Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          FaZQJ4F58LBqTLAr8vhfGrEms1KYmmk4qQW40k3QmC0=
Subject key identifier:   0E:8B:76:E5:8A:03:FB:B8:17:2E:B8:F2:14:3E:60:F2:14:62:EA:92
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       665E162BADC9C403D72E43EF38E5718922486948
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.196.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:16:2b:ad:c9:c4:03:d7:2e:43:ef:38:e5:71:89:22:48:69:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:98:c6:6f:55:52:f7:40:f2:3b:63:c3:7d:
                    f0:65:8f:98:da:ca:0b:98:27:e3:29:08:79:2e:08:
                    2f:11:59:48:ba:de:70:2f:13:cf:3d:a3:e6:0c:6b:
                    cf:dd:6d:55:d2:33:ac:d9:c9:69:dc:c8:36:aa:2c:
                    a1:f0:ef:2f:72:76:eb:1f:84:f6:ad:70:3a:89:b4:
                    7e:92:54:82:a4:42:d4:6b:71:24:52:85:1e:7b:90:
                    9f:d0:88:a2:cb:37:1f:f4:92:fb:36:82:4f:43:61:
                    c1:81:c3:de:a3:13:19:db:b0:ff:92:19:fd:43:05:
                    40:33:31:33:8c:a9:6d:6d:55:2b:53:2b:82:bc:d8:
                    05:d7:8e:2f:24:07:83:03:c7:93:f3:74:74:94:24:
                    02:c5:fc:83:f3:70:24:9f:43:0c:8e:c4:8e:51:2d:
                    c6:60:36:b4:86:29:e4:12:3e:ea:97:1f:40:15:2e:
                    5f:89:70:8f:6b:e7:ce:79:45:4f:ac:0a:77:10:9c:
                    69:4a:df:75:4f:c9:16:9a:23:65:24:2b:96:65:33:
                    73:43:0c:25:1b:8a:da:8b:14:21:0c:c0:ad:bf:39:
                    99:e3:98:d0:6e:72:74:bf:cf:cc:46:70:54:7b:d1:
                    7a:a2:44:3f:e8:5f:10:ca:91:b3:3b:fc:78:a7:e1:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:76:E5:8A:03:FB:B8:17:2E:B8:F2:14:3E:60:F2:14:62:EA:92
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:0a:a6:92:4e:53:dc:cc:6f:6a:60:ad:6e:bb:d2:02:92:
         8e:b3:42:cd:5f:b5:de:8c:56:ed:f4:2e:63:0b:01:42:aa:4c:
         92:da:58:dc:60:95:7d:66:be:09:22:dc:12:bd:65:ee:9a:1b:
         f5:86:2d:70:2e:5f:c2:d4:b1:dc:68:9f:01:3e:5a:ab:93:0f:
         d6:00:ea:b7:f3:25:22:58:62:34:18:b5:c9:03:ca:e9:19:68:
         f7:6d:7a:62:7c:6e:87:ce:f5:51:44:fb:f3:fc:1e:c6:40:c9:
         d0:df:78:3c:48:8b:54:0f:06:d9:bd:ae:f5:e2:85:5b:15:b8:
         bf:13:94:8d:12:b4:14:bd:1f:3c:3a:f9:7c:51:34:3a:55:96:
         7f:60:f5:9f:61:6d:c0:0e:7c:12:ac:46:d5:55:18:0b:a9:b3:
         90:16:b1:a9:54:ff:78:f4:8b:bc:18:24:52:31:0b:6b:3d:92:
         28:86:1a:b8:8a:01:5a:56:e6:44:c6:d1:61:41:1e:4a:6f:c8:
         d8:49:d5:28:a8:ea:01:b4:88:66:21:53:8a:91:75:18:2e:7a:
         a3:4b:ad:e0:b7:7c:39:f8:7a:75:77:92:cc:04:88:9d:e5:3e:
         1b:fb:ec:8c:1e:cd:22:57:df:22:89:8b:f0:6d:50:a4:20:cf:
         43:f2:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org