Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa
File:                     3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          CEepT/Lxowv8z/g/tKu4yk0WtltUDmVPmP9S/2flgWU=
Subject key identifier:   64:7E:1C:86:72:BB:80:3F:F9:47:21:6F:87:24:31:B0:3D:E7:8D:3B
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       1692967681D0134444A6365D9928445AD82225CA
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        177.87.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:92:96:76:81:d0:13:44:44:a6:36:5d:99:28:44:5a:d8:22:25:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:8a:8a:24:8e:36:7e:03:8c:8c:70:25:43:
                    a9:cd:60:6e:89:06:dd:0c:f2:64:e3:94:8c:12:2d:
                    db:23:2a:fd:1c:6d:d1:d3:6c:00:37:a1:a8:ed:50:
                    f5:c6:3f:b1:48:d2:25:3e:20:6b:5d:e8:7e:5a:8c:
                    8e:c6:67:00:5d:68:fe:a6:22:94:08:59:bb:52:15:
                    0c:23:99:76:05:8a:cf:36:01:bf:47:26:c3:64:96:
                    9a:de:0a:e6:26:8e:d0:d6:20:a6:d7:32:29:03:90:
                    49:61:f3:4f:e5:8e:0b:49:02:72:6a:81:07:07:0a:
                    02:9f:63:ab:bd:a0:11:97:22:0b:46:ea:37:b9:e6:
                    7b:2b:d8:fd:85:ef:6e:ba:1c:de:71:92:2a:2e:c4:
                    a9:3d:20:09:4d:ce:93:45:23:6f:91:d8:4b:93:77:
                    b3:f3:f1:da:30:97:2c:21:7a:cb:26:db:b0:8f:94:
                    ca:b2:20:0b:25:bd:27:3a:89:a1:e1:13:b8:a4:b3:
                    78:13:8a:df:97:3f:7d:f6:6e:bb:ba:f7:8b:5b:f6:
                    cf:88:78:f9:ef:8b:c1:8f:86:29:4c:68:45:5d:ff:
                    a8:60:5e:6c:9b:41:74:af:2c:e8:74:b9:33:34:77:
                    e0:9d:87:fc:b9:49:23:0f:4c:1b:5a:35:ca:ad:6c:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7E:1C:86:72:BB:80:3F:F9:47:21:6F:87:24:31:B0:3D:E7:8D:3B
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:c9:7c:86:70:2e:2a:b0:45:b6:e1:c2:72:6a:2a:ce:67:
         fd:12:84:75:83:96:06:64:fd:b6:04:1c:f9:a1:ae:38:d6:1f:
         f3:81:36:3d:34:37:a7:7c:12:e4:5e:da:ae:50:37:87:ad:e8:
         65:09:30:66:8a:17:26:f2:05:9d:d3:3c:e5:f4:e6:42:83:38:
         a7:b3:d6:a3:3e:2a:b8:db:b2:c2:4b:a1:1e:9f:f3:61:24:f6:
         0a:a1:dd:32:b8:55:e9:4a:87:49:4f:e5:dc:95:86:67:3b:2f:
         4f:e8:23:c1:16:a3:da:16:43:6f:56:1e:12:ce:f7:dc:71:b0:
         3b:f7:07:d1:8f:70:53:65:a8:de:d5:f0:ec:a4:43:ae:6c:58:
         a7:f3:82:37:96:db:c8:e9:d9:6b:81:83:d9:aa:0b:49:f8:f2:
         98:7a:07:08:a4:60:f8:a4:77:2b:99:df:57:6a:be:ee:db:26:
         5d:55:03:56:ca:37:45:d2:aa:4d:15:0c:f4:af:0c:74:d1:3b:
         fa:b4:3b:85:cb:4c:aa:51:52:9e:ac:82:35:5a:ab:1e:36:c1:
         96:af:de:42:88:00:6f:e3:d9:f2:1a:4a:e6:cc:b5:10:a8:85:
         42:21:2f:57:b3:1e:19:c9:13:a8:14:72:6c:ad:ac:ff:0e:f0:
         0b:ec:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org