Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33332d3333203d3e20323632373635.roa
File:                     323830343a316466633a383030303a3a2f33332d3333203d3e20323632373635.roa (raw, json)
Hash identifier:          ehpZ/vVna+PXFnPojasF7PYVzPYYR/DEP8+ZhMxCKFE=
Subject key identifier:   07:6A:DA:19:2B:C1:77:59:3D:7F:8C:5F:F7:B1:AF:C5:29:25:DE:6A
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       732CA020496CB5F0210C2C67E59944484E9B18CB
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33332d3333203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:48 +0000
ROA not before:           Thu 04 Apr 2024 20:42:48 +0000
ROA not after:            Thu 03 Apr 2025 20:47:48 +0000
asID:                     262765
IP address blocks:        2804:1dfc:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:a0:20:49:6c:b5:f0:21:0c:2c:67:e5:99:44:48:4e:9b:18:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:48 2024 GMT
            Not After : Apr  3 20:47:48 2025 GMT
        Subject: CN=076ADA192BC177593D7F8C5FF7B1AFC52925DE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:0e:2c:83:3e:78:ea:8f:3f:be:9b:ce:d0:
                    91:99:6b:ef:38:ea:39:7b:9d:d6:ce:93:1c:ee:d8:
                    01:9f:df:f9:81:90:b2:8a:ff:19:4a:c0:49:03:08:
                    ad:d3:e6:65:77:bd:a7:bb:e3:3c:43:cb:b4:3a:08:
                    ca:62:4e:d9:10:24:0d:42:87:c2:8e:16:ea:27:33:
                    5e:b1:3d:9d:2c:41:33:4c:e9:b8:4f:6c:46:ee:8a:
                    0a:d8:df:64:72:3d:fb:04:6e:74:c9:1b:61:ab:bc:
                    3a:20:33:ac:90:77:1d:cd:e4:df:26:bc:13:ed:77:
                    3f:d7:5e:29:e7:f7:e8:c4:a5:b5:3d:37:57:de:87:
                    8a:45:29:c9:91:2c:cf:ec:c1:3c:1f:10:be:5b:e6:
                    bf:10:bf:ed:7a:5f:95:e4:65:d3:6a:a5:35:2d:cc:
                    48:37:5d:8e:22:6d:28:cc:2d:bb:9d:fd:f4:44:89:
                    53:98:33:4a:c1:26:73:29:59:ee:a7:e2:03:bc:77:
                    18:03:a5:c5:eb:e1:9a:69:cb:55:a8:0b:fb:61:41:
                    9f:cb:f0:2a:4f:be:b1:82:b2:48:4f:c7:39:6b:ed:
                    13:82:c6:0c:5c:cd:94:c1:65:3a:97:95:80:6c:35:
                    71:0f:4a:7b:12:50:8e:e8:05:73:44:6b:bb:d7:50:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:DA:19:2B:C1:77:59:3D:7F:8C:5F:F7:B1:AF:C5:29:25:DE:6A
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33332d3333203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:df:59:08:32:ff:02:db:08:dc:24:99:38:a9:cd:c6:6d:0d:
         97:90:78:ea:87:64:82:8d:1e:db:a5:41:13:f5:ee:40:87:90:
         5c:35:0d:5c:e2:53:a9:d4:35:39:43:da:28:f8:34:23:08:e0:
         fd:c9:df:a5:af:56:ef:a0:fb:0a:9e:84:73:17:57:b3:e8:c2:
         f9:1f:59:b6:6a:68:9d:36:6f:08:f1:6b:6a:07:86:03:ad:ba:
         89:65:07:1d:ec:12:dd:63:b8:37:46:44:54:c7:38:89:a8:12:
         9a:4d:69:7e:38:d3:0d:2e:3d:e8:6a:9b:7f:36:2f:2e:0d:27:
         73:be:22:1d:9e:18:bb:b5:88:44:9c:43:b0:1b:15:8e:5a:2e:
         32:b1:45:38:e5:80:bd:3b:3a:16:a1:12:7f:da:1f:6d:51:d7:
         ee:89:76:dd:1d:66:a6:fa:78:36:11:e0:41:a1:ed:bb:36:ca:
         7f:d1:6b:79:02:97:fe:d4:97:1c:5d:1a:23:c1:55:d5:c0:6a:
         0e:00:2d:70:a5:cb:36:4f:c7:33:37:3a:7c:8c:76:dc:50:19:
         58:e1:7a:18:bb:c8:a5:2a:d4:04:d4:be:b4:5d:e8:5a:6e:5a:
         86:dc:fb:28:d4:18:b6:96:f5:8f:56:a4:c6:05:30:7e:16:3d:
         b4:bd:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org