Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a343030303a3a2f33342d3334203d3e20323632373635.roa
File:                     323830343a316466633a343030303a3a2f33342d3334203d3e20323632373635.roa (raw, json)
Hash identifier:          rzVvg4BEsjQfK27ii9geC66TtxsztpNwwYa1pwonD5o=
Subject key identifier:   41:CF:C3:6C:CF:B6:5C:B0:6E:53:56:C5:12:46:30:E1:0C:FE:08:F5
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       3D1393724831B225DCDFEFA817C8C71D9806F68C
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a343030303a3a2f33342d3334203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:45 +0000
ROA not before:           Thu 04 Apr 2024 20:42:45 +0000
ROA not after:            Thu 03 Apr 2025 20:47:45 +0000
asID:                     262765
IP address blocks:        2804:1dfc:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:13:93:72:48:31:b2:25:dc:df:ef:a8:17:c8:c7:1d:98:06:f6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:45 2024 GMT
            Not After : Apr  3 20:47:45 2025 GMT
        Subject: CN=41CFC36CCFB65CB06E5356C5124630E10CFE08F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:ad:35:68:c0:6a:8b:1d:14:28:47:e9:93:
                    08:b2:2f:4d:c5:9a:d8:51:cb:cb:32:f7:31:02:88:
                    9d:05:43:0c:86:3d:83:5c:37:1b:af:aa:08:11:5f:
                    cb:b0:bc:ec:a0:7d:76:e5:c7:6d:77:36:99:62:a1:
                    ef:7b:ce:a9:f5:15:4d:2c:65:41:ed:d4:79:64:b7:
                    1d:16:30:d4:a9:fa:b3:b7:de:6b:c6:fc:cc:4d:a3:
                    1d:d7:48:b4:1e:fd:d0:7c:51:30:b4:55:7e:21:e3:
                    7b:66:9d:d9:49:fd:58:41:0e:3c:e4:0b:81:a7:fa:
                    31:0d:2f:6b:79:7e:94:82:df:92:a1:50:40:00:cc:
                    91:fc:d9:67:2d:db:cc:ca:9d:59:94:86:c3:bc:23:
                    94:18:26:74:d0:ed:c8:eb:bc:47:4f:47:22:37:5f:
                    38:0e:1a:e2:b7:16:d6:29:99:64:3c:04:16:89:ac:
                    33:9b:c2:81:48:8d:85:6b:74:29:fa:11:23:a9:90:
                    54:e4:95:f7:86:e6:ff:a9:2b:04:e7:f4:98:b9:78:
                    c0:7f:6b:5a:6e:65:72:2d:b8:f1:cb:c2:bf:c0:ec:
                    30:e1:c8:80:b9:b5:89:b8:a9:c5:56:3f:e0:b6:f7:
                    ba:51:e4:ea:57:00:8e:d2:db:92:68:e2:2d:ce:d5:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:C3:6C:CF:B6:5C:B0:6E:53:56:C5:12:46:30:E1:0C:FE:08:F5
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a343030303a3a2f33342d3334203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:80:46:31:9e:67:6d:2b:f9:d9:7b:a9:8b:fd:14:fd:85:
         1a:da:ca:e6:c9:87:cf:b6:fd:54:c7:82:31:78:82:20:b5:01:
         c5:91:2b:fd:a1:59:20:65:89:ea:f1:1e:49:67:81:ca:3d:85:
         f6:93:87:2a:0b:2e:dd:77:35:10:71:7c:46:65:c6:67:83:d2:
         e3:c5:4a:82:a9:84:40:21:41:b8:24:ca:76:69:2e:c6:a1:8b:
         7d:63:ed:7b:7c:0d:eb:4f:45:5a:46:ad:ce:06:10:e0:8a:65:
         f8:18:f7:ff:d3:36:15:cc:4c:28:5c:0c:2e:fc:f4:30:2c:36:
         d7:39:4f:6e:ea:1f:a6:4a:fd:2e:05:30:dd:46:7f:28:e2:9d:
         5a:39:b5:dc:2e:8a:4b:eb:84:93:46:80:f5:35:e9:1e:e8:df:
         96:c2:f7:e8:27:93:89:a6:b3:a6:06:f7:49:07:1d:88:ca:84:
         b1:d2:c9:7b:7e:1d:86:6f:6a:6a:38:83:bf:48:08:e4:76:1c:
         5b:a8:48:2a:17:76:95:46:78:4f:e5:4a:2e:c5:72:f0:e1:e5:
         78:22:29:4d:09:a9:b5:46:19:42:d5:4b:67:57:0b:ed:51:a6:
         60:49:b4:77:d3:27:c5:56:99:9f:c9:d3:d2:7a:23:c2:25:01:
         3a:0c:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org