Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa
File:                     3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          oejTuV0SVaO3nRFONb9Fvwi9xl+DP12lf9UWwlcf1dU=
Subject key identifier:   CF:53:6D:86:57:A8:C6:43:3D:A1:9C:5F:65:C8:AA:9B:AA:16:F3:86
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       79CCB48AB5D6C466AF2C3AF73C9F7FC978C113AD
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     262691
IP address blocks:        131.108.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:b4:8a:b5:d6:c4:66:af:2c:3a:f7:3c:9f:7f:c9:78:c1:13:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:f5:c4:80:fa:4c:cf:51:d8:ea:9b:4f:9b:
                    d6:bc:00:83:17:8c:33:97:07:6d:98:e1:db:f1:7c:
                    ea:3a:58:84:ac:1c:ad:0e:90:59:d7:c3:58:0d:fe:
                    60:3d:07:8a:ed:af:36:36:22:a3:e7:bb:40:6f:5f:
                    46:40:b1:13:57:e7:0f:8c:99:ba:2b:89:96:0d:a1:
                    20:ff:1d:61:54:b9:80:34:41:d6:55:fe:50:1c:66:
                    23:6c:75:9c:ca:80:22:ef:3c:63:54:85:01:1c:d4:
                    42:81:87:c4:6b:4b:ee:a5:da:40:d3:a3:52:ed:7b:
                    25:20:04:83:fc:52:ec:cc:8f:6a:5a:5e:bf:d7:70:
                    38:49:02:1e:6d:34:db:57:a5:74:e0:c3:ea:83:4d:
                    bc:7b:4c:dd:fc:9d:41:96:e7:18:69:f8:eb:eb:47:
                    6a:23:7d:8b:20:47:50:33:40:cb:9b:7f:9f:73:22:
                    c2:f1:c8:38:55:72:70:82:dd:a5:cb:da:97:04:54:
                    04:f8:5c:8a:ea:29:c6:da:b8:f7:aa:da:03:bb:1b:
                    f8:04:ad:63:13:80:df:b7:5c:fc:80:3b:d1:84:10:
                    77:ca:98:e1:17:36:14:4a:ef:be:32:56:ae:53:85:
                    9c:3c:1d:90:0e:4c:46:e8:d3:ab:98:8f:c0:94:3e:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:6D:86:57:A8:C6:43:3D:A1:9C:5F:65:C8:AA:9B:AA:16:F3:86
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3133312e3130382e3230322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:b9:58:cd:5b:2c:4f:ec:43:b5:c6:ab:2d:2d:cd:a7:cf:1a:
         0f:80:f8:e4:4e:a4:2f:94:b9:63:38:07:64:96:3d:50:c1:90:
         42:26:62:f3:01:c9:c6:7e:91:85:20:7e:e4:a7:85:a9:ba:90:
         30:48:3c:37:34:5f:25:50:c3:3d:36:0d:51:8f:14:40:b0:33:
         60:7f:4a:02:e5:b3:91:fa:fc:d1:22:7f:f4:04:ed:7a:16:27:
         52:a6:88:1d:e6:5c:94:31:cb:3b:2e:69:f0:8e:28:4a:d0:7c:
         cb:cd:0a:5f:b2:dc:e7:3e:6a:86:34:dd:e6:11:65:c6:54:6d:
         c8:45:79:9d:56:90:15:16:be:fe:f0:60:c8:de:62:d8:db:97:
         b8:ce:cf:d4:7d:b5:c5:f5:f3:4e:e2:8d:57:7c:96:b1:36:0b:
         ec:dd:df:d2:19:73:eb:16:b6:ba:03:45:36:d8:9c:20:27:86:
         b1:72:40:79:b2:aa:cf:b3:21:89:06:ac:2c:e1:12:11:42:34:
         18:cd:ec:b9:25:ef:b9:72:74:11:5b:9b:73:36:c4:2e:be:10:
         f5:ec:e6:3d:96:b6:61:5d:57:d4:e9:f3:22:b0:43:ac:a3:3f:
         7f:29:3e:91:a8:43:63:9a:ec:47:8f:d5:19:b0:19:42:8a:fa:
         61:a1:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org