Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          YJ6oWzHsSlIOayvAlwmK1eEpknB9PpjDp+yAU+fhxuU=
Subject key identifier:   F3:E9:08:39:C8:24:EE:91:0B:02:9E:14:1F:1A:9D:F4:B7:1F:93:D0
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       7B9AB234A216CE0225237A966C7ED2F398FC931D
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        179.108.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9a:b2:34:a2:16:ce:02:25:23:7a:96:6c:7e:d2:f3:98:fc:93:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=3082010A0282010100B4719F582016D5A0F07CF55FAB492DEB0BF387C0F05BA0BD78C0438AE49EEF27CAEDF8560394FB64C5CA19CBF1DDEF5E9BD6A618B81EF4DEFE2D46928B3B8A1E143843437C63963F322A9F855431A190559CA2A6C9CC60D18B7A5C61605291EAE92EED5D9C95818F925C69776E4E459475C1E4063B020A22135A8681F9695D74052C150088ACFF504F024B750330D63090044580EA4E8E58E99B5C6CB66E7DEE3AA0EDDA394469000639A42F06CBF9E7DEB005322E6644C50041C6F2D00199E78ACB52BB6AAF23E20872CEE3DEE1473F18AD1BA6A7C5F39BF24284AEBBB15D4FF1310B2415819E4455DFAA2B202D893A311BC5B8E774D554B4E5A886E7B05F490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:9f:58:20:16:d5:a0:f0:7c:f5:5f:ab:49:
                    2d:eb:0b:f3:87:c0:f0:5b:a0:bd:78:c0:43:8a:e4:
                    9e:ef:27:ca:ed:f8:56:03:94:fb:64:c5:ca:19:cb:
                    f1:dd:ef:5e:9b:d6:a6:18:b8:1e:f4:de:fe:2d:46:
                    92:8b:3b:8a:1e:14:38:43:43:7c:63:96:3f:32:2a:
                    9f:85:54:31:a1:90:55:9c:a2:a6:c9:cc:60:d1:8b:
                    7a:5c:61:60:52:91:ea:e9:2e:ed:5d:9c:95:81:8f:
                    92:5c:69:77:6e:4e:45:94:75:c1:e4:06:3b:02:0a:
                    22:13:5a:86:81:f9:69:5d:74:05:2c:15:00:88:ac:
                    ff:50:4f:02:4b:75:03:30:d6:30:90:04:45:80:ea:
                    4e:8e:58:e9:9b:5c:6c:b6:6e:7d:ee:3a:a0:ed:da:
                    39:44:69:00:06:39:a4:2f:06:cb:f9:e7:de:b0:05:
                    32:2e:66:44:c5:00:41:c6:f2:d0:01:99:e7:8a:cb:
                    52:bb:6a:af:23:e2:08:72:ce:e3:de:e1:47:3f:18:
                    ad:1b:a6:a7:c5:f3:9b:f2:42:84:ae:bb:b1:5d:4f:
                    f1:31:0b:24:15:81:9e:44:55:df:aa:2b:20:2d:89:
                    3a:31:1b:c5:b8:e7:74:d5:54:b4:e5:a8:86:e7:b0:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E9:08:39:C8:24:EE:91:0B:02:9E:14:1F:1A:9D:F4:B7:1F:93:D0
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:ce:20:f6:e5:39:12:c9:d3:a9:81:7a:81:87:c1:0b:90:
         c0:e3:07:e5:f5:fb:d0:4b:2b:74:23:c3:6e:4e:73:1d:94:8b:
         d9:da:cc:e2:92:0d:88:d3:4e:00:d9:52:f5:a2:cb:d3:28:af:
         f2:b9:59:b6:c2:fa:b4:a3:46:b6:00:e7:f9:f2:d7:0d:b8:64:
