Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          ONsSH7xTKf3YAs2Y8abVMYgTmShp/EdvLLJ2HchfZhY=
Subject key identifier:   CB:D0:36:D5:49:7D:D4:E4:BA:92:8E:4E:A0:36:E6:5A:05:10:28:8B
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       3329A66A5287A3AF30DAA70DD6FA63092B396670
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Thu 04 Apr 2024 20:47:45 +0000
ROA not before:           Thu 04 Apr 2024 20:42:45 +0000
ROA not after:            Thu 03 Apr 2025 20:47:45 +0000
asID:                     262765
IP address blocks:        2804:1dfc:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:29:a6:6a:52:87:a3:af:30:da:a7:0d:d6:fa:63:09:2b:39:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Apr  4 20:42:45 2024 GMT
            Not After : Apr  3 20:47:45 2025 GMT
        Subject: CN=CBD036D5497DD4E4BA928E4EA036E65A0510288B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:73:c5:da:ca:04:f4:be:f6:46:18:5d:14:f8:
                    01:48:93:a6:78:81:3f:83:5e:f4:69:61:63:c5:21:
                    00:5b:d9:e3:0d:00:67:fe:b8:7a:bf:fc:bb:dd:e0:
                    cf:b9:71:10:ad:43:41:a7:61:ec:cc:45:25:60:12:
                    a6:eb:5a:57:9a:e2:32:d0:48:c2:b6:c4:1b:96:66:
                    2e:b8:0b:fa:5c:01:e6:92:a1:f3:b7:76:a9:48:70:
                    c7:31:c3:4c:c8:5b:6f:a8:3c:66:a7:f1:3c:11:52:
                    43:88:82:2b:80:eb:b2:41:2c:98:a9:d0:bd:54:ce:
                    88:a4:e7:3f:b8:c1:63:a9:7c:9a:95:c4:51:69:8a:
                    6f:80:8e:a4:71:67:40:7c:ec:7b:80:79:91:32:ca:
                    ae:2c:c7:4e:a1:9f:31:5b:ca:43:05:77:96:55:48:
                    22:30:dd:d1:6e:a2:1f:45:bb:23:0e:c9:ac:a6:18:
                    2d:58:5b:8d:1e:42:9f:65:02:89:f8:f4:eb:e5:ea:
                    59:0b:d8:c5:f3:c9:18:c6:7c:c7:0c:8e:bd:3e:26:
                    14:06:67:90:c1:14:83:30:88:60:36:5b:cc:25:6a:
                    91:73:ba:e6:11:5d:7c:a6:16:72:f1:21:53:96:64:
                    8c:a5:cb:87:7a:7b:3a:5b:ff:b9:16:2c:05:19:b7:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D0:36:D5:49:7D:D4:E4:BA:92:8E:4E:A0:36:E6:5A:05:10:28:8B
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:0d:b2:27:b7:7a:59:ac:f4:d9:29:ad:4c:f3:3d:20:f9:
         4f:ef:69:f1:81:96:61:ff:05:53:11:6a:de:db:1f:ab:cd:c8:
         c6:69:01:98:eb:77:6f:9a:94:b6:bb:a0:a4:fd:da:df:38:c2:
         80:f6:91:33:3b:f2:70:a8:6c:d2:f0:0d:48:25:78:42:b4:8e:
         5e:97:e7:20:e7:39:74:ef:29:2c:54:8a:06:5a:1f:86:a0:20:
         dd:43:10:e5:e9:92:18:ad:f2:1f:6d:c1:90:7f:53:96:e8:23:
         ac:0d:a4:4b:66:20:ed:9f:a0:cd:5f:f0:f0:05:cf:a0:7b:c6:
         14:0d:c5:72:8a:62:ce:f4:b1:5e:95:5a:f1:d0:30:9b:6e:1d:
         73:14:f3:1a:5b:18:39:d5:e4:f0:40:6c:36:47:6a:93:df:f6:
         a1:8a:fa:2c:9b:36:42:ea:a6:9b:ae:df:51:d5:53:e5:e7:02:
         a3:39:53:b1:05:03:52:cb:ec:b7:28:d1:e3:1b:56:ee:bd:e4:
         2f:8b:d4:13:3d:8e:3a:98:c5:39:62:9a:0c:13:d4:fb:00:42:
         8e:e3:2e:52:ce:44:c1:69:e2:c6:12:b4:07:c6:8e:44:a5:44:
         f1:f7:ef:aa:69:d4:1b:f9:2e:38:7a:aa:be:ed:4e:06:55:af:
         aa:6a:4b:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUMymmalKHo68w2qcN1vpjCSs5ZnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENG
QzhBRjI4RDAeFw0yNDA0MDQyMDQyNDVaFw0yNTA0MDMyMDQ3NDVaMDMxMTAvBgNV
BAMTKENCRDAzNkQ1NDk3REQ0RTRCQTkyOEU0RUEwMzZFNjVBMDUxMDI4OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2c8XaygT0vvZGGF0U+AFIk6Z4
gT+DXvRpYWPFIQBb2eMNAGf+uHq//Lvd4M+5cRCtQ0GnYezMRSVgEqbrWlea4jLQ
SMK2xBuWZi64C/pcAeaSofO3dqlIcMcxw0zIW2+oPGan8TwRUkOIgiuA67JBLJip
0L1Uzoik5z+4wWOpfJqVxFFpim+AjqRxZ0B87HuAeZEyyq4sx06hnzFbykMFd5ZV
SCIw3dFuoh9FuyMOyaymGC1YW40eQp9lAon49Ovl6lkL2MXzyRjGfMcMjr0+JhQG
Z5DBFIMwiGA2W8wlapFzuuYRXXymFnLxIVOWZIyly4d6ezpb/7kWLAUZt07VAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUy9A21Ul91OS6ko5OoDbmWgUQKIswHwYDVR0j
BBgwFoAUj4AOHOJ7h/JP1912w0tp3PyK8o0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzEvOEY4MDBFMUNFMjdCODdGMjRGRDdERDc2QzM0QjY5RENGQzhBRjI4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjgwMEUxQ0UyN0I4N0YyNEZE
N0RENzZDMzRCNjlEQ0ZDOEFGMjhELmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzEvMzIz
ODMwMzQzYTMxNjQ2NjYzM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2Uy
MDMyMzYzMjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHfzwMA0GCSqGSIb3DQEBCwUAA4IB
AQAo1Q2yJ7d6Waz02SmtTPM9IPlP72nxgZZh/wVTEWre2x+rzcjGaQGY63dvmpS2
u6Ck/drfOMKA9pEzO/JwqGzS8A1IJXhCtI5el+cg5zl07yksVIoGWh+GoCDdQxDl
6ZIYrfIfbcGQf1OW6COsDaRLZiDtn6DNX/DwBc+ge8YUDcVyimLO9LFelVrx0DCb
bh1zFPMaWxg51eTwQGw2R2qT3/ahivosmzZC6qabrt9R1VPl5wKjOVOxBQNSy+y3
KNHjG1buveQvi9QTPY46mMU5YpoME9T7AEKO4y5SzkTBaeLGErQHxo5EpUTx9++q
adQb+S44eqq+7U4GVa+qakvf
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:06:58 2024 by rpki-client on console-ams.rpki-client.org