Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a653030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a653030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          DDEWAjez8lBfTkSbkrvgBTPD17O2w+X0UmG5mY50MqY=
Subject key identifier:   1B:8F:77:8B:F9:42:93:88:04:AA:57:8E:83:9E:68:F7:76:A1:BB:92
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       647CFB8A9A30A8B52E8E273CB9F06BAC6352D521
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a653030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:54 +0000
ROA not before:           Thu 04 Apr 2024 20:42:54 +0000
ROA not after:            Thu 03 Apr 2025 20:47:54 +0000
asID:                     262765
IP address blocks:        2804:1dfc:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7c:fb:8a:9a:30:a8:b5:2e:8e:27:3c:b9:f0:6b:ac:63:52:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:54 2024 GMT
            Not After : Apr  3 20:47:54 2025 GMT
        Subject: CN=1B8F778BF942938804AA578E839E68F776A1BB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:09:e6:a0:b6:60:85:2b:5d:90:2f:27:9b:
                    44:70:b4:fb:c7:b5:d5:9e:09:27:30:84:4e:85:2e:
                    7b:8d:6a:54:6a:11:7d:f8:1a:2a:9f:28:2f:a3:2d:
                    43:a6:51:94:6e:4d:f9:56:2b:10:d6:2c:f8:0f:9f:
                    42:f1:80:c7:f2:9a:8c:84:fd:ec:e6:91:ca:f4:38:
                    00:2c:aa:54:dc:1a:30:3f:c1:4a:a8:7b:8e:24:ac:
                    47:29:78:ba:76:2c:db:e0:7c:2c:30:18:96:ec:fd:
                    77:9e:2c:f4:3c:4f:d1:0b:b7:af:96:16:98:ea:af:
                    22:f0:b0:f7:53:13:7c:54:f6:01:02:c5:fe:82:30:
                    da:b4:fa:ae:10:cd:17:d6:97:c5:5d:e7:8f:7e:81:
                    15:20:05:f8:04:9e:d9:06:1c:28:42:d5:ba:f0:4b:
                    99:3f:b1:8d:e3:5d:cc:af:a7:7a:65:6a:02:45:96:
                    d4:9d:bc:bb:8e:c3:b0:93:0a:91:b1:07:6d:5f:0b:
                    1b:fa:0d:db:c4:6e:72:7d:e8:14:3d:f0:93:fc:81:
                    ef:e4:cf:89:2b:ea:c0:eb:b8:78:52:05:59:69:6a:
                    47:9b:ff:c1:68:25:36:80:30:31:eb:da:e5:04:69:
                    64:16:7c:24:05:24:ad:d1:8e:ed:d7:b5:0a:46:fb:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8F:77:8B:F9:42:93:88:04:AA:57:8E:83:9E:68:F7:76:A1:BB:92
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a653030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8b:14:5b:ae:65:5d:4b:cb:6b:e9:3c:a5:84:e5:d6:2b:08:b3:
         37:b3:51:cd:20:11:2d:a9:f8:9c:a0:9e:1b:81:a8:13:5b:26:
         f8:5f:f3:2f:e6:dd:e4:20:ab:3f:d0:73:4e:d8:aa:6b:8b:1a:
         28:76:c0:c5:a1:25:92:b1:32:74:d6:0b:c7:ea:5c:f0:1f:40:
         d7:0c:04:87:32:fc:51:f9:49:cf:01:75:4c:17:94:15:14:da:
         b2:4d:a1:f1:af:c2:93:07:f8:d3:7f:73:2e:e3:2e:dc:94:7f:
         ee:25:7d:81:73:97:71:a2:aa:c0:dc:60:29:2c:2d:63:c5:f6:
         86:1e:63:64:a2:e7:9b:82:73:cd:e2:7a:f7:21:90:87:ce:b6:
         30:2b:4d:74:1a:e4:fe:b1:e3:f2:21:cb:74:6d:d9:69:a7:6b:
         9e:da:38:c8:a6:5a:07:8c:c3:9f:b9:cf:1e:57:7c:6a:3c:66:
         bc:34:0b:70:42:f7:84:c7:37:d1:cb:2b:9d:70:8d:6a:f1:4b:
         24:a2:92:b6:27:ca:c5:e6:75:9d:8a:d2:f1:1a:dd:35:ca:24:
         0d:46:80:c4:c3:71:f0:ed:3f:66:80:98:0f:d7:3b:d3:9e:b7:
         b4:01:7c:79:50:05:66:c7:3d:f3:62:ec:1e:bd:ce:af:66:65:
         98:0b:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 14:34:50 2024 by rpki-client on console-fra.rpki-client.org