Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e37322e32322e302f32332d3233203d3e20323632363931.roa
File:                     3137372e37322e32322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          byQrLNyVPuINsTojJtuHJeqaOkwFQYGML1yxwKimtgE=
Subject key identifier:   3D:D3:70:9C:72:D4:CE:A9:2A:10:7E:78:D3:58:D8:91:E0:CC:3C:2A
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       2779B0D7C758B096B11390DCEA11EED112891BAB
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e37322e32322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        177.72.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:79:b0:d7:c7:58:b0:96:b1:13:90:dc:ea:11:ee:d1:12:89:1b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:4c:9a:dc:ba:fe:73:ad:6b:94:0f:f7:97:
                    3e:68:ea:04:c9:8a:c7:b8:e1:6d:cf:02:45:be:e9:
                    cc:d8:d3:e9:9f:9b:da:25:93:80:4c:9f:34:bf:3c:
                    76:0b:2f:0c:0c:7e:c2:6a:54:f9:5f:a8:c4:9e:3f:
                    0c:98:42:ad:8b:ec:3d:d0:a2:84:c5:f2:4d:6d:b2:
                    8f:95:15:bf:e8:6f:fd:54:cc:f6:d5:15:4d:92:74:
                    f4:17:59:d9:1c:1e:13:8e:8a:4e:d8:e2:11:54:6c:
                    8f:5c:05:ab:d6:e0:a9:c8:7b:50:62:48:f9:24:5f:
                    ba:1e:ff:32:c6:38:a7:d1:f0:c4:ed:1d:e6:14:3d:
                    e6:bd:94:b0:ac:ab:2a:7a:14:21:b8:be:18:50:61:
                    71:25:0f:4f:91:48:7a:4f:25:5f:ec:1d:f7:a9:8e:
                    be:6f:a2:4c:cb:df:2c:b1:85:88:76:de:77:d3:23:
                    91:64:15:a9:72:76:d8:fa:d1:7b:f2:7c:86:89:a6:
                    49:67:bb:3d:76:0a:99:c4:b2:08:be:d9:19:95:9d:
                    26:69:34:94:75:bf:e7:9a:25:02:40:4f:52:6e:8b:
                    40:e5:c6:fb:50:ba:29:f3:b4:5a:64:b8:65:5f:02:
                    e0:fb:d5:d6:a9:c8:81:de:66:f1:b4:62:d9:f4:8d:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D3:70:9C:72:D4:CE:A9:2A:10:7E:78:D3:58:D8:91:E0:CC:3C:2A
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e37322e32322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:55:00:3d:8e:40:56:dd:e3:1d:57:ea:3e:fc:d9:3e:de:
         3a:d1:18:f8:80:4f:46:79:3f:2b:13:6f:5c:35:ed:9d:b4:1d:
         ae:c8:b4:33:7b:53:79:67:91:3d:24:6a:9b:e2:01:fd:8a:ec:
         28:08:ce:7a:48:bb:3e:1f:36:84:4e:aa:8f:d8:9e:43:80:27:
         7c:52:9e:45:11:cc:e6:88:45:ed:a1:21:0d:d4:73:da:2f:f8:
         42:51:0f:e8:97:92:e4:b5:d5:9e:50:d7:3d:bc:40:5e:46:b1:
         75:bf:62:55:99:97:13:56:6a:57:c2:78:4d:9d:32:83:ad:29:
         83:a1:47:89:77:2a:2e:c8:13:73:2f:e3:8b:9a:b9:a9:cb:9d:
         c4:da:5e:c1:51:3b:57:13:20:93:21:74:60:ad:ad:51:4f:4a:
         86:39:de:bc:84:4d:32:4b:2c:d6:37:ca:38:93:b2:cf:18:07:
         f7:d3:4d:d0:41:74:2f:8b:88:80:f6:cd:2d:c5:29:b7:02:b1:
         31:44:5f:bd:f4:9f:b4:ea:14:1c:fd:51:14:cd:1e:48:bf:03:
         bf:9b:98:90:71:69:7c:cc:8f:dd:ee:ac:79:46:57:6f:cc:25:
         8f:74:b5:02:31:04:51:e2:78:1d:bd:78:f1:90:ee:10:ad:cf:
         02:c9:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org