Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230302e302f32332d3233203d3e20323632363931.roa
File:                     3133312e3130382e3230302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          gbdYc+ieDho0qjX5aUirARWA6NTGU+jlMZXo/6A96yc=
Subject key identifier:   5C:1F:F4:62:D0:B8:56:AC:30:B2:C5:73:11:DD:7A:33:E2:03:40:E3
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       5F1D8DDACE49649EB107439468147140BE9824D0
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230302e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        131.108.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1d:8d:da:ce:49:64:9e:b1:07:43:94:68:14:71:40:be:98:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:46:4a:58:40:ba:27:9b:3d:0c:8a:e8:52:
                    c4:49:d2:08:8f:d6:7e:95:82:e9:a0:c2:74:67:fc:
                    65:ec:42:41:03:e9:97:2f:63:2b:a5:f8:46:79:f3:
                    c2:95:9c:1b:42:3a:2b:4f:a7:df:50:c2:b7:c3:80:
                    bc:ee:96:93:20:fd:1f:8c:20:56:db:27:42:db:ff:
                    63:03:a4:d1:59:42:95:a3:45:d0:25:12:1c:9e:c8:
                    90:b0:06:16:26:a7:16:25:06:de:ae:dc:1d:dd:6f:
                    c3:1c:64:dc:3c:85:6a:89:74:73:a9:1b:08:2b:40:
                    94:6d:00:6d:c4:7f:4e:4b:6f:41:c2:46:d7:e1:f8:
                    85:8d:98:ff:52:e2:f5:60:18:4d:4f:68:71:f0:f4:
                    fc:fe:8d:e0:4c:50:78:01:da:8d:5a:fa:2c:00:35:
                    08:62:c2:7b:9e:e9:51:47:a5:74:26:05:60:f3:8f:
                    8d:ee:29:1c:48:c8:57:30:ea:96:d8:50:32:1b:f4:
                    eb:ae:a6:3d:0a:86:11:69:5c:56:b1:8a:87:e4:11:
                    29:dc:b2:a6:03:36:78:f8:2f:e4:8b:40:5c:e6:fd:
                    12:1f:d6:ae:82:c0:7a:2f:ae:87:57:f9:ac:df:92:
                    2b:84:49:b8:38:e0:51:30:8f:65:ad:f5:b4:80:0f:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1F:F4:62:D0:B8:56:AC:30:B2:C5:73:11:DD:7A:33:E2:03:40:E3
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:fc:28:fd:ed:ef:13:9e:c6:11:57:47:4e:67:bb:d5:2d:6d:
         71:a3:21:97:cc:55:59:bb:87:72:2a:0a:65:14:be:6f:48:b7:
         e8:40:18:f5:37:d0:a8:83:f5:0b:c8:fb:f8:6f:52:10:cc:66:
         9b:3f:34:e8:ea:fc:30:b0:37:78:10:2a:59:ce:70:90:22:dc:
         9f:53:8b:b5:24:0f:98:ff:b7:12:fd:9b:c2:35:9f:bc:45:05:
         87:b4:62:79:9b:f4:88:5d:72:d5:ad:79:5b:51:74:27:a2:24:
         14:d7:82:fb:4a:79:31:dc:c5:ed:6b:68:da:ae:1c:67:8d:9e:
         57:04:f7:5f:5b:09:10:0a:84:50:5a:bb:bc:89:4e:4d:95:5b:
         bb:d4:5a:3c:65:c1:9c:28:dd:a7:eb:23:4b:87:03:3c:68:f4:
         54:00:65:2e:2d:ef:7b:e6:9f:46:6b:44:4e:54:8b:39:a5:83:
         ee:02:2f:a9:79:05:57:c4:ab:22:43:63:ef:18:df:92:ec:5a:
         d2:b1:31:ed:06:93:ec:17:79:28:c2:8d:73:96:3f:77:b7:be:
         16:51:b6:aa:cf:db:10:e1:3b:02:77:06:2a:e3:65:c5:59:51:
         dd:ba:ab:84:d8:11:69:6c:60:7e:0e:e0:c0:3f:88:9a:fa:6b:
         b5:9d:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org