         fc:1c:e7:55:41:f1:8f:47:a0:42:60:87:b8:84:a1:ed:69:26:
         26:d8:c7:d9:d0:8c:f7:89:15:2a:ba:d9:c9:dc:53:7a:99:33:
         7f:d4:23:8a:12:58:3d:05:72:0f:3a:32:15:43:e5:3d:b2:0e:
         d4:29:97:ae:57:06:4a:2b:d3:b1:3d:9e:61:3e:46:be:0c:e6:
         0a:9f:f5:86:0d:84:c7:00:36:d6:01:d9:48:e3:87:7c:89:7a:
         22:ee:68:48:dd:d2:cb:2f:48:ba:03:7c:b4:ee:22:a5:e3:57:
         c8:e5:ed:2a:8e:b5:20:bc:dc:6d:0e:15:a4:09:8b:6b:67:55:
         fa:8d:74:4d:b9:fa:6d:82:df:70:ad:be:72:18:d2:b4:79:c2:
         7e:ee:b6:fa:a2:9a:c2:cc:94:27:95:d2:e9:86:ba:0e:8c:ba:
         e1:87:aa:56:c5:a2:7f:87:0b:86:4d:b2:ba:ee:52:34:1a:ce:
         e7:9d:ac:10
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUe5qyNKIWzgIlI3qWbH7S85j8kx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTdaFw0yNTA0MDIxODMwMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ3MTlGNTgyMDE2RDVBMEYw
N0NGNTVGQUI0OTJERUIwQkYzODdDMEYwNUJBMEJENzhDMDQzOEFFNDlFRUYyN0NB
RURGODU2MDM5NEZCNjRDNUNBMTlDQkYxRERFRjVFOUJENkE2MThCODFFRjRERUZF
MkQ0NjkyOEIzQjhBMUUxNDM4NDM0MzdDNjM5NjNGMzIyQTlGODU1NDMxQTE5MDU1
OUNBMkE2QzlDQzYwRDE4QjdBNUM2MTYwNTI5MUVBRTkyRUVENUQ5Qzk1ODE4Rjky
NUM2OTc3NkU0RTQ1OTQ3NUMxRTQwNjNCMDIwQTIyMTM1QTg2ODFGOTY5NUQ3NDA1
MkMxNTAwODhBQ0ZGNTA0RjAyNEI3NTAzMzBENjMwOTAwNDQ1ODBFQTRFOEU1OEU5
OUI1QzZDQjY2RTdERUUzQUEwRUREQTM5NDQ2OTAwMDYzOUE0MkYwNkNCRjlFN0RF
QjAwNTMyMkU2NjQ0QzUwMDQxQzZGMkQwMDE5OUU3OEFDQjUyQkI2QUFGMjNFMjA4
NzJDRUUzREVFMTQ3M0YxOEFEMUJBNkE3QzVGMzlCRjI0Mjg0QUVCQkIxNUQ0RkYx
MzEwQjI0MTU4MTlFNDQ1NURGQUEyQjIwMkQ4OTNBMzExQkM1QjhFNzc0RDU1NEI0
RTVBODg2RTdCMDVGNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtHGfWCAW1aDwfPVfq0kt6wvzh8DwW6C9eMBDiuSe7yfK7fhWA5T7
ZMXKGcvx3e9em9amGLge9N7+LUaSizuKHhQ4Q0N8Y5Y/MiqfhVQxoZBVnKKmycxg
0Yt6XGFgUpHq6S7tXZyVgY+SXGl3bk5FlHXB5AY7AgoiE1qGgflpXXQFLBUAiKz/
UE8CS3UDMNYwkARFgOpOjljpm1xstm597jqg7do5RGkABjmkLwbL+efesAUyLmZE
xQBBxvLQAZnnistSu2qvI+IIcs7j3uFHPxitG6anxfOb8kKErruxXU/xMQskFYGe
RFXfqisgLYk6MRvFuOd01VS05aiG57BfSQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPPpCDnIJO6RCwKeFB8anfS3H5PQMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMTM5
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbMAwDQYJKoZIhvcNAQELBQADggEBADwZziD25TkSydOpgXqBh8ELkMDjB+X1
+9BLK3Qjw25Ocx2Ui9nazOKSDYjTTgDZUvWiy9Mor/K5WbbC+rSjRrYA5/ny1w24
ZPwc51VB8Y9HoEJgh7iEoe1pJibYx9nQjPeJFSq62cncU3qZM3/UI4oSWD0Fcg86
MhVD5T2yDtQpl65XBkor07E9nmE+Rr4M5gqf9YYNhMcANtYB2Ujjh3yJeiLuaEjd
0ssvSLoDfLTuIqXjV8jl7SqOtSC83G0OFaQJi2tnVfqNdE25+m2C33CtvnIY0rR5
wn7utvqimsLMlCeV0umGug6MuuGHqlbFon+HC4ZNsrruUjQazuedrBA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org