Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a633030303a3a2f33342d3334203d3e20323632373635.roa
File:                     323830343a316466633a633030303a3a2f33342d3334203d3e20323632373635.roa (raw, json)
Hash identifier:          jxpiaRD+Hc+kxsjObhNDJVo0gLmxO95WJ4vFKnzrLh8=
Subject key identifier:   36:A2:06:3A:01:7A:5E:B9:D4:94:92:8A:16:95:72:6B:F2:A2:3E:0E
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       79A2D9848024B33A0F6E3952BBBBE85FA6FBFA0F
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a633030303a3a2f33342d3334203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:55 +0000
ROA not before:           Thu 04 Apr 2024 20:42:55 +0000
ROA not after:            Thu 03 Apr 2025 20:47:55 +0000
asID:                     262765
IP address blocks:        2804:1dfc:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:d9:84:80:24:b3:3a:0f:6e:39:52:bb:bb:e8:5f:a6:fb:fa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:55 2024 GMT
            Not After : Apr  3 20:47:55 2025 GMT
        Subject: CN=36A2063A017A5EB9D494928A1695726BF2A23E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:7f:17:83:31:64:83:fa:68:0d:af:2a:49:
                    b1:38:79:fb:d8:c9:11:a9:7b:7f:73:69:95:44:1e:
                    75:bb:95:02:23:67:64:87:1c:07:1b:47:06:97:31:
                    f3:2a:8a:5e:39:b4:5c:40:04:ad:dd:f5:3b:35:05:
                    d8:a9:c4:13:2c:a1:b0:d0:52:26:d8:33:c1:ab:e3:
                    9f:ae:dd:05:dc:4b:37:11:94:77:71:5b:ec:49:44:
                    07:88:09:88:55:56:ef:79:8c:50:c5:80:2e:51:d1:
                    c2:12:93:44:96:f7:19:52:34:11:f2:b2:8c:2b:56:
                    e4:09:11:5b:14:8d:9c:90:2d:20:75:07:ba:15:a6:
                    94:fe:68:e6:31:af:63:6f:76:fa:d2:b7:d5:ae:bb:
                    2c:91:69:26:38:1b:bb:f3:d9:bf:7b:2f:c4:d3:28:
                    bf:09:b4:9c:f4:69:ed:db:d6:68:be:a4:44:7d:a6:
                    84:44:41:c6:67:07:30:e1:c0:33:c7:78:58:c8:1d:
                    1c:96:ff:0c:0b:c2:d4:6a:e2:9b:69:04:50:22:cb:
                    a3:2e:5b:68:1e:14:2a:e5:bd:0a:17:7c:3a:e2:57:
                    4c:91:09:61:6b:df:8f:3c:9d:7a:35:0d:92:69:6b:
                    10:07:3a:30:48:1a:8f:73:ff:ab:74:94:7c:1e:f4:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:06:3A:01:7A:5E:B9:D4:94:92:8A:16:95:72:6B:F2:A2:3E:0E
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a633030303a3a2f33342d3334203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:f5:31:bc:d2:b1:9a:32:58:22:9e:57:8e:13:72:03:e3:
         3c:dd:13:5a:4c:d6:80:58:e1:b3:9b:45:a7:2c:7d:a0:f2:78:
         b3:bc:bd:96:15:7a:99:56:29:df:b3:12:41:0a:9b:12:bf:5a:
         c9:ed:5c:ae:22:a8:4f:77:53:59:86:d8:ed:36:90:f8:51:37:
         f7:64:cf:a2:20:6b:b6:68:23:fd:f7:b5:e7:c1:da:b9:4e:33:
         05:70:bf:ce:b1:53:08:92:51:78:aa:5a:a9:33:76:a2:ff:67:
         f0:28:ce:1d:80:22:0f:04:e7:cd:c7:8c:99:0f:6e:de:41:3a:
         34:dc:e4:20:22:24:8b:9a:50:f7:f4:c2:08:ac:0b:d2:01:fd:
         3d:8b:c7:eb:d9:6a:a4:58:20:7a:c7:ad:aa:b6:1b:29:bd:b7:
         f5:49:6f:7a:f5:a2:05:9f:3d:0c:c5:ac:3f:18:83:93:41:3d:
         33:54:c8:cc:cb:32:bd:ff:44:d3:7d:3f:18:d1:f1:65:51:a3:
         1d:e3:76:01:52:6d:b4:5f:d4:c5:e5:9a:4e:fd:21:38:45:7e:
         9f:64:f1:29:08:41:91:c8:20:c3:9e:8d:8a:21:29:dd:a9:ea:
         93:4a:ee:64:33:e4:e1:21:ef:fb:26:b9:e5:d0:6f:8d:fb:2d:
         c1:78:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org