Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          dipvjRk+29wE4vawpTF7/CFMS897Yzj4wf+nm5FIaSc=
Subject key identifier:   58:00:8C:D6:EA:4D:40:F2:13:6E:A4:62:D2:95:82:31:34:C2:7D:E9
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       1C2BF678B524A889A617BF46633D6534C750E9E1
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:48 +0000
ROA not before:           Thu 04 Apr 2024 20:42:48 +0000
ROA not after:            Thu 03 Apr 2025 20:47:48 +0000
asID:                     262765
IP address blocks:        2804:1dfc:7000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2b:f6:78:b5:24:a8:89:a6:17:bf:46:63:3d:65:34:c7:50:e9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:48 2024 GMT
            Not After : Apr  3 20:47:48 2025 GMT
        Subject: CN=58008CD6EA4D40F2136EA462D295823134C27DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:9a:f8:c6:03:8a:4a:b1:6f:92:84:92:1e:
                    aa:6a:f9:b5:81:e7:62:da:48:7b:2c:3d:f3:bf:69:
                    e2:e7:08:bb:c4:91:f4:2d:37:f5:a8:e0:f8:99:0a:
                    67:82:a3:02:65:34:d0:05:87:d0:a0:43:3c:ce:cc:
                    79:ed:4b:04:40:c3:a5:32:7e:aa:eb:82:55:b1:8d:
                    b8:88:70:71:29:8b:33:f6:05:a0:67:77:76:ee:19:
                    8d:c1:16:a4:26:b7:54:96:87:96:d4:26:59:51:28:
                    b2:25:59:93:3e:02:18:d3:13:8e:ac:89:30:6b:a2:
                    86:df:dc:68:3e:39:59:85:3e:4a:67:17:76:91:12:
                    cf:be:7d:18:88:ed:92:09:ab:d9:69:d7:20:83:c0:
                    ab:90:a1:c0:cb:32:81:2c:b5:0f:2f:dc:85:93:41:
                    4f:ff:28:e3:e8:42:86:8a:f6:b1:16:d7:5a:d2:a5:
                    49:d1:c3:4c:e4:da:95:58:32:1f:ab:3f:51:b1:5d:
                    ac:23:b7:72:0a:4e:0a:83:35:bd:a1:57:e5:03:81:
                    69:82:2e:e3:c1:00:78:77:39:7f:ba:eb:f9:ab:18:
                    74:f8:c7:74:ab:9b:9a:37:94:77:11:5d:3c:5f:9e:
                    f3:37:db:14:82:87:73:7a:e7:27:e8:12:8f:89:5f:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:8C:D6:EA:4D:40:F2:13:6E:A4:62:D2:95:82:31:34:C2:7D:E9
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a373030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:3c:4c:76:b3:a1:6b:7e:90:0b:05:9a:88:6e:a5:4f:90:
         92:4b:9e:d9:1f:0b:c5:7c:90:62:e8:ab:37:da:d7:48:05:84:
         a0:64:54:f4:a2:de:de:78:ac:5e:f8:5b:fe:36:92:14:2a:7d:
         9f:94:6a:ca:24:51:c0:4f:7e:ad:af:b7:de:9f:44:73:4d:c5:
         9c:cd:0b:f9:d7:5d:2f:27:7d:37:9d:db:6c:22:2c:9c:6b:01:
         d1:b0:ae:ba:71:06:64:7b:f6:3c:c8:2e:2d:67:4a:9c:a9:2b:
         f5:b1:d7:e9:84:9a:0c:f8:48:83:0b:79:7d:30:a0:c3:dc:49:
         86:bf:9d:23:37:4f:29:b2:bd:3b:f7:d1:99:49:6e:52:d2:32:
         cb:7e:1c:33:a6:6c:88:87:8f:60:70:ad:31:60:b4:68:58:b5:
         29:57:56:7c:d7:c8:e5:ce:86:58:2f:bb:90:d1:88:96:9f:d0:
         ba:75:8f:2a:c4:ad:38:82:d4:2c:86:8a:d5:fd:5a:ce:b3:1b:
         c4:c4:b5:2e:9f:58:69:a7:2c:03:6d:35:33:23:09:db:60:6c:
         72:4c:3a:a1:03:00:af:83:0c:49:5d:b9:a6:c0:fa:30:09:18:
         10:1b:07:2d:e1:b0:ea:ed:5b:4f:ee:55:2d:4c:9a:fd:7d:0c:
         6c:78:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org