Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32302d3230203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          Kf4lfldVpxh5PBAMAz/2BZREdTyo856Nr7Z/JEepy1Y=
Subject key identifier:   30:39:73:5B:97:11:72:8E:FE:E3:59:85:5B:B0:85:75:4B:8B:69:EC
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       2867B22C9308AB781EDC060F44B79E2CD2D83B83
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32302d3230203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     262691
IP address blocks:        179.108.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:67:b2:2c:93:08:ab:78:1e:dc:06:0f:44:b7:9e:2c:d2:d8:3b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject: CN=3082010A02820101009F7E87EEAC6291F0082C2D986388DFF827417A88A29E177CE3E7793F4123B5E05691F42C5FD0554FFDC03116B7025FF8DA78A8C7C85555A80804A88D020C1E47764BA87A5B04B02E0ECFABD67E5033A1DD0D379788A429C71A0337FCA1D46D337410223FFEDA91A4C679A222A787F3297E39E1179ADE4C34FD4B90DED9349D19A8C80B8D88122D5FCA6F7A2D5DB53B833CF7BC3DAC0C522DE3558CFD46E221B8BF4480497373DDDBA9C2D3CA794330A2888AAC67138AFAE3130DDB6BCF447F405D14397007FBBCD62A9AF7CFFE86A873AC3BBDC2026AFA644F1B7B7FD3B2C6D49D52C59AB994783FFF6DC9A044F379087344A3CEB43D90357155F0A48D2817590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:87:ee:ac:62:91:f0:08:2c:2d:98:63:88:
                    df:f8:27:41:7a:88:a2:9e:17:7c:e3:e7:79:3f:41:
                    23:b5:e0:56:91:f4:2c:5f:d0:55:4f:fd:c0:31:16:
                    b7:02:5f:f8:da:78:a8:c7:c8:55:55:a8:08:04:a8:
                    8d:02:0c:1e:47:76:4b:a8:7a:5b:04:b0:2e:0e:cf:
                    ab:d6:7e:50:33:a1:dd:0d:37:97:88:a4:29:c7:1a:
                    03:37:fc:a1:d4:6d:33:74:10:22:3f:fe:da:91:a4:
                    c6:79:a2:22:a7:87:f3:29:7e:39:e1:17:9a:de:4c:
                    34:fd:4b:90:de:d9:34:9d:19:a8:c8:0b:8d:88:12:
                    2d:5f:ca:6f:7a:2d:5d:b5:3b:83:3c:f7:bc:3d:ac:
                    0c:52:2d:e3:55:8c:fd:46:e2:21:b8:bf:44:80:49:
                    73:73:dd:db:a9:c2:d3:ca:79:43:30:a2:88:8a:ac:
                    67:13:8a:fa:e3:13:0d:db:6b:cf:44:7f:40:5d:14:
                    39:70:07:fb:bc:d6:2a:9a:f7:cf:fe:86:a8:73:ac:
                    3b:bd:c2:02:6a:fa:64:4f:1b:7b:7f:d3:b2:c6:d4:
                    9d:52:c5:9a:b9:94:78:3f:ff:6d:c9:a0:44:f3:79:
                    08:73:44:a3:ce:b4:3d:90:35:71:55:f0:a4:8d:28:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:73:5B:97:11:72:8E:FE:E3:59:85:5B:B0:85:75:4B:8B:69:EC
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:52:a7:4a:a1:3b:95:c6:aa:ff:1c:57:08:ee:67:19:cc:cb:
         9d:11:1a:91:20:17:de:9e:73:1b:3a:00:7b:04:32:4c:f3:68:
         97:a1:07:0c:02:ab:28:ef:24:fa:27:b2:63:00:49:7e:92:01:
