Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          3g7xskLa8oa+ipY8Ogi09jZYOwGf3dR/2Dtj8UFUS90=
Subject key identifier:   80:4B:CB:31:8A:7F:DE:CA:26:2F:16:2B:12:A1:8C:68:3E:54:A2:97
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       1B311FCA47BF5BCCCA7BBFDCCF8804CA321F6D55
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:49 +0000
ROA not before:           Thu 04 Apr 2024 20:42:49 +0000
ROA not after:            Thu 03 Apr 2025 20:47:49 +0000
asID:                     262765
IP address blocks:        2804:1dfc:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:31:1f:ca:47:bf:5b:cc:ca:7b:bf:dc:cf:88:04:ca:32:1f:6d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:49 2024 GMT
            Not After : Apr  3 20:47:49 2025 GMT
        Subject: CN=804BCB318A7FDECA262F162B12A18C683E54A297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:8c:d8:f8:61:fa:47:66:f3:30:e4:43:7e:
                    c3:5f:0f:fb:e5:f3:7d:16:5d:e2:05:41:86:bc:38:
                    ff:f5:0c:0b:6d:d0:e7:51:5b:ee:37:57:2b:0d:75:
                    39:62:8a:4c:cb:db:6a:68:e6:eb:3d:81:b4:70:65:
                    19:65:f6:cc:25:82:c7:d2:24:b0:02:28:9c:4d:70:
                    c2:b2:5a:d9:af:46:72:71:36:b2:d2:6c:e9:c2:3f:
                    fc:f0:c8:15:69:ae:7a:f0:d2:7f:fb:62:07:53:3b:
                    11:a6:59:13:62:75:7d:c4:ed:a5:dc:42:22:84:20:
                    d4:a6:2f:6d:d5:e4:76:b8:f1:70:5e:7a:82:64:bc:
                    1a:e7:a2:52:cf:7c:d6:b7:7e:58:01:59:1e:46:5c:
                    e0:6e:18:e8:47:ce:74:62:6d:08:49:96:4d:da:60:
                    98:05:fe:16:fe:63:0b:2d:85:66:04:cd:f4:b2:99:
                    f7:d7:81:d4:d4:61:95:88:02:7b:1d:37:52:a4:0d:
                    08:28:a6:21:63:69:00:42:da:55:1a:a3:d0:cd:78:
                    94:3d:09:aa:55:88:59:41:3a:3e:a7:50:bd:26:95:
                    5e:62:70:1f:34:ff:fd:cf:a3:e8:c7:18:9e:61:6f:
                    6d:38:11:fe:df:6a:54:60:f0:7f:4c:81:60:cf:dd:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4B:CB:31:8A:7F:DE:CA:26:2F:16:2B:12:A1:8C:68:3E:54:A2:97
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a383030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:b7:1d:1e:db:27:1e:44:f9:07:d2:9a:5f:e2:37:7e:60:99:
         36:7e:15:cb:da:5a:67:7a:23:8f:53:b6:33:24:71:df:c0:c5:
         c3:19:e2:77:94:19:3d:cf:e6:38:3c:65:bd:23:45:12:de:98:
         0f:ee:d2:04:a2:dc:f2:b0:1e:71:7f:a0:de:cd:4a:06:9c:88:
         7d:f8:38:3a:8b:b0:77:7d:2f:c6:7e:d8:8f:82:c7:0d:74:82:
         3a:a1:8b:62:5c:71:a0:9f:93:1b:b3:72:fd:60:5e:5a:74:53:
         34:bf:71:4c:ea:2e:6e:b5:33:fd:ee:2c:bd:0c:3b:72:cc:bf:
         6a:c7:42:6c:de:4f:89:06:1c:2c:68:46:96:b9:dd:30:e6:3d:
         12:bc:31:0f:39:3e:1c:23:bb:52:4f:96:5f:c6:b7:d6:f7:ac:
         cc:0a:64:44:cc:cb:e0:06:5e:39:4d:49:eb:7e:bf:ff:77:02:
         76:86:8f:51:90:12:b5:db:d6:4d:89:b3:14:71:96:ab:58:c6:
         22:71:cc:61:cd:1e:62:d5:e3:d1:34:e9:8f:b5:f8:a4:f0:40:
         32:7b:28:16:01:11:1f:08:99:c5:7e:b7:8f:5b:f1:6a:df:8d:
         7e:2d:fe:04:4a:95:d4:b3:f8:73:70:6d:6a:e7:8b:4c:2c:a1:
         ca:91:bf:64
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUGzEfyke/W8zKe7/cz4gEyjIfbVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNDlaFw0yNTA0MDMyMDQ3NDlaMDMxMTAvBgNV
BAMTKDgwNEJDQjMxOEE3RkRFQ0EyNjJGMTYyQjEyQTE4QzY4M0U1NEEyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFIzY+GH6R2bzMORDfsNfD/vl
830WXeIFQYa8OP/1DAtt0OdRW+43VysNdTliikzL22po5us9gbRwZRll9swlgsfS
JLACKJxNcMKyWtmvRnJxNrLSbOnCP/zwyBVprnrw0n/7YgdTOxGmWRNidX3E7aXc
QiKEINSmL23V5Ha48XBeeoJkvBrnolLPfNa3flgBWR5GXOBuGOhHznRibQhJlk3a
YJgF/hb+YwsthWYEzfSymffXgdTUYZWIAnsdN1KkDQgopiFjaQBC2lUao9DNeJQ9
CapViFlBOj6nUL0mlV5icB80//3Po+jHGJ5hb204Ef7falRg8H9MgWDP3VzJAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUgEvLMYp/3somLxYrEqGMaD5UopcwHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzIz
ODMwMzQzYTMxNjQ2NjYzM2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2Uy
MDMyMzYzMjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHfyAMA0GCSqGSIb3DQEBCwUAA4IB
AQCQtx0e2yceRPkH0ppf4jd+YJk2fhXL2lpneiOPU7YzJHHfwMXDGeJ3lBk9z+Y4
PGW9I0US3pgP7tIEotzysB5xf6DezUoGnIh9+Dg6i7B3fS/GftiPgscNdII6oYti
XHGgn5Mbs3L9YF5adFM0v3FM6i5utTP97iy9DDtyzL9qx0Js3k+JBhwsaEaWud0w
5j0SvDEPOT4cI7tST5ZfxrfW96zMCmREzMvgBl45TUnrfr//dwJ2ho9RkBK129ZN
ibMUcZarWMYiccxhzR5i1ePRNOmPtfik8EAyeygWAREfCJnFfrePW/Fq341+Lf4E
SpXUs/hzcG1q54tMLKHKkb9k
-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org