Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33322d3332203d3e20323632373635.roa
File:                     323830343a316466633a3a2f33322d3332203d3e20323632373635.roa (raw, json)
Hash identifier:          Xf8VQD0tDYGbTtaqqKx1is7RnmEew4Sn4YZIXZylH1c=
Subject key identifier:   71:0E:96:85:7F:B3:81:7C:64:BC:1C:57:41:16:26:E5:92:DD:D4:45
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       0F50A434424E313F09A88A049A072BF205A41B4E
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33322d3332203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:49 +0000
ROA not before:           Thu 04 Apr 2024 20:42:49 +0000
ROA not after:            Thu 03 Apr 2025 20:47:49 +0000
asID:                     262765
IP address blocks:        2804:1dfc::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:50:a4:34:42:4e:31:3f:09:a8:8a:04:9a:07:2b:f2:05:a4:1b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:49 2024 GMT
            Not After : Apr  3 20:47:49 2025 GMT
        Subject: CN=710E96857FB3817C64BC1C57411626E592DDD445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:96:7d:36:0f:6d:8b:3c:2a:e5:f4:28:61:2d:
                    b2:e7:23:9d:da:4f:69:38:cb:50:93:a5:5d:a8:6b:
                    b9:a7:58:83:0b:f1:5e:ba:19:73:a6:07:d3:f5:50:
                    85:21:f3:d5:f1:dd:f1:4a:85:1e:5d:ce:77:b1:d7:
                    23:e9:ee:e2:c7:b1:ee:df:41:74:8a:02:67:f9:cd:
                    4e:43:25:64:4a:3e:d1:58:26:64:dc:4a:2f:b3:34:
                    e3:9f:21:b8:d1:f4:6e:1d:53:19:51:78:c1:98:4c:
                    e8:17:29:1b:b9:c4:de:e6:fa:84:80:33:cb:4b:cf:
                    2e:f5:99:79:86:a8:45:7b:2f:13:39:46:a7:62:70:
                    27:12:b8:0a:69:60:0f:29:e3:bf:ab:6d:ba:36:15:
                    f1:2c:ac:d9:5a:cf:6b:de:b4:a8:d9:d9:2a:e6:c6:
                    1d:e1:6b:fb:be:31:8a:ea:a4:7d:51:cb:5e:13:f9:
                    35:85:74:71:f5:69:88:80:1e:0d:16:d1:10:3c:ab:
                    13:0d:ca:10:52:4a:f5:d3:9d:9a:d6:95:21:07:c5:
                    80:f7:50:08:de:74:37:08:e6:d4:91:b4:83:4e:d6:
                    eb:1d:ea:e9:46:1f:29:9c:bf:f3:75:6e:48:8c:b4:
                    e1:19:a9:5f:35:f8:42:1a:83:a1:1f:66:32:30:19:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0E:96:85:7F:B3:81:7C:64:BC:1C:57:41:16:26:E5:92:DD:D4:45
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33322d3332203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:69:b3:99:ca:f4:68:9f:6b:4d:80:9c:85:47:63:cf:a2:
         a9:fa:1c:c6:c2:80:3b:cf:55:4f:a9:33:e7:e3:96:54:39:1e:
         5b:49:69:61:67:e5:b2:54:b3:ca:bf:f1:df:1e:ac:43:8a:d1:
         3e:de:e3:01:bc:5c:04:4c:5a:11:94:c8:cf:b0:82:99:9f:ae:
         7a:7e:64:7d:cf:aa:d3:90:73:f4:a9:9d:9a:d5:36:69:62:56:
         5f:94:50:5f:d1:14:f0:80:8c:04:cc:75:d0:db:cb:d3:3a:f0:
         0a:ea:0d:4a:25:f8:12:d1:44:8d:ff:04:52:fd:77:54:c2:7c:
         0e:2a:65:f7:8d:5d:c3:9f:94:c5:2d:56:a9:4f:5f:d1:a2:01:
         45:1c:0c:21:73:c7:ae:ad:94:34:08:ac:13:0a:87:9a:cb:74:
         1b:dc:52:aa:03:12:d1:82:39:c7:c0:84:9d:68:d0:fa:f2:21:
         81:51:8e:cd:e1:3c:ac:1c:80:0c:27:73:30:80:3e:8f:0a:06:
         ce:96:db:05:04:49:22:d6:ce:92:25:6c:5e:cb:b2:b7:c4:b8:
         7f:9a:27:f1:d4:2c:64:d0:dd:d5:cf:77:ec:c4:3b:32:21:d2:
         ce:af:04:90:e1:39:55:ec:3b:20:4b:a1:fb:91:f6:96:e3:af:
         67:01:33:31
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUD1CkNEJOMT8JqIoEmgcr8gWkG04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNDlaFw0yNTA0MDMyMDQ3NDlaMDMxMTAvBgNV
BAMTKDcxMEU5Njg1N0ZCMzgxN0M2NEJDMUM1NzQxMTYyNkU1OTJEREQ0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsln02D22LPCrl9ChhLbLnI53a
T2k4y1CTpV2oa7mnWIML8V66GXOmB9P1UIUh89Xx3fFKhR5dznex1yPp7uLHse7f
QXSKAmf5zU5DJWRKPtFYJmTcSi+zNOOfIbjR9G4dUxlReMGYTOgXKRu5xN7m+oSA
M8tLzy71mXmGqEV7LxM5RqdicCcSuAppYA8p47+rbbo2FfEsrNlaz2vetKjZ2Srm
xh3ha/u+MYrqpH1Ry14T+TWFdHH1aYiAHg0W0RA8qxMNyhBSSvXTnZrWlSEHxYD3
UAjedDcI5tSRtINO1usd6ulGHymcv/N1bkiMtOEZqV81+EIag6EfZjIwGWZDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcQ6WhX+zgXxkvBxXQRYm5ZLd1EUwHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzIz
ODMwMzQzYTMxNjQ2NjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMyMzcz
NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQd/DANBgkqhkiG9w0BAQsFAAOCAQEAd9Zps5nK9Gif
a02AnIVHY8+iqfocxsKAO89VT6kz5+OWVDkeW0lpYWflslSzyr/x3x6sQ4rRPt7j
AbxcBExaEZTIz7CCmZ+uen5kfc+q05Bz9KmdmtU2aWJWX5RQX9EU8ICMBMx10NvL
0zrwCuoNSiX4EtFEjf8EUv13VMJ8Dipl941dw5+UxS1WqU9f0aIBRRwMIXPHrq2U
NAisEwqHmst0G9xSqgMS0YI5x8CEnWjQ+vIhgVGOzeE8rByADCdzMIA+jwoGzpbb
BQRJItbOkiVsXsuyt8S4f5on8dQsZNDd1c937MQ7MiHSzq8EkOE5Vew7IEuh+5H2
luOvZwEzMQ==
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org