Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a383030303a3a2f33342d3334203d3e203631393336.roa
File:                     323830343a313838303a383030303a3a2f33342d3334203d3e203631393336.roa (raw, json)
Hash identifier:          de7nT/FByonAGdSTNs0h0sTyBj+sbeVBIQ5t8axeKZw=
Subject key identifier:   19:03:A6:4B:13:B2:EB:84:83:80:CC:60:BF:0E:01:8A:98:B4:CB:62
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       0CFBDDBAB5139EB3E9178F80ECA8B099C856B8F7
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a383030303a3a2f33342d3334203d3e203631393336.roa
Signing time:             Thu 18 Apr 2024 14:38:34 +0000
ROA not before:           Thu 18 Apr 2024 14:33:34 +0000
ROA not after:            Thu 17 Apr 2025 14:38:34 +0000
asID:                     61936
IP address blocks:        2804:1880:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fb:dd:ba:b5:13:9e:b3:e9:17:8f:80:ec:a8:b0:99:c8:56:b8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Apr 18 14:33:34 2024 GMT
            Not After : Apr 17 14:38:34 2025 GMT
        Subject: CN=1903A64B13B2EB848380CC60BF0E018A98B4CB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:1e:78:f1:84:3b:a8:67:70:91:82:80:31:
                    8d:6a:17:94:ae:3c:4a:6b:a6:d0:b4:51:e0:ab:79:
                    67:c9:24:2c:67:50:4c:23:7b:0d:8f:b0:90:53:0c:
                    ea:48:16:e8:03:df:a0:da:c1:d4:a6:12:3b:1c:61:
                    2f:0e:c1:1c:ec:96:85:45:5b:a1:27:de:2d:f5:fe:
                    ae:df:02:55:91:52:25:f8:f4:7b:82:47:8d:60:8b:
                    cc:e8:50:d0:a6:56:8d:95:7e:b8:da:4c:bc:88:0d:
                    30:44:c8:ba:73:38:74:f3:8b:9d:d8:53:38:77:31:
                    6d:6e:01:0a:29:88:45:95:f1:7e:6b:a3:dd:d8:0c:
                    2e:db:de:55:ca:41:1b:92:78:e5:5f:42:86:60:ae:
                    47:23:13:87:95:80:11:db:a6:29:7e:c3:7e:79:ec:
                    01:b1:f6:91:31:59:d6:29:89:0e:ed:78:38:d8:51:
                    5b:6b:fb:c8:05:7f:5b:6b:ec:6f:87:62:86:21:30:
                    30:38:18:4a:19:ca:c4:f2:e4:53:64:99:a3:8f:f7:
                    00:56:dd:e7:8b:c5:3d:07:6b:88:dc:be:5a:2b:7d:
                    78:fd:83:f7:ce:90:8c:bb:ee:5d:59:de:33:2a:14:
                    d5:78:62:68:9c:45:ff:a6:74:84:cc:62:7f:c9:d9:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:03:A6:4B:13:B2:EB:84:83:80:CC:60:BF:0E:01:8A:98:B4:CB:62
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/323830343a313838303a383030303a3a2f33342d3334203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1880:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:bc:e9:ff:48:63:60:03:8a:44:82:ca:b8:fd:ce:4e:54:
         5e:d8:2e:a4:7b:3f:d6:e1:24:58:96:fb:51:2d:cb:6e:fe:97:
         8a:92:83:f9:76:88:ec:7f:6a:fd:ac:bc:da:ca:cb:2b:24:96:
         b3:5d:2b:b3:ae:80:5d:f1:58:08:3b:34:a2:77:cf:10:4e:8e:
         3f:46:78:62:fb:ee:d1:98:3a:ba:34:dc:49:f7:e6:26:e7:80:
         68:db:d6:28:26:2f:ec:9d:ea:1d:21:41:e0:d6:da:6e:19:3e:
         ea:2b:79:35:65:29:a0:e1:65:e6:be:b7:fc:de:a4:75:de:37:
         15:69:84:f3:80:65:64:81:8e:e1:d5:0d:4b:bd:ed:a4:5b:17:
         52:85:32:00:f1:07:13:35:7e:dc:fb:bf:a6:85:24:a8:bd:14:
         7c:70:2c:26:ef:f4:5b:b9:79:54:71:49:19:51:a9:8d:28:54:
         6c:a4:0e:fd:bb:3e:97:95:80:cd:d9:4b:f8:5f:ca:1a:5f:81:
         e0:76:03:ac:73:fe:1a:62:c3:17:77:59:2d:82:7f:29:56:36:
         7b:28:c6:78:77:88:35:4f:94:75:ad:41:b2:f3:5c:da:99:3d:
         f8:e4:32:71:43:4a:1a:d3:41:fd:40:f6:3e:e4:d6:93:d7:5d:
         c9:16:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org