Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          a9wxBU+KoQOpQ3e9M2a5EwSF5npF+NZmBMHPp9p/rtk=
Subject key identifier:   01:0F:D2:53:C3:93:4C:3D:A9:2A:9C:F2:77:04:CF:6C:7B:CE:B2:6C
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       39362AC14AB83F469B5B5E97A6845E5E4C04B8B5
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:41 +0000
ROA not before:           Thu 04 Apr 2024 20:42:41 +0000
ROA not after:            Thu 03 Apr 2025 20:47:41 +0000
asID:                     262765
IP address blocks:        2804:1dfc:d000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:36:2a:c1:4a:b8:3f:46:9b:5b:5e:97:a6:84:5e:5e:4c:04:b8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:41 2024 GMT
            Not After : Apr  3 20:47:41 2025 GMT
        Subject: CN=010FD253C3934C3DA92A9CF27704CF6C7BCEB26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:79:68:df:66:e2:21:a5:38:56:9c:62:d9:
                    f7:bd:e7:4e:44:17:af:09:d6:ce:b6:b3:7c:60:b0:
                    14:2f:e5:8c:b2:a7:9a:6c:2c:54:17:c5:4a:24:1f:
                    6a:99:03:99:f5:35:e0:a9:63:49:c5:d0:92:c8:a9:
                    5e:46:9d:9d:cf:e0:32:ba:be:a1:1e:6d:c1:9c:e0:
                    06:74:34:05:61:a5:44:22:3c:f6:3d:b5:45:c7:51:
                    9d:99:46:df:c3:6f:38:6f:5a:0d:ca:eb:86:1c:a1:
                    fa:0d:8f:23:6e:4e:8a:2b:5b:e8:2d:f2:59:30:1c:
                    39:cd:86:25:d9:89:52:43:06:5f:c0:b6:0a:d7:71:
                    28:89:b5:35:9e:85:ac:32:95:5a:dc:99:79:63:37:
                    e3:7c:34:df:b8:04:ef:a0:7c:0f:b0:3f:79:77:23:
                    19:e2:65:24:9e:3f:b8:fc:7f:af:df:da:da:f5:4d:
                    98:8f:96:03:25:11:0a:ed:2c:3e:8a:52:89:29:d0:
                    95:82:eb:ef:dc:61:de:90:bd:16:62:74:cc:4d:05:
                    2a:94:24:9e:10:10:44:fe:89:5a:5a:71:9a:fa:3d:
                    d9:43:af:07:a2:dc:47:b9:96:27:18:34:2b:ac:88:
                    d5:a6:49:cd:4f:53:0a:0d:15:c4:13:1c:4a:e7:eb:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0F:D2:53:C3:93:4C:3D:A9:2A:9C:F2:77:04:CF:6C:7B:CE:B2:6C
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:24:4e:23:ef:3e:67:12:2c:82:2f:d0:69:36:47:65:49:6a:
         f3:77:8d:82:a4:7f:92:e1:a5:7f:f1:c9:36:a3:be:eb:83:23:
         92:3a:36:d1:67:85:30:83:98:f5:e1:e6:3d:2d:63:49:ae:6e:
         19:4b:71:38:42:b1:41:63:f4:43:a1:6b:5a:1f:36:83:49:2a:
         20:4f:0a:e4:ad:81:d6:2c:3a:24:bb:b7:85:a8:dd:b8:12:4a:
         fe:c6:0e:b0:80:64:9b:af:99:04:bd:17:2c:2e:50:b9:77:1d:
         e8:a5:10:e9:60:7e:b9:e1:fa:7f:f0:80:0f:b0:00:f5:25:36:
         99:a4:71:71:7c:ae:12:7c:eb:b4:89:a6:33:6a:2a:90:b7:6b:
         cb:4c:52:71:5c:f3:bb:a3:f5:1f:af:33:3f:ba:4a:fc:9e:ad:
         13:6f:51:22:68:5c:b1:0f:c0:11:08:5b:ac:9c:41:b8:b1:67:
         b9:0c:d0:06:6d:2f:e6:d1:d3:ee:d1:aa:75:ef:b1:e5:af:2f:
         c3:67:19:73:67:84:ff:05:30:30:c4:60:ed:8f:7c:5d:2f:c1:
         d0:7a:7c:17:28:6b:96:02:f4:8c:4d:bd:05:2f:a0:47:16:f4:
         72:66:6d:46:38:7a:b4:80:18:44:bd:4e:80:f0:5e:89:b4:5d:
         97:bd:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org