Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          gvC7FKLpOT4D5Bo/GSbNxBcANTdoqj90qTtWW8lpe0A=
Subject key identifier:   B6:0E:42:19:8C:11:7B:7B:FD:66:18:58:F0:E5:FA:5A:E7:73:E5:75
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       296CEEDBE280978CF38F9E702CECB46F221064EF
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        179.108.198.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:ee:db:e2:80:97:8c:f3:8f:9e:70:2c:ec:b4:6f:22:10:64:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:e4:07:81:ec:c8:4b:76:2c:81:48:23:08:
                    14:7b:89:df:bf:bb:41:b4:30:f4:9a:51:bf:00:c7:
                    99:54:18:f5:49:0f:ff:00:d9:bf:b4:a6:f8:22:dc:
                    9c:2a:31:71:42:0c:66:9f:66:79:98:f1:7d:3b:30:
                    7a:f3:09:3e:dc:6a:4a:2b:c2:ee:3d:3f:5a:33:1a:
                    d7:b4:6e:cf:c4:2e:18:9d:ab:54:01:65:9f:f6:bc:
                    a2:d4:ee:72:c0:0b:f7:22:a6:a2:c1:b9:a2:13:ca:
                    fa:f4:b6:56:bf:f0:7c:b7:80:94:59:ae:9c:7e:7c:
                    d6:c6:49:8b:6e:21:e2:37:8f:bd:e0:3b:7e:bb:66:
                    bf:f0:c0:23:4d:7e:c1:aa:58:92:60:65:73:ae:db:
                    f3:74:f0:05:a8:f5:47:73:e0:35:c4:9f:57:14:91:
                    77:93:3d:0e:ce:27:16:7a:e6:48:09:29:b9:5a:0d:
                    3b:50:a5:9b:0d:5b:05:62:8b:b9:71:f8:ea:97:61:
                    5a:1a:c9:08:4f:d1:f7:e1:d1:8b:09:33:41:ca:99:
                    30:ed:51:11:28:bb:b1:41:a3:ef:4f:ce:4a:a6:b5:
                    34:0e:a1:fd:43:a1:d9:e0:30:38:62:79:3b:cb:58:
                    a8:ba:62:fd:39:06:96:90:9f:82:b6:8c:ec:78:d3:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:42:19:8C:11:7B:7B:FD:66:18:58:F0:E5:FA:5A:E7:73:E5:75
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3139382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:74:1a:9d:a6:91:d1:61:5f:0a:46:ae:df:5c:0c:a8:a5:76:
         3c:c6:22:22:91:cd:cc:e1:7a:44:52:1f:fe:e2:f6:2c:cf:cf:
         2b:32:bc:59:ce:08:1a:95:ed:2e:06:18:1a:a3:20:15:ac:78:
         10:4d:a7:41:bf:bd:9b:b2:ec:75:c9:3d:9d:60:aa:78:25:ad:
         9a:14:a5:f1:e4:31:ba:6d:5a:c5:1d:b9:4c:3e:8e:ea:22:6f:
         a7:24:b6:29:24:f0:3a:5e:fc:e5:52:8b:27:d2:cd:cd:13:f3:
         b5:26:64:c6:63:76:b6:56:35:99:54:1b:9a:d7:65:0e:21:85:
         ec:38:71:ed:11:cb:56:50:d3:65:8f:74:62:65:29:5d:c8:c0:
         50:64:40:76:fa:fb:c4:11:50:56:f0:66:19:0a:8e:21:a5:22:
         b4:40:15:6d:48:2f:b6:db:42:96:3f:46:0f:e9:d2:ed:41:b8:
         bc:49:9c:98:62:b5:73:7e:d3:92:1b:be:89:e8:f1:33:16:84:
         8f:6d:2d:be:87:ed:5f:ee:a8:33:73:d2:49:df:cb:41:91:77:
         78:98:45:ae:24:69:9b:c2:15:07:bf:9d:6b:17:2c:4a:54:9e:
         17:de:04:f0:4a:a6:36:91:f2:fe:af:04:d6:99:3e:ab:e5:c5:
         91:ea:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org