Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          iRZK7nxlRs842AQjix9kWLPtB7tKuBuK9Q7WXuN23Dw=
Subject key identifier:   C7:06:60:B0:51:AE:99:18:F1:00:D1:04:4A:66:A2:10:56:03:7B:66
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       0A20F23A4E306274F4B8EA5AC57F6FCC2883AAF1
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:f2:3a:4e:30:62:74:f4:b8:ea:5a:c5:7f:6f:cc:28:83:aa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:00:ff:36:5f:75:83:00:51:41:4e:17:eb:
                    cf:9d:40:a0:26:03:3f:88:62:5d:e4:96:16:dc:58:
                    29:4b:ca:36:cb:7b:44:d8:9a:6a:6a:02:2d:7c:19:
                    cd:c6:8a:b5:3a:b3:65:ec:bb:f6:b7:24:0f:f0:90:
                    c9:63:da:01:01:b7:bf:66:d6:f6:f2:51:15:38:c7:
                    f9:cd:0a:ef:f7:9c:f1:60:7d:df:dd:f1:38:12:b8:
                    f3:9d:a2:f0:28:54:d4:16:5d:f2:ec:8e:62:8f:78:
                    a8:2d:89:26:3d:e5:e9:c2:19:64:0c:ec:de:0a:8f:
                    06:9a:15:fc:50:ac:67:be:27:b9:04:c7:ea:57:53:
                    eb:e0:52:f8:29:fc:fd:6d:71:31:58:41:af:99:12:
                    ec:0f:cc:ce:88:c7:56:4c:15:08:c5:d3:71:fd:c4:
                    16:cc:68:10:c2:b1:05:0b:7d:5c:f2:1d:3b:01:cd:
                    eb:4a:80:a5:a8:b1:37:d5:98:de:92:bc:19:23:ea:
                    29:84:2e:11:84:ac:b5:93:4a:d7:d9:75:a2:81:b1:
                    08:3b:d0:65:26:d5:aa:3b:20:6f:71:d3:1c:6e:cf:
                    96:78:89:d2:fd:02:08:eb:da:ec:4d:2b:fc:3f:82:
                    2f:5d:5a:d3:19:2b:96:ee:56:c3:1f:d4:0a:ee:94:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:60:B0:51:AE:99:18:F1:00:D1:04:4A:66:A2:10:56:03:7B:66
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:72:83:64:8d:2c:5b:3d:f0:e0:77:e6:43:b8:39:91:65:
         cd:30:a7:46:06:6a:bc:9b:ed:f1:8d:3c:40:09:74:00:94:66:
         c1:1e:69:a6:0b:94:c2:1f:31:66:66:0f:83:7a:5a:1f:5f:c9:
         b1:ea:85:7f:67:70:2e:d7:8f:47:ff:92:e2:98:46:1c:77:80:
         97:51:12:5e:e3:b9:70:bb:88:14:b6:7d:1c:a1:4a:b5:22:35:
         79:25:48:11:56:2d:48:d0:61:d1:19:c3:d1:15:ca:a6:0f:40:
         67:43:87:e0:58:87:ad:50:3d:17:10:a3:81:68:1e:60:68:ce:
         18:1d:c1:d8:59:8f:69:2a:9d:a4:1e:2f:b9:21:3f:36:7f:aa:
         aa:7b:58:ac:73:01:88:08:11:72:48:54:95:fc:5d:69:04:0a:
         c8:12:43:a7:d7:2e:24:53:ef:0c:70:5d:b2:3c:04:96:2b:5d:
         4f:7c:91:f0:0a:6a:76:75:2d:94:2b:95:9c:73:55:c0:03:55:
         6d:68:14:80:2d:75:30:0e:f0:8f:93:8e:11:22:97:7e:01:32:
         85:71:d2:d3:5e:b2:bf:17:5a:de:c8:40:be:9e:d9:7b:ff:05:
         ee:d7:5b:bf:ab:1d:43:88:ba:d9:e0:92:d9:af:bd:a8:dd:99:
         62:3e:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org