Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33342d3334203d3e20323632373635.roa
File:                     323830343a316466633a3a2f33342d3334203d3e20323632373635.roa (raw, json)
Hash identifier:          UPz+yRYtjOPueBCsgaBkWftoDHe1e4Qv3Ioaym+1Gsk=
Subject key identifier:   5A:56:53:F0:27:C8:20:98:95:DA:8E:27:3A:64:D4:CF:61:2F:48:66
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       13291DFD1BFA2C3A43AF1A217367ED56B5A63B35
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33342d3334203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:47 +0000
ROA not before:           Thu 04 Apr 2024 20:42:47 +0000
ROA not after:            Thu 03 Apr 2025 20:47:47 +0000
asID:                     262765
IP address blocks:        2804:1dfc::/34 maxlen: 34

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:29:1d:fd:1b:fa:2c:3a:43:af:1a:21:73:67:ed:56:b5:a6:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:47 2024 GMT
            Not After : Apr  3 20:47:47 2025 GMT
        Subject: CN=5A5653F027C8209895DA8E273A64D4CF612F4866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ff:b4:6c:08:3e:0b:77:cc:52:75:aa:79:1d:
                    79:bb:45:83:af:fa:5d:05:c0:a2:6f:cf:4f:de:d1:
                    b8:c1:02:78:a0:2d:7b:99:82:d6:9f:b9:42:e8:0d:
                    5b:8c:8b:09:a9:a6:3a:da:29:b4:c0:00:95:e7:78:
                    55:dd:dd:7d:56:8f:d5:63:c6:c1:ba:89:ad:bf:4a:
                    9f:03:b6:df:f2:5a:cd:3c:67:82:7d:04:51:11:39:
                    fb:b8:df:2e:6f:b9:3d:d8:6d:87:dd:29:47:25:57:
                    06:92:fa:27:fd:67:6c:ff:93:06:38:45:e8:69:95:
                    09:b1:d8:7f:e7:ae:af:a5:95:07:b7:c2:42:d4:5e:
                    be:e4:16:f7:29:95:84:a5:f0:0d:f0:7e:b5:c3:f9:
                    7e:f6:47:c1:16:e3:ab:85:1d:b5:ee:b8:61:a2:31:
                    da:9e:70:3d:5d:98:ea:d0:20:79:41:9a:29:c6:61:
                    84:5f:fb:e6:44:dc:ef:1c:e3:ee:cb:d3:f5:08:a9:
                    29:94:71:72:42:28:d2:a1:38:dd:57:e2:12:7c:84:
                    8b:a1:f6:19:c3:7e:c0:e2:2d:0c:0c:91:59:a7:a1:
                    9e:77:f2:a4:1f:07:c9:52:1c:b0:b2:ea:1b:8a:3f:
                    a0:47:b9:97:b0:23:9b:b6:64:ca:9f:ea:a7:37:63:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:56:53:F0:27:C8:20:98:95:DA:8E:27:3A:64:D4:CF:61:2F:48:66
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a3a2f33342d3334203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc::/34

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:ba:70:48:11:ab:4c:3d:31:d9:a8:79:d5:39:c0:36:0a:
         37:98:06:2d:83:19:b5:f6:5a:24:5b:af:81:88:ba:a1:03:3b:
         5c:80:f2:a9:e4:3b:26:01:37:38:fc:2a:3a:58:96:36:83:e7:
         dd:ab:c6:1f:51:b2:a1:f7:9f:e6:e5:9b:a9:a0:a5:c9:3d:82:
         d2:f5:76:e2:d9:a6:69:63:69:40:e8:52:33:c3:59:e3:5b:95:
         46:5c:a0:17:33:61:4b:c0:2f:0e:f9:5b:82:28:17:99:6c:88:
         a8:8d:d5:36:81:db:c8:89:16:d2:19:b2:48:d3:c8:06:b3:38:
         24:1a:26:6a:02:89:40:c1:16:da:b4:0d:df:68:5d:8c:58:68:
         fa:0f:e0:2c:73:79:51:e0:7d:c3:78:1e:44:2b:3c:5f:92:15:
         11:5b:99:3d:7b:d7:3a:cc:2b:72:a6:6f:17:71:2e:df:d2:50:
         55:fa:0b:e5:ec:86:67:25:fc:a7:ed:33:3b:7e:e9:22:3f:09:
         d1:50:89:5a:8d:05:97:4a:b6:a4:37:c0:22:37:77:c6:c8:1c:
         c7:a9:bb:2c:89:64:e9:bf:b5:5d:76:f8:9e:90:9a:18:99:ec:
         7d:ec:bb:fd:73:01:8c:79:79:08:7e:cd:de:64:a9:43:98:8e:
         fd:ff:a6:4b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUEykd/Rv6LDpDrxohc2ftVrWmOzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNDdaFw0yNTA0MDMyMDQ3NDdaMDMxMTAvBgNV
BAMTKDVBNTY1M0YwMjdDODIwOTg5NURBOEUyNzNBNjRENENGNjEyRjQ4NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2/7RsCD4Ld8xSdap5HXm7RYOv
+l0FwKJvz0/e0bjBAnigLXuZgtafuULoDVuMiwmppjraKbTAAJXneFXd3X1Wj9Vj
xsG6ia2/Sp8Dtt/yWs08Z4J9BFEROfu43y5vuT3YbYfdKUclVwaS+if9Z2z/kwY4
RehplQmx2H/nrq+llQe3wkLUXr7kFvcplYSl8A3wfrXD+X72R8EW46uFHbXuuGGi
MdqecD1dmOrQIHlBminGYYRf++ZE3O8c4+7L0/UIqSmUcXJCKNKhON1X4hJ8hIuh
9hnDfsDiLQwMkVmnoZ538qQfB8lSHLCy6huKP6BHuZewI5u2ZMqf6qc3Y2ZZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWlZT8CfIIJiV2o4nOmTUz2EvSGYwHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzIz
ODMwMzQzYTMxNjQ2NjYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMyMzcz
NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYGKAQd/AAwDQYJKoZIhvcNAQELBQADggEBAFekunBIEatM
PTHZqHnVOcA2CjeYBi2DGbX2WiRbr4GIuqEDO1yA8qnkOyYBNzj8KjpYljaD592r
xh9RsqH3n+blm6mgpck9gtL1duLZpmljaUDoUjPDWeNblUZcoBczYUvALw75W4Io
F5lsiKiN1TaB28iJFtIZskjTyAazOCQaJmoCiUDBFtq0Dd9oXYxYaPoP4CxzeVHg
fcN4HkQrPF+SFRFbmT171zrMK3KmbxdxLt/SUFX6C+Xshmcl/KftMzt+6SI/CdFQ
iVqNBZdKtqQ3wCI3d8bIHMepuyyJZOm/tV12+J6QmhiZ7H3su/1zAYx5eQh+zd5k
qUOYjv3/pks=
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org