Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33332d3333203d3e20323632373635.roa
File:                     323830343a316466633a3a2f33332d3333203d3e20323632373635.roa (raw, json)
Hash identifier:          mkQMgvzUUeEpdsrUQKPyiofCj2ANCN6Y7zoFvvh/rk0=
Subject key identifier:   BB:D4:45:50:6C:F3:83:FF:7A:BA:95:F9:D6:C1:68:6D:CF:96:FD:AF
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       4B8240606C2588F2DE817D5D26B22C136795EA35
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33332d3333203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:49 +0000
ROA not before:           Thu 04 Apr 2024 20:42:49 +0000
ROA not after:            Thu 03 Apr 2025 20:47:49 +0000
asID:                     262765
IP address blocks:        2804:1dfc::/33 maxlen: 33

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:82:40:60:6c:25:88:f2:de:81:7d:5d:26:b2:2c:13:67:95:ea:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:49 2024 GMT
            Not After : Apr  3 20:47:49 2025 GMT
        Subject: CN=BBD445506CF383FF7ABA95F9D6C1686DCF96FDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:53:25:33:80:41:f4:42:de:9b:a0:f5:61:
                    d0:90:fd:31:05:fc:8b:4a:09:21:73:ca:6e:41:51:
                    b5:99:86:55:40:02:d1:e7:f2:d4:8e:b5:25:39:7f:
                    44:78:ef:56:51:6d:d1:0a:44:e3:ab:d3:7c:9b:d8:
                    d5:9a:a3:6c:4d:c7:bc:ac:cd:15:82:6a:0b:fe:f7:
                    c3:54:29:b1:0d:b9:74:1a:14:f6:94:f5:ce:48:c3:
                    5e:2b:41:06:1c:b0:06:83:51:51:8f:22:03:52:4e:
                    95:18:ea:5a:5f:e2:90:d7:6e:d2:15:37:60:2b:c1:
                    58:78:3e:29:90:d0:7f:43:b8:e7:fe:eb:1b:be:1a:
                    27:8a:06:8a:1d:f3:3e:90:cf:40:89:94:f2:cf:8b:
                    14:f1:d2:41:66:5d:be:50:08:6a:ab:3a:db:29:e3:
                    41:4a:b9:89:1a:af:01:60:ea:34:87:68:c6:b6:1c:
                    de:5b:a7:9e:86:6a:be:fc:b4:f7:c2:5d:10:bc:13:
                    5a:fb:07:b6:dc:50:84:96:a5:e2:51:d8:16:30:b7:
                    0f:ab:28:20:96:90:fc:cf:03:be:3e:2d:9a:9b:ca:
                    d2:d9:b6:c2:73:b2:66:81:40:99:2d:fc:c3:e4:a0:
                    52:de:50:94:4a:d4:42:2f:eb:73:84:e1:11:96:22:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D4:45:50:6C:F3:83:FF:7A:BA:95:F9:D6:C1:68:6D:CF:96:FD:AF
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33332d3333203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc::/33

    Signature Algorithm: sha256WithRSAEncryption
         3b:14:b1:83:6c:7f:c5:d7:ed:7d:f1:7e:a0:e0:96:c2:c5:56:
         07:89:e9:56:1b:5b:ec:87:da:14:be:0c:da:bf:59:61:02:90:
         19:ad:95:76:38:fe:7f:e0:09:c7:a0:96:bc:dd:d3:e9:bd:bf:
         26:5d:4b:99:47:c1:96:ed:a6:a5:ab:d1:10:6a:12:11:85:2e:
         4a:94:1a:44:2d:81:a6:35:c0:e1:1b:c4:15:37:54:ab:1f:35:
         1f:3c:ac:65:04:f1:41:95:d1:2c:cf:8c:9f:89:63:58:ff:1e:
         03:00:e4:d7:86:a1:8b:c9:93:24:5f:e9:9a:ed:8a:be:20:6d:
         ef:95:61:ec:3b:79:e4:85:72:a8:ad:23:2c:3a:5e:d4:6f:87:
         e7:e6:b1:3a:33:78:81:7b:b3:57:c9:ec:f8:15:0e:79:f6:41:
         ab:d4:0a:6b:ce:00:3e:12:7f:78:fc:83:9b:5a:40:5b:75:ca:
         40:92:27:27:b6:2a:5b:a8:58:31:ab:33:5c:d9:56:41:97:c8:
         d8:4c:3f:bf:29:51:23:39:95:e5:e4:80:8f:96:30:ee:32:29:
         d7:ce:bf:6c:06:fb:6c:ac:2a:ba:61:25:ee:24:ca:76:e4:05:
         72:1f:d4:78:81:43:07:8e:58:ae:03:0b:03:39:e9:f9:98:a7:
         47:d0:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org