Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e37322e32302e302f32322d3232203d3e20323632363931.roa
File:                     3137372e37322e32302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          TaOmK4MP/LcUwNSng/jx9/TR/APXrJv0OKmc6g/i5c8=
Subject key identifier:   45:7D:42:01:62:7E:8E:29:31:60:01:77:5B:8E:70:E3:ED:EB:DF:30
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       130351EE92F57C2F2CA7448FCF702F9A33F066BC
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e37322e32302e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     262691
IP address blocks:        177.72.20.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:03:51:ee:92:f5:7c:2f:2c:a7:44:8f:cf:70:2f:9a:33:f0:66:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:45:71:89:9c:59:21:0b:4c:f6:cb:ac:48:
                    8f:69:dd:b7:95:35:0d:7f:aa:92:a8:70:d0:15:2e:
                    fb:a0:38:b2:1d:4f:f4:ea:39:f2:76:9c:74:8b:7a:
                    93:1a:03:e3:10:16:dc:b9:b8:13:7d:a0:7a:7f:52:
                    bd:ba:cd:d4:cc:3e:14:72:0d:6b:fc:13:17:45:ac:
                    87:b4:1a:69:b2:d8:67:dd:39:e8:c4:d8:4b:11:00:
                    9b:1e:47:4e:a0:5c:c1:96:24:b5:d4:64:77:e5:35:
                    de:08:98:da:a9:e0:ac:5a:4c:b5:83:2e:10:59:ab:
                    bb:45:30:df:94:a4:36:bf:9a:fe:9d:b3:03:5e:f6:
                    27:b7:79:01:73:77:c5:eb:70:47:15:5a:d2:87:3a:
                    48:ad:1a:e0:1d:cb:97:c8:1f:9b:8d:a5:42:4b:2e:
                    f4:67:26:76:90:55:be:3f:52:37:86:fe:3e:6d:99:
                    c3:4b:43:4b:77:9e:5d:80:69:06:07:de:af:0f:7a:
                    d9:b8:5e:6d:32:d6:bc:0f:cb:c6:1c:ed:99:f6:d1:
                    bf:94:de:f1:b6:64:d6:78:0b:e2:68:e5:4a:db:08:
                    87:da:dd:ea:d7:4e:92:ad:1a:fe:c2:45:cf:aa:98:
                    16:94:b9:e0:b9:0c:b5:e8:2c:7c:ab:53:c8:16:67:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7D:42:01:62:7E:8E:29:31:60:01:77:5B:8E:70:E3:ED:EB:DF:30
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e37322e32302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:86:0e:db:bb:29:ba:2b:87:ee:65:04:ed:95:8a:04:55:9a:
         27:9e:ec:98:1f:ab:e4:ca:e7:fe:24:be:11:ae:e5:bf:a6:50:
         08:5f:0a:be:8e:dc:67:9a:a6:fb:39:87:87:83:46:f5:89:10:
         06:d0:5c:85:ce:b3:3d:43:75:68:38:d5:49:b0:7a:54:c3:b2:
         3d:15:65:41:26:5b:fb:c3:b6:4a:94:ed:8f:f0:71:a5:22:53:
         95:a7:dc:fa:fb:3e:54:35:69:3b:c9:15:1a:3a:09:62:26:28:
         35:fa:13:0d:d6:22:be:af:a0:bd:a3:21:ce:01:b8:81:4a:16:
         1a:e2:a7:5e:e5:36:b4:ab:c2:e7:df:65:54:77:b5:83:8a:80:
         f8:da:43:2a:51:57:a3:fa:30:0f:12:37:4e:25:82:3b:c4:1e:
         fb:56:c2:a7:88:0b:f4:db:f8:d0:54:08:fb:23:d4:21:40:a1:
         b5:5c:1c:20:89:19:03:61:7d:dd:67:c9:43:2f:2c:b6:7b:47:
         7a:6f:d0:a0:81:da:0e:58:00:eb:61:5b:d1:18:e3:c6:fb:a3:
         19:65:1f:8d:c6:ec:ea:e2:c8:02:50:42:ac:89:0c:d5:12:af:
         76:1c:cd:0f:07:6d:33:78:f7:93:63:d9:94:d6:30:34:dc:23:
         83:2d:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org