Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          YPqDPhtvzXR3IXT8PLegSdokvjxzMk8Uly1biDM7HQw=
Subject key identifier:   BF:82:0E:25:95:A6:EF:73:01:8C:CF:E9:94:F8:E8:A5:DB:D5:A7:24
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       61FADF56983987CABDBE011D1826703242D753AC
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:57 +0000
ROA not before:           Thu 04 Apr 2024 20:42:57 +0000
ROA not after:            Thu 03 Apr 2025 20:47:57 +0000
asID:                     262765
IP address blocks:        2804:1dfc:3000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:df:56:98:39:87:ca:bd:be:01:1d:18:26:70:32:42:d7:53:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:57 2024 GMT
            Not After : Apr  3 20:47:57 2025 GMT
        Subject: CN=BF820E2595A6EF73018CCFE994F8E8A5DBD5A724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:4d:09:19:cb:02:63:2b:78:4a:95:02:fa:
                    64:71:21:ee:d3:a9:d5:28:5f:ba:62:53:51:4a:1d:
                    af:29:44:32:98:eb:f1:03:a5:b4:6e:5b:94:12:b9:
                    63:f0:32:a2:d0:92:6e:1b:c9:a1:64:83:e9:19:51:
                    f8:d3:0a:2c:24:cc:26:6c:b5:6d:34:7d:b0:ad:48:
                    43:d4:6f:32:67:9e:48:d8:7d:50:1d:16:fa:14:42:
                    d8:6d:37:3a:57:64:c5:e6:c5:03:aa:3f:ca:98:33:
                    1f:80:6b:81:34:a9:fb:60:a7:33:a6:ef:45:2d:19:
                    13:46:b7:38:65:cd:f6:67:7f:8b:81:48:60:4f:33:
                    0a:2d:2e:ec:21:59:ae:3f:41:3a:b1:2e:20:c4:76:
                    4f:d7:bd:08:7b:5f:a3:ba:e7:65:6c:e2:7e:42:ab:
                    00:44:60:d7:8d:26:67:c6:32:2e:6a:2c:75:8e:41:
                    e4:25:ba:78:0f:f8:1f:31:ec:ba:8b:26:23:15:75:
                    ef:3d:cd:ab:f9:0e:a5:89:f6:45:75:24:e3:e5:09:
                    30:ad:ca:eb:a8:41:18:e3:4c:74:c9:78:80:3b:c6:
                    bd:06:92:c7:e4:42:46:d8:38:ca:7a:96:15:ee:40:
                    d3:bd:5d:1d:f7:11:53:73:c5:68:83:05:b3:68:8a:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:82:0E:25:95:A6:EF:73:01:8C:CF:E9:94:F8:E8:A5:DB:D5:A7:24
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a333030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:9c:bd:57:06:94:aa:1a:5d:76:4c:a1:8b:9a:03:8a:09:
         12:f3:fc:30:1f:59:8b:da:d6:13:e9:d7:ba:c3:e9:9c:73:2d:
         a7:0a:b4:96:e4:c5:aa:3c:3e:bf:2b:83:9a:3b:28:84:3a:ef:
         b9:1f:5d:ce:cc:a5:a1:5c:e4:88:fc:8a:1d:25:db:c4:67:0d:
         12:bd:88:eb:fa:ec:f6:4f:f7:0f:44:b7:f0:99:a1:0e:9a:a7:
         9a:b1:ea:94:16:76:a4:27:a3:a3:3a:34:fa:9e:06:f8:80:82:
         ac:89:ac:d0:40:ea:3a:97:78:bb:d5:4f:06:97:56:99:7d:64:
         32:25:28:d8:08:fe:09:92:54:37:fb:9c:8d:85:be:68:91:8c:
         51:d8:e2:14:f7:7c:f1:20:a4:92:0a:41:d6:d5:d8:f2:2b:7c:
         35:45:19:97:bf:5b:c3:ca:71:2b:00:b9:9a:94:0f:12:cc:85:
         f5:4f:f4:b8:1c:76:cc:67:20:97:94:bb:bc:5e:f8:9d:fb:cb:
         0d:4e:1f:b1:b3:d1:db:7d:4f:e5:a6:b9:cb:d8:29:6e:13:75:
         08:f4:66:fa:3d:fa:9c:77:8b:b5:0e:15:41:e4:b8:96:e9:96:
         9d:e3:92:4f:19:b5:20:d2:fc:83:12:a8:fb:02:c9:9c:dc:e3:
         0a:20:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org