Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa
File:                     3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          2IS44VWEDcLiMP9SSJ02/XafY0Z7fJv64K0b0vJnIDc=
Subject key identifier:   3D:36:74:8C:DC:67:66:30:09:5C:B6:33:A2:97:9D:04:8A:D9:16:27
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       51A115DDB45668A154CD707E2BFFE9A29888E606
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     262691
IP address blocks:        177.87.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a1:15:dd:b4:56:68:a1:54:cd:70:7e:2b:ff:e9:a2:98:88:e6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=3082010A0282010100C9430F9D08144C37CE82B177942B7887CD3F19231897B712679EE44770A3F184527EA0FDF6AABE59F891578F2EC1D8C25678E9C3C8E07F799A75E62BFAB154B2E8750FFFD5A273407F86D62342F06954624621E2535DF54EDC309E4691AEDD967860C17EB8FCEFCB9E67DD38D85CB5B3A8ED61CEDBBF503B1F1A9E69CFC6ADA697CBE2C98DA0810A5835BEF87A9507B3B99DB50AF00FB089C708F1D148C6A5B6B82D1D6718E38A91EC21D4BF61238E1B0065426AB5A9E2ACF1ED7DD40649B772D322E24EC5362EA470ECD663D6469EE81AF20B4F4BCBFBB8FD791AFE3FD3864F995AA811AE1D259099155D3AA5D885F8E38B63DCFFBC8062BBD86A7C61721D330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:0f:9d:08:14:4c:37:ce:82:b1:77:94:2b:
                    78:87:cd:3f:19:23:18:97:b7:12:67:9e:e4:47:70:
                    a3:f1:84:52:7e:a0:fd:f6:aa:be:59:f8:91:57:8f:
                    2e:c1:d8:c2:56:78:e9:c3:c8:e0:7f:79:9a:75:e6:
                    2b:fa:b1:54:b2:e8:75:0f:ff:d5:a2:73:40:7f:86:
                    d6:23:42:f0:69:54:62:46:21:e2:53:5d:f5:4e:dc:
                    30:9e:46:91:ae:dd:96:78:60:c1:7e:b8:fc:ef:cb:
                    9e:67:dd:38:d8:5c:b5:b3:a8:ed:61:ce:db:bf:50:
                    3b:1f:1a:9e:69:cf:c6:ad:a6:97:cb:e2:c9:8d:a0:
                    81:0a:58:35:be:f8:7a:95:07:b3:b9:9d:b5:0a:f0:
                    0f:b0:89:c7:08:f1:d1:48:c6:a5:b6:b8:2d:1d:67:
                    18:e3:8a:91:ec:21:d4:bf:61:23:8e:1b:00:65:42:
                    6a:b5:a9:e2:ac:f1:ed:7d:d4:06:49:b7:72:d3:22:
                    e2:4e:c5:36:2e:a4:70:ec:d6:63:d6:46:9e:e8:1a:
                    f2:0b:4f:4b:cb:fb:b8:fd:79:1a:fe:3f:d3:86:4f:
                    99:5a:a8:11:ae:1d:25:90:99:15:5d:3a:a5:d8:85:
                    f8:e3:8b:63:dc:ff:bc:80:62:bb:d8:6a:7c:61:72:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:36:74:8C:DC:67:66:30:09:5C:B6:33:A2:97:9D:04:8A:D9:16:27
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137372e38372e3230362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:0e:42:2d:99:8a:a9:55:86:55:18:6c:d3:cd:70:c2:e6:
         22:4a:13:ce:62:aa:62:d0:2d:c0:df:e7:ab:ca:1f:25:3a:49:
         f3:ae:b5:a4:c4:25:bf:83:94:32:59:a1:db:c9:b0:90:f4:34:
         65:43:68:6c:bf:26:03:1f:c6:7d:a7:a6:d3:fa:58:45:84:bb:
         83:33:0f:87:25:92:11:7a:e4:e3:44:d4:2a:f7:b9:97:a6:25:
         76:2a:22:6d:66:aa:65:fe:4d:fb:62:2f:87:d3:2e:cd:65:1d:
         ab:f5:99:65:c4:df:0e:58:80:0f:d6:c2:da:8e:27:ed:04:5f:
         81:24:c3:26:04:42:6d:99:78:83:08:97:89:b5:00:99:de:9d:
         8c:2a:c7:1d:f0:23:3e:d6:8c:78:93:1e:e1:21:af:28:49:75:
         95:fa:b4:56:05:0a:d4:6a:1f:1c:fa:55:fc:93:9c:1d:37:55:
         eb:1f:99:9a:4b:ce:01:94:19:8b:32:07:59:ec:a1:d4:d4:93:
         96:56:2f:fc:40:4c:0d:a6:ed:c1:79:e1:4a:45:69:2c:20:31:
         fd:c8:1b:0e:be:36:87:b6:dd:58:e5:8b:7c:71:a4:86:c5:c0:
         99:69:f8:3c:b5:ff:5d:64:a5:27:10:5b:2c:25:09:5a:09:64:
         19:68:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org