Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230302e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3230302e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          f0rBOfiHOYLJXOQsiMo1mQMNU189nARRIvQq0THDfJI=
Subject key identifier:   B8:BA:20:61:28:77:A4:FC:A1:84:6E:B0:74:78:1D:85:AD:99:61:51
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       22D667323619806BB145298A4EA7DFB3856DA5C1
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230302e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        179.108.200.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d6:67:32:36:19:80:6b:b1:45:29:8a:4e:a7:df:b3:85:6d:a5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject: CN=3082010A0282010100C08B4A1357834A59A6FD3DC9B9F7EA4D442AC22E52BCFA698983C34FFE6EAF7C463E3B5840303204990B130F75D7DC3CC5136302C4C5E97420CF3CE599F0227AFC61E18D8A9CA94E32C8BB870E303A4C48D3867BD62F7BCEA65F63B39EB9BF19C30A432CA7FBEF21F476CB4475EA063280CEB5DE4DAD273D43FF09F4B531A15E79ECB8FB3D880AB5E7CD782624BB9191AEE514A76AC58FC93C3255C501120A4B6A536ACA3FAAFEB9D6F3532AC835C5068335650945E92386FD5F1024D18F866170A9A83C08482AA4033A5599C98BBFBC37577839EF8ED26EC4B74516C3D8660E5255B2698ABB3140C3B99F3EB1A376CDE6EDA9A1F5A4DC7A65318B3C6865D84D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:4a:13:57:83:4a:59:a6:fd:3d:c9:b9:f7:
                    ea:4d:44:2a:c2:2e:52:bc:fa:69:89:83:c3:4f:fe:
                    6e:af:7c:46:3e:3b:58:40:30:32:04:99:0b:13:0f:
                    75:d7:dc:3c:c5:13:63:02:c4:c5:e9:74:20:cf:3c:
                    e5:99:f0:22:7a:fc:61:e1:8d:8a:9c:a9:4e:32:c8:
                    bb:87:0e:30:3a:4c:48:d3:86:7b:d6:2f:7b:ce:a6:
                    5f:63:b3:9e:b9:bf:19:c3:0a:43:2c:a7:fb:ef:21:
                    f4:76:cb:44:75:ea:06:32:80:ce:b5:de:4d:ad:27:
                    3d:43:ff:09:f4:b5:31:a1:5e:79:ec:b8:fb:3d:88:
                    0a:b5:e7:cd:78:26:24:bb:91:91:ae:e5:14:a7:6a:
                    c5:8f:c9:3c:32:55:c5:01:12:0a:4b:6a:53:6a:