzI5QzA5MjZCNkJBMTVDMjI2MzE1MzlEMDhEM0YwN0I0NDI3MjI3OUUxQ0ZC
QkQ3NjRGMzBEMUI5NjhCRjU2RjY2OTM5QjFDQTA0REFFREZFN0IxNkM1MjMyMTQ3
MTMxODY2RjQyODI0QjQ2Q0U2MzNBQTE4Nzk1QTBFOUZEMkQ2RTdDMUUxREVGMEUy
RkJGRTNCOTMyQzIxM0RBNEVERkJENzNDNUMzRTc3MDY5MEY3RTdCQjU0RkIyRkNC
RUEwQUREMjczMDZFMzUzQTM0NzMzOTk5NDBEQTlEQTdFQ0M0OUVFNUVCMjNDNTY1
QzAwQ0Q0NzBDMjM3Mjc5NkU3NjlFMEY1RkM2NDMyRUYyRTU3MTc2Mjk2OEE4RkM5
OTVGQ0U5NEQ3QjU0QzU0NDk1OUNCRERDNzZFMkRGNzcwQjVGQkY5NUJGRjI2NEJD
NDQ3MkZGMkYzQjMwMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA40sqVTdPs3rysFof5axariAQRxo9lSi9siFbMdLlIvPjgai0hk+G
Zq3VmlZLUmmxPCQN2H6CcyH0t5GyC+DVpcBQ1tPrW0W7i30Dtoy5IVhUzQMpwJJr
a6FcImMVOdCNPwe0QnInnhz7vXZPMNG5aL9W9mk5scoE2u3+exbFIyFHExhm9Cgk
tGzmM6oYeVoOn9LW58Hh3vDi+/47kywhPaTt+9c8XD53BpD357tU+y/L6grdJzBu
NTo0czmZQNqdp+zEnuXrI8VlwAzUcMI3J5bnaeD1/GQy7y5XF2KWio/JlfzpTXtU
xUSVnL3cduLfdwtfv5W/8mS8RHL/LzswGwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FB6ToAV2Tem41teUxnRudn0Iai0OMB8GA1UdIwQYMBaAFGkNYm6uDEzC/cZ2fGKq
R0xYa50FMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4eXR0aVY4R3RUMUxy
SFNpM3d4Mlp4c2h2dWFjUGgyS1NFbUhxRkxRb0hVLzEvNjkwRDYyNkVBRTBDNEND
MkZEQzY3NjdDNjJBQTQ3NEM1ODZCOUQwNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82OTBENjI2RUFFMEM0Q0MyRkRDNjc2N0M2MkFBNDc0QzU4NkI5
RDA1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HOHl0dGlWOEd0VDFMckhTaTN3
eDJaeHNodnVhY1BoMktTRW1IcUZMUW9IVS8xLzMyMzgzMDM0M2EzNDYzMzA2MzNh
NjYzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzczMzM0MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBEwM8DANBgkqhkiG9w0BAQsFAAOCAQEAgUrEzTtBp+bboBlZpAP9
nVx8NOCatFqwJsi4iZY5BqE8Cr5yICSz4De3eRoo4DIDOfuiRbmCVFrMDvWnMIdP
5cH0C+tPDiRM2ge87TQ8ADkOF/jKAKBVm3nWAtUG/bm7XFQfNEMlhMbN8/EkgsIZ
7kzUbQIIQznxR8mPglXg/LsKHQM3/9bCjb5N9Pe09L466anP08qyfOKgSvHiz2SY
6qWEOK3fGubEYuQxNlradkTXI2YCxjSrvrHIE5ir3mh6BCbv3RcZTBQ+ximUlMpn
YC3gAaZiizmzVZzyg7bZESg1jOvTbp7fqIvZZIMdpY89Qlmo6BHiNvF6oRGOfVbM
ZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org