         1a:ac:97:67:c6:ce:eb:a8:da:b9:61:c4:b3:5f:a4:aa:f4:d9:
         12:6c:0e:70:6f:c6:85:26:7a:c4:fe:68:6c:13:38:58:0b:c2:
         b7:f9:a0:0a:55:0e:06:cb:c7:4a:fd:8e:ed:ad:ba:e1:dc:31:
         e7:1f:ae:7d:f1:f6:a9:75:67:54:9a:1d:b7:74:ee:8e:31:b9:
         2f:86:83:ed:5f:ef:12:51:42:06:ba:e9:eb:93:24:83:25:5f:
         08:d3:46:27:76:f3:36:08:ff:d7:10:77:21:72:da:8e:ef:91:
         a3:10:77:cf:06:f4:01:74:2c:da:ee:bc:b4:0a:b5:d6:8b:c2:
         7f:37:be:c1:da:08:a0:08:19:ea:80:5b:03:f5:c0:09:42:74:
         4c:c5:00:7f:75:0b:56:8e:41:95:b5:8a:50:1b:32:8d:72:06:
         c3:ef:dc:19:cb:43:59:63:12:32:dc:f9:6e:4e:c1:f5:2e:9b:
         0d:72:63:23:1d:0d:56:d4:b7:fa:58:0a:a8:ec:68:17:b6:ff:
         b4:d9:76:12
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUKGeyLJMIq3ge3AYPRLeeLNLYO4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTJaFw0yNTA0MDIxODMwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUY3RTg3RUVBQzYyOTFGMDA4
MkMyRDk4NjM4OERGRjgyNzQxN0E4OEEyOUUxNzdDRTNFNzc5M0Y0MTIzQjVFMDU2
OTFGNDJDNUZEMDU1NEZGREMwMzExNkI3MDI1RkY4REE3OEE4QzdDODU1NTVBODA4
MDRBODhEMDIwQzFFNDc3NjRCQTg3QTVCMDRCMDJFMEVDRkFCRDY3RTUwMzNBMURE
MEQzNzk3ODhBNDI5QzcxQTAzMzdGQ0ExRDQ2RDMzNzQxMDIyM0ZGRURBOTFBNEM2
NzlBMjIyQTc4N0YzMjk3RTM5RTExNzlBREU0QzM0RkQ0QjkwREVEOTM0OUQxOUE4
QzgwQjhEODgxMjJENUZDQTZGN0EyRDVEQjUzQjgzM0NGN0JDM0RBQzBDNTIyREUz
NTU4Q0ZENDZFMjIxQjhCRjQ0ODA0OTczNzNERERCQTlDMkQzQ0E3OTQzMzBBMjg4
OEFBQzY3MTM4QUZBRTMxMzBEREI2QkNGNDQ3RjQwNUQxNDM5NzAwN0ZCQkNENjJB
OUFGN0NGRkU4NkE4NzNBQzNCQkRDMjAyNkFGQTY0NEYxQjdCN0ZEM0IyQzZENDlE
NTJDNTlBQjk5NDc4M0ZGRjZEQzlBMDQ0RjM3OTA4NzM0NEEzQ0VCNDNEOTAzNTcx
NTVGMEE0OEQyODE3NTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn36H7qxikfAILC2YY4jf+CdBeoiinhd84+d5P0EjteBWkfQsX9BV
T/3AMRa3Al/42niox8hVVagIBKiNAgweR3ZLqHpbBLAuDs+r1n5QM6HdDTeXiKQp
xxoDN/yh1G0zdBAiP/7akaTGeaIip4fzKX454Rea3kw0/UuQ3tk0nRmoyAuNiBIt
X8pvei1dtTuDPPe8PawMUi3jVYz9RuIhuL9EgElzc93bqcLTynlDMKKIiqxnE4r6
4xMN22vPRH9AXRQ5cAf7vNYqmvfP/oaoc6w7vcICavpkTxt7f9OyxtSdUsWauZR4
P/9tyaBE83kIc0SjzrQ9kDVxVfCkjSgXWQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FDA5c1uXEXKO/uNZhVuwhXVLi2nsMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMTM5
MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BASzbMAwDQYJKoZIhvcNAQELBQADggEBAEFSp0qhO5XGqv8cVwjuZxnMy50RGpEg
F96ecxs6AHsEMkzzaJehBwwCqyjvJPonsmMASX6SARqsl2fGzuuo2rlhxLNfpKr0
2RJsDnBvxoUmesT+aGwTOFgLwrf5oApVDgbLx0r9ju2tuuHcMecfrn3x9ql1Z1Sa
Hbd07o4xuS+Gg+1f7xJRQga66euTJIMlXwjTRid28zYI/9cQdyFy2o7vkaMQd88G
9AF0LNruvLQKtdaLwn83vsHaCKAIGeqAWwP1wAlCdEzFAH91C1aOQZW1ilAbMo1y
BsPv3BnLQ1ljEjLc+W5OwfUumw1yYyMdDVbUt/pYCqjsaBe2/7TZdhI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org