Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a633030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a633030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          58cFeq81Dk+HBAgyxQ9cAugTASg+szkVzd7ImT2vI2c=
Subject key identifier:   D5:E1:A9:57:49:C7:FC:8B:A5:D4:36:01:F1:F2:FD:9C:B0:BF:46:01
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       6E4B76FEB62A5CEF95E108421AC7A7260B41AA8A
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a633030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:50 +0000
ROA not before:           Thu 04 Apr 2024 20:42:50 +0000
ROA not after:            Thu 03 Apr 2025 20:47:50 +0000
asID:                     262765
IP address blocks:        2804:1dfc:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4b:76:fe:b6:2a:5c:ef:95:e1:08:42:1a:c7:a7:26:0b:41:aa:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:50 2024 GMT
            Not After : Apr  3 20:47:50 2025 GMT
        Subject: CN=D5E1A95749C7FC8BA5D43601F1F2FD9CB0BF4601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:7d:68:1a:0a:1f:14:65:0f:1f:e6:9a:29:
                    46:53:25:7f:68:37:d2:fb:4e:c8:88:e9:a7:81:64:
                    81:fb:21:55:0f:69:00:9f:bf:7c:6c:ce:8d:d0:2b:
                    47:74:4c:55:39:3c:24:8f:b4:4f:aa:e4:c4:96:08:
                    52:a1:a1:81:12:6b:ae:38:91:54:e2:a4:71:58:44:
                    0e:12:44:d9:4b:92:23:b5:fb:41:55:7a:cf:ed:2b:
                    b9:35:1a:00:4d:82:17:39:77:bd:db:ea:62:06:d8:
                    a9:d4:a5:7a:6c:c2:b3:5b:6d:06:74:20:b3:51:86:
                    1e:43:d8:1d:c7:e8:e4:8a:ac:b6:76:db:3f:83:fa:
                    42:23:32:cf:bc:84:21:f1:9c:0e:d8:16:d8:60:f8:
                    f8:72:08:29:2e:d5:15:6c:46:a4:75:05:fc:97:57:
                    b2:de:94:3e:16:f5:8c:fd:2b:fe:d7:13:0c:c0:01:
                    b1:f2:03:d8:8a:a8:dc:fa:f3:94:53:65:d1:df:fd:
                    0d:d6:66:35:8b:b1:2a:04:03:b9:0f:f5:4d:ad:e3:
                    2a:b6:ee:06:55:81:aa:f0:f5:3e:cb:d6:a7:8b:aa:
                    38:f6:cc:2e:b2:84:77:aa:fd:40:dd:b1:52:c0:44:
                    66:fc:13:e6:f9:38:25:36:97:36:60:2b:72:f1:56:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E1:A9:57:49:C7:FC:8B:A5:D4:36:01:F1:F2:FD:9C:B0:BF:46:01
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a633030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:7d:dc:eb:47:e2:64:f8:f3:3a:7b:32:00:b9:43:ca:d8:
         e1:f6:94:8d:5b:5a:ca:e5:47:1c:00:65:9d:57:7a:c0:71:d7:
         63:b4:a2:0e:a9:9d:8d:0e:33:22:ce:36:37:d9:12:9f:11:36:
         b2:b6:7b:db:ad:de:84:ef:f1:99:96:5c:b7:25:08:92:55:c4:
         e4:a9:e9:8b:3c:e2:b3:1a:13:5d:07:4b:f1:b3:33:aa:cd:f4:
         e6:69:32:13:5b:b5:39:06:7f:12:ba:6a:34:1d:00:bc:2d:b9:
         cf:5e:91:48:b7:f7:8b:75:15:aa:cd:b6:23:74:3c:da:11:b5:
         1f:da:c1:43:e9:5b:da:6a:a4:5d:e7:79:55:5e:a8:51:a1:55:
         86:a5:2b:9e:e3:c2:a0:3f:2e:56:1d:bc:34:57:2e:d6:32:4e:
         e2:26:cf:c7:b7:5c:5b:32:3c:29:59:2d:6b:73:ca:25:03:c2:
         71:64:93:ec:92:d7:a2:61:51:e9:3e:d1:91:3f:7b:96:fa:b1:
         51:74:e4:e4:07:bc:97:ee:1b:87:40:f7:b1:b1:cd:ec:3a:0c:
         08:4b:e8:0c:77:91:8f:81:bc:14:30:43:30:34:6f:e8:9e:bf:
         b2:96:8e:4f:1d:d2:b1:52:91:a7:25:68:4e:7e:25:ee:86:f4:
         46:44:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org