Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          Zy0yEAM3EXxOs6x25iKlZOTc0Gh7G/5olAJvSUAInBU=
Subject key identifier:   DD:A2:F9:90:85:77:2A:2B:C0:F6:8F:F4:F7:33:E9:5D:7B:93:4E:72
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       3443BF230978E5F99BA6DA406585DE093ECA462E
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        179.108.194.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:43:bf:23:09:78:e5:f9:9b:a6:da:40:65:85:de:09:3e:ca:46:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:4a:f5:66:9e:c6:00:67:13:2a:5e:79:91:
                    85:da:29:33:b8:c2:b2:e8:79:f5:7b:94:7d:ba:5a:
                    c6:3f:c8:49:0f:aa:c6:89:1e:96:25:07:08:81:3a:
                    46:0c:2c:36:73:73:f6:42:4b:78:3a:23:c6:d9:23:
                    0a:cd:b4:6d:b3:a2:0f:71:00:df:b9:25:c5:0a:24:
                    c8:82:ff:67:4f:89:79:94:3a:42:7f:37:44:5f:ec:
                    46:4c:ca:1b:83:b4:25:6e:34:c0:e1:94:05:65:15:
                    f0:42:14:fc:c1:0e:35:b0:04:32:4f:c7:65:ec:16:
                    d7:cf:4a:2e:b2:11:8e:f0:4e:97:77:40:98:47:5a:
                    1d:e2:47:31:4c:72:89:3a:d1:bf:bd:c5:a9:9f:22:
                    03:e2:42:a3:8f:94:8c:18:b8:da:84:ef:ce:5e:19:
                    43:50:26:8e:96:8d:65:ea:95:34:59:49:2c:fb:e0:
                    61:6e:a6:6c:08:1a:37:54:c8:b0:c5:52:ee:30:73:
                    8e:6f:1c:b1:ef:a8:be:9a:12:53:47:84:33:ad:ca:
                    ef:1a:b5:8d:dc:5c:67:7c:0a:91:21:a6:67:ab:18:
                    cd:fc:1f:e7:71:cb:dd:58:7b:1b:be:98:f9:4e:af:
                    e5:e8:49:83:85:e0:bc:a5:d4:83:1f:9f:ee:ac:31:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:F9:90:85:77:2A:2B:C0:F6:8F:F4:F7:33:E9:5D:7B:93:4E:72
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:e7:4d:80:8f:05:bc:b8:3d:0b:e7:1c:a8:71:c0:d4:03:
         39:e7:19:b0:80:38:01:fc:ed:c5:a1:5f:a9:b9:ed:68:9f:c9:
         1d:54:84:f7:71:17:b8:a6:af:25:af:74:ce:bb:de:75:f1:41:
         52:fc:a3:9d:2b:2e:6a:22:a0:50:13:8b:17:b6:fb:f6:09:95:
         64:31:a7:40:78:3c:9d:95:09:33:3b:44:13:94:d8:9a:3e:07:
         79:e0:06:a3:70:5b:77:e1:6e:31:b0:d2:cb:f1:5b:aa:23:00:
         05:6c:0b:15:18:68:7a:c2:1c:f6:4f:75:55:f7:9b:29:37:10:
         08:6b:cd:20:de:28:f5:32:52:b2:97:4b:90:6b:e3:21:26:6d:
         38:ab:53:1e:3f:9e:96:05:db:c4:85:6b:d2:b5:ba:ef:b7:64:
         8b:d5:f7:32:7f:42:e4:6c:dd:37:8b:4f:0a:e9:e7:87:a6:24:
         d7:cc:69:21:cb:fb:a3:49:c7:eb:4b:8c:e1:50:31:9b:11:2f:
         6c:a3:c3:db:a4:d1:15:17:05:ee:62:cd:4e:4d:e0:53:9c:33:
         65:63:79:0e:1a:8a:64:04:04:df:96:40:bd:a9:e4:32:a1:3b:
         bd:de:04:6b:c9:19:63:65:8c:4c:00:52:94:b8:f9:62:30:d7:
         dc:13:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org