Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a343030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a343030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          KNRenhpdchEa6vwK+dDYbbMc/9q7ZxZsQNnXZqaYZRw=
Subject key identifier:   79:33:8A:4F:FA:59:4D:85:08:7B:AF:28:99:09:18:E8:65:06:2D:28
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       6058ED650477EDFC3F1B97233563A16D6BDBAE5A
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a343030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:42 +0000
ROA not before:           Thu 04 Apr 2024 20:42:42 +0000
ROA not after:            Thu 03 Apr 2025 20:47:42 +0000
asID:                     262765
IP address blocks:        2804:1dfc:4000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:58:ed:65:04:77:ed:fc:3f:1b:97:23:35:63:a1:6d:6b:db:ae:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:42 2024 GMT
            Not After : Apr  3 20:47:42 2025 GMT
        Subject: CN=79338A4FFA594D85087BAF28990918E865062D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:33:4e:78:3b:03:2b:6d:c0:0c:76:90:07:
                    e9:2b:62:7d:59:70:c7:a3:f3:e2:45:73:4f:7f:81:
                    da:59:a8:61:f1:c6:b8:38:39:6b:e0:5d:f4:14:2c:
                    47:6d:ea:98:c1:a8:06:70:19:9d:14:96:5b:07:d7:
                    a2:8b:34:f2:2c:9c:1b:61:f1:3f:43:70:8c:09:e0:
                    ee:ff:cb:4e:4a:47:9a:cf:26:0e:ba:b6:e8:f9:53:
                    57:11:a2:8e:33:9f:4b:a7:fc:3c:50:3e:5b:c2:d8:
                    ed:b0:3a:a5:1a:84:6e:51:c5:ff:f8:a3:a1:c5:ab:
                    da:65:05:88:00:c9:da:ef:bd:d6:48:e9:7f:58:fd:
                    cf:33:a1:ca:01:6d:00:4e:1b:46:7e:e6:31:78:4e:
                    28:22:61:74:d0:6e:7b:10:6d:4e:33:11:f6:d5:7e:
                    11:55:d7:83:48:98:77:cf:e4:bc:e4:d0:77:25:de:
                    d3:2d:10:98:2b:de:2b:a5:cf:2e:0b:be:eb:b4:2f:
                    c4:32:96:5d:81:9b:19:e1:16:07:31:1e:1a:21:06:
                    2c:c2:d7:95:e0:9a:20:a5:8b:0c:fd:54:37:b0:86:
                    9c:84:3e:b1:b7:fc:5f:4f:15:42:30:94:41:ae:88:
                    12:86:b5:fe:90:58:9a:03:4a:c4:50:c6:8c:f1:80:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:33:8A:4F:FA:59:4D:85:08:7B:AF:28:99:09:18:E8:65:06:2D:28
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a343030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:73:36:65:d8:41:6f:04:e4:b8:1d:e9:f4:f5:e4:1d:34:
         65:c7:36:56:d5:b1:bf:44:e4:f7:a8:70:53:92:8c:c6:34:ab:
         48:ec:3b:06:07:c2:87:a1:89:73:90:bc:40:73:4d:d5:a7:b4:
         64:7f:ec:28:e9:58:24:76:39:b5:7f:65:a6:e4:5d:26:ed:be:
         17:82:ba:aa:43:7f:e8:92:76:e7:ca:05:f7:ea:9c:7d:89:69:
         85:e0:da:11:1d:c6:de:01:6b:0f:1c:29:f1:2a:9f:0c:4c:ef:
         72:bb:ed:ae:e4:9b:19:16:df:a4:18:21:3e:e7:4e:71:5b:d7:
         82:be:24:24:03:34:ab:e0:c5:2d:16:f2:4a:33:a7:54:7e:7d:
         a6:d8:45:01:58:7e:00:f1:42:59:ac:e9:c1:29:ba:e5:56:c4:
         16:d8:ad:af:cb:51:ed:eb:e7:1a:e3:7d:af:5d:fc:aa:be:bd:
         7e:33:69:85:ae:a2:14:23:e9:0a:0a:04:19:33:23:2b:08:0b:
         db:64:82:f1:9b:22:1a:41:3f:2a:d8:c2:0c:87:90:20:93:70:
         15:b4:bd:39:9a:2d:3d:db:31:60:4b:47:48:7c:04:8b:99:f2:
         ad:a7:07:aa:98:cc:39:72:27:2c:f4:f6:16:6e:c0:78:62:6c:
         2d:bc:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org