Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a393030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a393030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          zLFbDbPY3/YlWFg4H/ys2D4InuiRbwt4Nj/K6znBWX4=
Subject key identifier:   1F:EE:A6:BA:05:62:71:6D:32:36:25:64:90:CC:74:27:8D:E2:1F:ED
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       0B369E7DCBA623AC705912E36DA6A5D08E46CEFD
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a393030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:48 +0000
ROA not before:           Thu 04 Apr 2024 20:42:48 +0000
ROA not after:            Thu 03 Apr 2025 20:47:48 +0000
asID:                     262765
IP address blocks:        2804:1dfc:9000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:36:9e:7d:cb:a6:23:ac:70:59:12:e3:6d:a6:a5:d0:8e:46:ce:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:48 2024 GMT
            Not After : Apr  3 20:47:48 2025 GMT
        Subject: CN=1FEEA6BA0562716D3236256490CC74278DE21FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:37:67:c8:70:f6:da:6e:6a:7a:d5:97:21:
                    be:21:21:b6:7d:f9:d8:14:a6:cb:c8:92:48:3d:f0:
                    6b:f4:f1:03:f6:2c:90:8b:54:b8:f2:af:14:49:f8:
                    af:4d:0b:9f:a9:30:7e:9c:2e:ce:ab:7a:c6:8c:06:
                    ed:dd:79:51:5b:d0:55:cf:78:23:3e:07:25:e4:93:
                    37:0e:a5:c2:b7:a7:33:c5:05:8e:45:d6:8e:d0:8e:
                    8f:00:99:06:c7:f8:18:d5:35:4b:41:4e:91:a3:17:
                    00:b6:83:67:44:95:81:6f:a8:a7:df:27:09:be:06:
                    c1:c1:7e:bc:1a:0d:f5:b1:6f:85:0d:0d:2c:8c:3f:
                    b0:16:1c:ef:99:58:b4:ca:0e:4e:38:df:08:ec:69:
                    94:c0:58:4a:de:28:51:c6:32:b7:f1:c7:72:7d:04:
                    57:83:02:15:47:31:b2:b0:0a:d7:4b:d8:c5:cf:51:
                    ab:dd:e6:35:2d:5e:b9:e9:ec:c9:d3:51:0e:ad:06:
                    08:e6:89:3b:fd:9f:5c:4a:b1:cc:55:8c:15:ef:d7:
                    d0:ef:95:8e:a6:27:8f:3f:6f:3a:d3:95:c1:95:39:
                    de:65:29:0f:e7:c9:78:30:1c:ac:5f:39:7a:c0:1e:
                    ac:20:f3:c3:8f:39:38:cf:06:42:63:cd:1f:8f:65:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:A6:BA:05:62:71:6D:32:36:25:64:90:CC:74:27:8D:E2:1F:ED
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a393030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:7b:51:b4:f7:f5:1d:37:ab:46:e9:dd:34:b7:da:3b:05:
         c2:0f:83:0f:60:f4:b7:3d:db:49:f3:9b:c1:d7:61:65:af:6b:
         a6:24:ac:85:6c:58:96:15:48:a7:ef:47:c2:d9:fc:3c:40:f8:
         90:61:94:c7:d5:55:1c:d3:28:ba:3d:4f:31:8e:b1:e4:0d:af:
         6b:2b:97:38:c2:d0:43:9c:b9:13:dd:05:9f:72:b0:3b:cf:81:
         92:77:42:cc:08:53:e2:ae:2d:7d:be:b7:a9:3c:5e:71:ce:17:
         42:80:96:7d:90:77:97:a2:a7:12:cc:f5:23:c7:22:0a:22:49:
         94:7e:fa:48:cc:4f:fb:4e:98:c6:db:09:21:b5:0d:b5:d9:67:
         10:f0:19:32:62:00:c5:ec:54:ae:7f:12:00:3d:2f:c9:14:bf:
         58:93:33:2a:74:95:e6:b5:b0:d2:81:ec:3c:df:40:29:ac:14:
         48:38:a0:36:56:65:fb:e0:29:d6:d6:e0:a3:0c:83:e7:2e:05:
         0f:b5:49:d1:d5:3b:bf:af:85:c0:12:f4:01:b2:9a:34:be:35:
         b8:2f:d5:30:69:6c:4a:2f:a0:a6:00:32:f0:d8:f4:3d:00:e9:
         26:33:4f:aa:33:76:63:9e:47:d8:2b:91:51:04:de:55:3a:6e:
         39:fe:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org