Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          39K/gSlM6JsORiD2cab2N85BiwXJ+Iwznrh++ZLNWKM=
Subject key identifier:   9C:05:E7:2C:8A:2C:17:6E:58:3E:B5:29:1B:52:27:61:23:74:58:8E
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       7ADF322B5DB2090912D199FBB02D38345EF5AB1A
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:54 +0000
ROA not before:           Thu 04 Apr 2024 20:42:54 +0000
ROA not after:            Thu 03 Apr 2025 20:47:54 +0000
asID:                     262765
IP address blocks:        2804:1dfc:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:df:32:2b:5d:b2:09:09:12:d1:99:fb:b0:2d:38:34:5e:f5:ab:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:54 2024 GMT
            Not After : Apr  3 20:47:54 2025 GMT
        Subject: CN=9C05E72C8A2C176E583EB5291B5227612374588E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:92:68:32:9e:03:8b:df:24:2b:11:34:be:
                    29:0e:c6:87:4a:ad:43:29:21:0e:5f:1e:b4:fc:78:
                    e4:a0:ca:70:df:e8:9d:2b:13:2f:b3:90:b5:fc:4e:
                    3b:3d:bc:30:8f:a3:3e:2d:00:90:ec:fb:e0:4b:b7:
                    69:a5:a9:83:6b:56:5a:1c:dd:0f:08:b7:2a:9e:6f:
                    21:2a:5e:24:0e:49:01:61:f3:85:a6:7c:85:2c:14:
                    f4:69:a5:20:8c:be:b7:71:fd:2b:db:2e:3a:88:2a:
                    6e:4d:72:3d:78:35:67:e7:27:af:e5:27:3d:a0:50:
                    8a:2f:8b:8a:0f:d4:aa:d5:2a:48:98:5b:e6:36:cc:
                    07:0b:1d:36:0a:32:2e:ff:1e:26:80:53:74:a0:1e:
                    b6:1f:a3:b0:39:64:fd:5b:be:e9:21:01:80:a0:a2:
                    e8:e0:db:e1:9b:dc:02:83:c1:37:e9:3b:0d:36:a3:
                    df:16:b3:1b:55:8a:74:a9:38:3d:eb:e1:0c:96:30:
                    3a:46:f1:5d:2a:ca:ff:c1:7d:84:aa:d9:11:bb:f6:
                    0e:d5:06:cb:13:a7:52:69:60:f5:10:23:37:d4:b4:
                    11:83:3d:07:7d:e3:7b:1b:47:b7:63:da:dd:52:b0:
                    6c:05:12:6c:fe:10:f0:95:d5:aa:63:3f:7e:93:d1:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:05:E7:2C:8A:2C:17:6E:58:3E:B5:29:1B:52:27:61:23:74:58:8E
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a323030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a3:16:3d:ef:72:29:57:10:95:22:6c:cd:b5:8f:c8:9f:c7:f0:
         e9:ce:58:c3:b6:54:d2:80:af:5c:d1:7f:8f:25:b6:45:2d:ab:
         16:6b:09:c9:09:41:56:42:20:68:3e:1a:d1:b1:db:0a:aa:b7:
         ad:a9:03:39:bc:ce:d8:7e:3b:b4:b0:ab:d9:be:19:16:1f:4d:
         26:2f:09:53:f5:50:9a:93:44:98:08:2d:a6:5f:12:fa:8c:67:
         36:30:5f:be:2b:1f:e4:cb:5b:f3:b4:f5:db:19:37:59:97:9d:
         18:d0:ba:38:24:a6:e8:e0:e3:c6:96:73:d6:bc:cf:f5:e2:74:
         73:ac:d5:68:e5:12:73:5b:e5:d3:4b:f6:47:c3:c8:97:91:e1:
         d1:c0:22:7d:a2:09:94:03:e2:7e:e5:e8:7e:fc:11:a9:f8:ed:
         7e:49:40:f5:a3:8b:71:bf:3e:c0:c2:36:c1:98:91:7e:a5:e4:
         70:f1:04:8c:61:8b:7d:e1:c9:32:95:0c:c8:2c:14:37:31:58:
         b2:ef:fa:f1:87:57:10:ba:38:3a:c0:8a:bc:6c:c1:99:fd:74:
         6b:9e:d9:a7:00:b7:4c:fa:86:cf:e6:ea:fe:ec:9e:b6:a1:17:
         44:a6:7c:bd:70:06:c2:82:aa:7d:08:f0:8c:2e:e0:b2:68:3f:
         2f:95:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org