Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f31392d3139203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f31392d3139203d3e20323632363931.roa (raw, json)
Hash identifier:          ufg9xxO67EjcJKm8ATk5NpXsaNftrWn3GN/ifOHf8ts=
Subject key identifier:   93:6C:39:D5:12:A8:03:54:0A:BC:FD:92:38:FA:74:71:F6:16:41:49
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       30010ED2C19E3C4C3C058B8EA9A88A0121FEF6FC
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f31392d3139203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        179.108.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:01:0e:d2:c1:9e:3c:4c:3c:05:8b:8e:a9:a8:8a:01:21:fe:f6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:5b:d5:e4:cf:8d:8f:27:0c:b0:31:1d:f9:
                    b0:41:1a:40:80:9a:b0:d0:7b:16:0e:55:fa:19:91:
                    8f:c2:af:99:94:30:26:83:df:32:fb:39:a7:48:b0:
                    43:a8:d6:f6:f1:1c:89:4b:b7:62:ac:37:0e:d8:ca:
                    43:46:5c:fe:7d:2e:07:e2:b7:60:87:38:9d:9b:13:
                    95:56:e1:d7:1e:5f:ae:7a:2d:e1:f5:21:01:be:4c:
                    ae:4c:ec:3a:1f:4b:41:46:be:63:65:50:38:ed:08:
                    de:10:50:63:6e:66:47:8a:a4:e5:8b:12:62:f8:c6:
                    12:8f:20:35:ca:e5:97:de:e5:75:cb:4f:96:9f:5d:
                    2d:e8:ad:19:f5:7e:14:df:6b:c9:fa:5a:7c:c5:50:
                    4d:da:81:32:e1:c5:60:f6:f5:7e:5c:b8:1e:cc:14:
                    c8:28:5f:99:48:8e:31:4f:7c:23:f1:88:38:a3:a1:
                    e6:a2:b5:9a:55:84:e0:47:53:18:e5:be:2d:11:b8:
                    f9:e2:e8:7a:f7:22:54:8d:dd:16:1a:db:c7:f4:cb:
                    67:ad:fa:db:b2:d9:aa:87:c1:1b:7f:f9:5b:b5:a8:
                    7d:2b:c7:72:61:bf:b6:6f:a0:cc:05:86:6a:e8:fa:
                    0d:f2:1f:0c:e0:c7:1d:a2:c6:1a:8c:c1:d6:9a:c3:
                    f6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6C:39:D5:12:A8:03:54:0A:BC:FD:92:38:FA:74:71:F6:16:41:49
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f31392d3139203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:98:69:af:ae:66:a0:9a:d2:43:3b:a9:6d:05:3a:3d:82:ee:
         aa:b6:e9:9c:1f:71:c9:a3:6d:32:40:66:95:4f:f5:cd:f5:c3:
         85:b3:1e:a4:50:57:6b:40:39:6d:9d:a0:ef:7f:dc:18:90:0b:
         f2:98:cf:14:67:81:69:b9:cf:2b:90:49:45:2d:c5:53:72:3e:
         b0:fb:2d:f1:99:60:7f:4d:a5:69:1c:14:a8:90:3c:58:c4:7e:
         43:23:19:d9:7f:49:26:68:91:b7:11:2c:7f:ea:b8:ec:8c:d0:
         c5:9e:f4:90:e5:4f:a9:0b:08:8f:24:29:d1:64:c5:0a:fe:6d:
         1d:ab:72:88:35:a9:2a:6c:7e:9c:b8:65:3a:9d:01:b8:0c:34:
         36:d1:27:62:45:18:bc:53:b4:7d:98:3d:47:f8:77:90:f8:c9:
         07:9d:5a:2c:4b:12:40:12:e1:54:e3:4f:39:60:fe:1c:11:0f:
         6d:54:19:31:19:36:7d:a1:ae:59:0d:a8:78:bf:18:a7:89:c6:
         e9:c2:63:5c:fa:14:f7:cf:43:ef:56:37:f1:37:a5:79:ac:32:
         14:8e:8c:80:9c:38:21:02:32:2f:37:80:0d:a2:94:ba:b8:67:
         27:20:e1:92:2b:46:f5:0f:f1:b8:1b:0d:98:00:14:8f:86:e8:
         b3:4e:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org