Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa
File:                     3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          yDC0Y0raG5OATzOlbKzj8VPMiZN2UvGyO/uHmA0nuVY=
Subject key identifier:   65:0D:01:75:B4:2C:F9:79:E1:8E:B7:53:F9:9E:18:AC:20:AB:21:25
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       635C00FEBC8E26969E2EB24DEB8E91C67C12D1F3
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        177.87.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5c:00:fe:bc:8e:26:96:9e:2e:b2:4d:eb:8e:91:c6:7c:12:d1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject: CN=3082010A0282010100DE6139516BE0B4C8FA9347932D01B0AA4CF6A499B32B05CFD2E493AEA6FDB96149202E54238AE4AD2E500700E811FB57632BF15289084E3F1F93B6A0061EE7FD1E7CFCA11911CC64CF7964016B95C799C9385B63CC94E4B4755A3DBB096716E0DD96AC9F1FB273191A8B15ED77991992459D67C82A854C80A2B3A5FEDE25EAE39DA3CDB843F400D11B38ED1C18B7B86570F26456BBFDA8380FD7790AD0FDCF0417C5A9E4C26A18AA9EC16E62AA28334BC37CDEB4E496B955C1057257C4D5AF50DD0568D8714780B3F5B81C4FE2A62BF28BA81A98FC2BD938BDFB431D8F4F39E826D6169C058D8138988C251A141B982EBC052319206B0A2FCE87C326F05787B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:39:51:6b:e0:b4:c8:fa:93:47:93:2d:01:
                    b0:aa:4c:f6:a4:99:b3:2b:05:cf:d2:e4:93:ae:a6:
                    fd:b9:61:49:20:2e:54:23:8a:e4:ad:2e:50:07:00:
                    e8:11:fb:57:63:2b:f1:52:89:08:4e:3f:1f:93:b6:
                    a0:06:1e:e7:fd:1e:7c:fc:a1:19:11:cc:64:cf:79:
                    64:01:6b:95:c7:99:c9:38:5b:63:cc:94:e4:b4:75:
                    5a:3d:bb:09:67:16:e0:dd:96:ac:9f:1f:b2:73:19:
                    1a:8b:15:ed:77:99:19:92:45:9d:67:c8:2a:85:4c:
                    80:a2:b3:a5:fe:de:25:ea:e3:9d:a3:cd:b8:43:f4:
                    00:d1:1b:38:ed:1c:18:b7:b8:65:70:f2:64:56:bb:
                    fd:a8:38:0f:d7:79:0a:d0:fd:cf:04:17:c5:a9:e4:
                    c2:6a:18:aa:9e:c1:6e:62:aa:28:33:4b:c3:7c:de:
                    b4:e4:96:b9:55:c1:05:72:57:c4:d5:af:50:dd:05:
                    68:d8:71:47:80:b3:f5:b8:1c:4f:e2:a6:2b:f2:8b:
                    a8:1a:98:fc:2b:d9:38:bd:fb:43:1d:8f:4f:39:e8:
                    26:d6:16:9c:05:8d:81:38:98:8c:25:1a:14:1b:98:
                    2e:bc:05:23:19:20:6b:0a:2f:ce:87:c3:26:f0:57:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:01:75:B4:2C:F9:79:E1:8E:B7:53:F9:9E:18:AC:20:AB:21:25
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:70:64:49:91:f5:63:e9:00:c5:69:b8:9d:00:13:9e:0d:e2:
         d3:b2:a2:74:30:24:2e:bb:ef:32:7f:b0:c0:13:e8:21:50:7d:
         a3:e7:cd:97:8e:4a:e3:63:c9:9f:06:2a:be:4a:67:9c:df:cb:
         27:bd:28:5d:4c:1b:07:86:3d:30:20:04:63:fe:d2:59:1e:74:
         0f:0a:fe:f1:fb:41:0e:3d:0c:2c:c9:45:c6:e8:c6:f8:6d:71:
         a9:e9:51:68:63:23:19:0b:86:01:7e:4a:6e:b7:ef:27:a1:ad:
         4b:c4:66:a2:e1:2d:89:a5:36:50:3d:e3:51:58:d8:50:2c:60:
         77:26:91:dd:3b:fa:ad:14:ed:32:29:2a:c1:50:bf:1d:d3:39:
         96:f7:04:09:d8:bf:f2:d8:cf:24:4f:ec:99:f2:2f:0a:c5:47:
         20:9e:49:57:45:3a:66:ec:10:70:8b:30:fc:cb:ce:fc:74:f1:
         1e:37:e8:9f:a3:47:54:bb:08:e3:08:9a:85:d1:e7:f2:98:a0:
         1b:a2:1f:0a:0a:fc:7f:43:b5:5a:41:d9:4b:e2:bc:2d:5b:ed:
         3e:eb:de:64:a0:59:05:fd:92:85:61:d4:2e:b4:c5:5a:c9:8c:
         a8:07:ea:a5:18:aa:3d:a0:a3:e8:9a:1e:5a:4d:da:97:f0:11:
         34:b0:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org