Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa
File:                     3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          hitTdOAtsqCFWO4rDeLH3VPR7bceUNMzrNuGpz8Otds=
Subject key identifier:   8E:D0:1F:23:1F:AC:DB:FD:BF:1A:11:2D:CA:65:82:21:CB:93:D1:77
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       23831C9D7DFC9729E0374B18C7986BF7113D3946
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        131.108.200.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:83:1c:9d:7d:fc:97:29:e0:37:4b:18:c7:98:6b:f7:11:3d:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:bc:21:8d:c3:47:fb:35:91:37:30:96:ad:
                    86:6a:ad:ad:21:dd:56:3f:3c:60:8d:f4:9a:17:dc:
                    e6:a5:70:33:51:53:3e:dd:86:2f:2f:07:30:ed:92:
                    76:73:63:ac:de:35:87:12:52:81:f6:41:dc:88:c8:
                    64:e8:57:70:25:75:9e:a6:89:dd:74:2b:16:ba:86:
                    af:6f:e5:2f:ed:e4:2b:dc:c7:cd:2d:31:dc:04:c3:
                    92:77:95:62:47:3d:41:ea:46:53:71:0d:3f:22:55:
                    18:0b:ef:30:d7:8f:ab:3f:66:a9:ef:0d:cb:1f:a3:
                    ce:65:d6:95:0e:f9:bb:94:a0:93:83:d3:81:6b:da:
                    0c:cd:af:11:bc:ac:64:85:f3:53:11:81:cb:7f:f5:
                    e0:04:df:d2:61:a2:64:7d:48:0e:70:ff:79:ce:3d:
                    a4:0a:af:5a:70:f6:11:34:15:ab:4f:2f:9c:b4:a9:
                    b8:be:ca:1c:94:a5:f2:fb:7f:73:db:a8:fd:22:2f:
                    97:16:b9:8b:26:21:d2:ae:e8:22:cf:b7:84:86:df:
                    3e:d6:e6:1f:81:39:9c:c5:ff:f3:a4:c6:ce:87:a7:
                    6a:8c:88:75:15:96:53:48:06:05:33:ab:9e:46:09:
                    2c:92:40:4b:ac:9c:23:12:7e:f7:9a:cd:d1:b9:cc:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:1F:23:1F:AC:DB:FD:BF:1A:11:2D:CA:65:82:21:CB:93:D1:77
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:7a:5b:8b:57:ba:71:f8:41:ed:d1:f1:24:de:9f:48:5b:05:
         44:4f:b8:ab:cd:64:7e:b3:17:d9:67:f4:3f:3b:b0:c6:cc:71:
         b7:4f:a6:5a:1e:64:99:1d:a9:06:e1:b9:ac:80:0e:c1:b0:9a:
         37:d1:aa:51:17:37:e8:7f:e1:d0:43:cf:fe:2d:91:04:78:48:
         51:d5:25:74:64:a2:6d:d4:bc:80:16:23:24:b3:b9:bc:bf:1a:
         6f:93:65:74:a8:91:aa:82:14:01:9a:64:36:3b:0d:e7:26:58:
         98:ae:24:03:51:a6:4c:ed:14:2e:9c:63:f1:1b:0a:fb:2f:89:
         73:b4:69:bc:06:12:2a:bd:d5:7f:42:c7:5c:26:41:11:8b:4e:
         94:fe:1e:62:7a:8a:6e:94:64:48:c8:06:7e:ac:5f:ce:45:29:
         6f:cf:ac:ee:eb:21:5a:e4:7e:d6:84:d7:76:96:22:b7:73:fe:
         4f:04:ce:2c:55:85:93:49:a3:8f:de:7d:a5:31:4b:06:fd:57:
         6a:1a:fe:f9:32:52:3d:23:19:f9:98:ba:84:66:bb:b9:90:fd:
         95:0b:96:4f:db:ae:18:c3:1b:95:f2:98:08:5b:14:d9:ad:33:
         eb:a6:38:9b:59:ac:31:82:e9:b0:da:75:80:84:e9:9c:5b:43:
         0a:5d:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org