Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a313030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a313030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          Y1wx3Kst0USgEB+dk+MeURU9Cdv2u+y4oB6VrqTqlPY=
Subject key identifier:   B6:C4:CE:18:0C:43:77:EF:87:53:67:0A:BA:C2:6F:F3:8A:4D:5F:D2
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       13B5CED372D00FF3E37A038C2BB564490931E151
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a313030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:57 +0000
ROA not before:           Thu 04 Apr 2024 20:42:57 +0000
ROA not after:            Thu 03 Apr 2025 20:47:57 +0000
asID:                     262765
IP address blocks:        2804:1dfc:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:ce:d3:72:d0:0f:f3:e3:7a:03:8c:2b:b5:64:49:09:31:e1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:57 2024 GMT
            Not After : Apr  3 20:47:57 2025 GMT
        Subject: CN=B6C4CE180C4377EF8753670ABAC26FF38A4D5FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:d4:f7:58:47:8f:82:99:0b:fa:3b:52:cd:
                    9c:5e:b5:e9:57:36:cc:6a:eb:c8:eb:04:5d:00:56:
                    51:fc:e0:cc:30:a3:9c:d1:ea:a8:fe:57:53:8b:e6:
                    58:ca:f9:29:2e:04:4a:63:a7:b4:72:8d:73:09:2d:
                    74:6e:cf:5c:c9:3a:2d:b2:82:89:47:59:08:86:a3:
                    e8:73:31:c9:99:73:e0:fa:2d:72:05:f8:73:f5:8b:
                    8c:39:5f:d9:75:2c:bf:2b:b8:35:eb:6e:37:fb:bd:
                    dc:78:2d:2a:ba:c8:18:62:de:2c:8f:d4:6f:7a:40:
                    00:b3:fd:94:d3:dc:af:17:15:20:0f:d1:68:87:3b:
                    8b:5b:2d:44:22:58:3d:41:b5:28:6b:0e:31:95:3b:
                    d5:65:84:1c:28:f1:ef:19:03:0a:12:1b:96:48:a1:
                    9a:b3:18:9c:ce:45:6e:8b:c2:22:4a:d1:47:e3:ea:
                    60:72:73:55:7d:7c:01:c6:98:1b:44:79:aa:e0:30:
                    ec:87:7b:bb:d3:2c:8f:60:3d:1e:6a:d8:12:98:a3:
                    ee:ff:b3:39:3c:2a:c2:2b:b4:84:81:3c:61:17:2e:
                    99:c0:e7:30:1e:08:1f:dc:6b:e1:32:af:d0:ab:53:
                    1b:e5:8f:2c:61:af:5e:42:3c:7e:93:a8:1a:ee:fd:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:CE:18:0C:43:77:EF:87:53:67:0A:BA:C2:6F:F3:8A:4D:5F:D2
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a313030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ad:47:eb:cb:cd:71:d0:8d:84:ac:7d:20:4e:1f:6b:ab:32:65:
         f5:85:06:72:95:df:c6:d2:c1:d2:3a:d5:f5:79:20:d4:6c:57:
         11:ce:24:b8:dc:df:64:86:cc:05:ce:d4:b6:a4:fc:6e:1f:d0:
         40:38:36:f9:35:8e:07:80:1f:6f:e5:ca:d1:68:6f:97:96:ca:
         f6:d6:37:f8:be:f1:d4:ff:8f:89:82:2f:34:59:c5:57:f7:b3:
         b8:07:c2:b9:66:4d:d4:27:1f:57:95:94:ae:38:d1:4f:11:c2:
         18:63:02:31:37:09:ad:2a:39:41:37:42:ce:2b:2e:7f:c0:2e:
         19:3f:99:3b:2a:36:b5:fa:f2:3c:c8:ba:77:2d:3b:f3:81:38:
         7a:8d:de:f6:04:07:ed:96:e8:3b:db:d4:47:38:59:d7:c7:a9:
         96:e4:c9:cc:c8:a4:b0:07:0c:7f:82:7d:ef:f5:a3:63:ad:30:
         18:43:f0:35:6b:e4:36:ec:16:ee:ea:55:c6:d2:77:52:42:4d:
         10:0b:11:a3:0a:b0:87:65:1e:da:67:0b:95:6c:0f:ae:f4:f5:
         b6:3f:62:30:ef:c6:43:3b:91:19:e6:e6:66:92:3a:1c:8b:86:
         4c:8a:f1:2f:55:82:c3:31:fe:61:1e:19:c0:49:16:0d:fa:79:
         4d:ec:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org