Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33342d3334203d3e20323632373635.roa
File:                     323830343a316466633a383030303a3a2f33342d3334203d3e20323632373635.roa (raw, json)
Hash identifier:          0MWIgDbRcb7H+kA8ATQDSWR5j9ox/XqhwukBXcwljUg=
Subject key identifier:   DF:82:34:E4:0C:00:81:8A:F2:ED:42:D6:56:0F:DE:84:53:4E:29:65
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       37601BF9AF0FC8651CEFB4F54E5A5A96A498D4CA
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33342d3334203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:42 +0000
ROA not before:           Thu 04 Apr 2024 20:42:42 +0000
ROA not after:            Thu 03 Apr 2025 20:47:42 +0000
asID:                     262765
IP address blocks:        2804:1dfc:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:60:1b:f9:af:0f:c8:65:1c:ef:b4:f5:4e:5a:5a:96:a4:98:d4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:42 2024 GMT
            Not After : Apr  3 20:47:42 2025 GMT
        Subject: CN=DF8234E40C00818AF2ED42D6560FDE84534E2965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:bb:eb:f5:1a:a0:b7:a4:44:4b:c2:06:bd:
                    56:ac:3d:61:29:f4:f5:4b:b7:e4:12:81:d8:b7:cd:
                    38:ac:05:45:8a:8c:5d:39:4f:42:d6:fc:92:6f:8b:
                    a2:c6:fe:c5:08:c3:82:0d:3d:72:03:ca:ff:e6:d2:
                    43:20:fd:b0:d8:84:a0:9a:b8:8d:a5:d7:9a:77:fe:
                    5e:10:38:f4:8f:ea:c4:46:1d:15:ff:f6:a5:ec:4c:
                    7e:90:62:9c:a7:e6:7e:92:34:5b:ee:dd:72:7b:90:
                    6b:74:da:54:36:a7:ca:87:ab:22:e6:67:4f:d0:c6:
                    33:4c:94:af:10:f2:e8:94:e3:01:9c:66:f0:e3:dd:
                    a9:ad:3a:8e:90:66:8e:6c:30:91:bb:99:48:00:41:
                    72:29:31:c9:79:ee:57:10:1f:c7:23:dd:25:2d:7b:
                    87:e2:e7:6e:32:bc:eb:c9:1a:70:87:39:d3:c2:97:
                    5d:48:51:85:b1:12:5f:26:95:ea:dc:51:45:44:de:
                    a8:5b:ef:ce:4e:1a:b6:7e:34:d5:b9:67:2e:31:b7:
                    f3:cd:99:58:1d:16:cc:42:a9:04:ee:39:a5:28:04:
                    a7:bb:1d:f3:82:a8:bf:76:89:31:91:c4:ce:4f:c4:
                    28:6d:6d:d8:42:2d:97:72:e9:f4:3a:3d:1e:56:60:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:34:E4:0C:00:81:8A:F2:ED:42:D6:56:0F:DE:84:53:4E:29:65
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33342d3334203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:41:34:b6:b8:f6:aa:ab:40:52:b6:c2:ac:9c:fc:24:90:da:
         73:55:75:ec:58:d8:82:69:35:16:6b:23:3a:80:bb:77:fd:17:
         81:8b:07:3f:a7:11:28:1e:60:82:68:b8:16:48:1d:d3:8b:37:
         26:42:59:bb:2c:bb:a6:c6:3c:34:c3:d7:7c:1b:9d:8a:af:7f:
         af:49:e7:7d:12:ad:6b:31:23:c4:34:ba:4e:a8:e6:15:b7:62:
         9a:d0:99:54:de:7b:3a:d1:09:5c:3e:a8:47:8e:e5:cb:88:a0:
         c8:c1:13:f0:20:17:8e:30:c5:d5:f9:f5:c6:2f:cb:a3:04:bf:
         da:4a:5d:ec:bb:12:be:31:31:f8:28:aa:fa:fe:cf:7f:fe:6a:
         e5:af:34:eb:8c:f1:90:76:d4:6f:9e:85:0f:8b:da:10:76:6b:
         ee:3c:e8:fa:57:f7:67:af:57:3e:53:fb:b8:2c:85:d7:c6:96:
         a9:a8:f0:65:69:22:89:17:13:b1:99:5a:f4:c7:c8:fb:d9:61:
         6d:84:eb:8c:ee:72:21:8f:4d:66:97:e7:d1:59:12:a3:6b:17:
         7d:26:89:d4:33:3c:59:3f:62:68:e0:4d:aa:e5:47:be:94:23:
         3d:48:b6:65:16:26:76:81:ca:0d:dc:80:6e:d2:cb:1d:63:72:
         d8:1e:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org