Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3139322e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          Oqux71m2pQMZqp/qOSC3ai7qYLEcHgwiFkO543IuEIc=
Subject key identifier:   FE:EE:7B:63:A2:0D:67:89:DA:11:2F:25:00:BC:C0:00:1E:62:08:39
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       4128D257AAFA5E1A853C30202321ABBA915ED2B5
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        179.108.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:28:d2:57:aa:fa:5e:1a:85:3c:30:20:23:21:ab:ba:91:5e:d2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:82:39:f2:87:a8:f2:8d:85:b0:32:a0:97:
                    15:b3:e1:a7:fb:35:5a:e9:98:4e:6f:a5:24:08:f8:
                    f7:29:78:9e:9d:41:8d:aa:c6:23:12:e7:e4:5b:ae:
                    b0:05:1e:90:03:c7:aa:12:c9:40:93:48:fe:57:0f:
                    8a:b5:7a:c3:c9:67:40:3b:45:1e:96:a9:1c:b8:48:
                    92:a6:c9:c5:38:d7:62:8a:2e:0e:88:f1:4c:f5:b3:
                    86:9c:61:3f:37:32:c9:bb:46:b0:fa:35:ed:e1:87:
                    a9:3e:e0:b8:08:8f:1e:78:ff:37:bf:51:74:31:65:
                    44:4d:2b:03:43:9e:73:f7:3e:09:94:09:4d:b6:3e:
                    74:62:4c:0c:91:b9:7f:a9:62:87:7c:78:5a:6e:06:
                    8d:e8:0a:c8:d1:34:27:c9:18:14:f9:22:44:dd:9a:
                    35:43:a4:9d:8e:ce:c9:48:75:9e:82:b7:73:b0:8c:
                    40:b0:a5:e9:56:32:e3:f5:2b:da:85:2b:5c:ad:50:
                    c2:e1:13:02:cd:f6:3a:40:5b:43:75:68:2b:25:18:
                    d7:49:78:a7:89:e5:97:32:e3:7b:05:ec:c5:03:aa:
                    25:bf:63:cb:cb:87:88:95:94:12:5c:7f:30:37:36:
                    a6:d0:f1:72:80:11:69:fe:c1:91:6c:6e:f8:83:f6:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:7B:63:A2:0D:67:89:DA:11:2F:25:00:BC:C0:00:1E:62:08:39
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139322e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:96:4d:c0:7d:44:17:f6:88:b8:f4:12:38:7a:0c:a9:7a:
         69:fe:79:d7:8f:76:4b:63:62:a6:39:37:a5:ba:8b:79:26:b7:
         3c:5c:01:ec:7a:4e:f0:46:0e:92:90:8a:1e:07:10:9b:dc:d0:
         9e:bc:01:ef:67:07:27:77:4d:d0:2b:3e:64:27:2e:4f:fa:08:
         d6:1e:23:08:54:7a:ec:03:f8:6c:de:24:69:30:11:4c:43:e0:
         d2:8d:f3:12:e1:bb:d2:9b:d9:dd:4e:3a:12:8b:e3:9c:16:f3:
         f9:1b:f8:0e:ce:c7:22:7b:d2:b4:89:e4:8b:50:2d:8b:88:46:
         f5:d6:43:92:36:9e:86:dc:37:d2:e7:a0:c8:fb:35:f8:7b:90:
         3a:23:da:11:18:e4:70:22:67:c6:41:11:38:f9:03:29:af:3a:
         51:2a:fe:d3:17:a4:bd:01:fa:a0:82:1a:e9:c3:9d:65:6e:0f:
         67:87:8e:91:58:e7:2e:b2:15:e1:b4:64:b1:08:e8:2c:fd:e6:
         9b:ec:89:c3:16:2c:22:2c:cb:cf:9d:96:88:df:7e:74:53:6c:
         1d:7b:3b:22:10:12:5d:02:5f:67:95:5b:83:b9:a9:b3:a4:2e:
         53:6f:61:66:f2:68:52:18:de:2a:45:ba:32:ce:5c:29:80:fc:
         3d:30:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org