Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          4XMl5v2WLl/S1PcU5g93DAWO4hMxP8IFFj2A6WE0MlA=
Subject key identifier:   47:01:3F:4D:53:BB:26:D8:8B:D8:8D:24:DD:61:E1:98:46:FE:2E:DC
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       4C193817525670D65FECDB90BEDCE7BBFAD11E3B
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262691
IP address blocks:        179.108.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:19:38:17:52:56:70:d6:5f:ec:db:90:be:dc:e7:bb:fa:d1:1e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:f0:82:5b:7d:7c:d6:fc:22:2a:4c:db:ac:
                    53:4f:6e:8e:9a:79:4f:9a:0b:18:02:b1:1e:da:ab:
                    89:1c:96:6c:55:31:5e:ab:9d:bb:c2:b5:84:7d:20:
                    39:9c:ab:a5:42:b7:ff:85:e6:0b:0a:6a:96:8f:45:
                    aa:24:bc:d2:68:40:9b:11:b0:c0:f5:38:5d:f9:36:
                    7e:aa:29:33:8d:7e:61:09:42:ca:37:15:b5:bf:6c:
                    ea:9c:77:89:dc:2b:04:3c:fe:66:76:65:56:51:1b:
                    e3:3b:de:6a:cb:10:ff:dd:12:37:3c:bd:bd:86:53:
                    6f:74:f3:45:c5:05:d4:81:f1:13:c3:38:b4:d6:6c:
                    e5:dc:d2:5b:7b:91:3c:c4:9c:7a:f5:f6:24:d8:ba:
                    73:c6:5f:e6:2d:33:0f:1c:ea:ec:5c:bc:ba:af:e9:
                    57:c0:d7:42:df:43:33:45:27:1d:90:a1:eb:ed:d5:
                    0c:61:8e:cb:b1:bf:77:65:71:4f:8e:ea:9d:79:e7:
                    80:ca:bf:e3:81:70:70:61:be:61:03:8b:a6:55:69:
                    8a:9d:27:9b:2f:40:1d:ab:0e:ae:ef:f4:a9:5b:94:
                    a9:cb:ff:06:2e:63:3b:73:64:71:82:7b:b4:a4:0a:
                    c5:39:e0:03:e7:d2:4d:c8:9f:cd:c7:0f:90:80:d4:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:3F:4D:53:BB:26:D8:8B:D8:8D:24:DD:61:E1:98:46:FE:2E:DC
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:5b:c4:65:47:17:9b:d7:4f:da:fd:8c:57:c0:d8:14:97:
         91:e9:a3:dd:d0:0a:9b:02:56:99:f2:6b:d7:c0:4a:14:3f:65:
         ae:aa:dc:cd:74:40:8f:fd:8f:59:4f:3a:9d:04:f3:fa:76:40:
         fa:71:0a:7f:a7:01:3f:01:47:99:fd:21:19:4d:78:fd:79:e7:
         d4:a7:8b:bb:ce:0e:65:1d:28:66:9f:62:90:e7:ee:03:bb:47:
         02:e5:12:9d:25:31:92:e2:34:f1:f1:d2:c3:80:fb:15:0c:8a:
         96:42:b2:2e:57:01:d5:65:6f:6c:4c:f8:4c:ce:c9:0b:54:4f:
         5d:8f:d0:69:e0:88:80:91:1e:07:08:4e:f0:b9:f7:ef:f2:8e:
         9b:c8:96:ce:0c:a9:2e:88:ca:8c:50:ad:3e:f0:11:78:19:8d:
         e9:68:7e:4f:7a:ca:53:22:49:ce:05:31:ee:92:0b:a8:1e:94:
         a6:f3:48:e4:a8:dc:0c:dd:6a:71:3c:e7:a3:23:bf:84:f3:58:
         a2:24:8b:fb:d3:d8:04:79:a9:65:b0:23:22:2c:14:df:dc:da:
         1c:5c:c2:37:93:e3:47:4d:23:2f:5a:1c:a0:ce:50:b8:32:7c:
         6a:1f:8e:05:0a:d8:fe:1b:3a:ca:97:16:23:57:a2:c1:80:10:
         65:25:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org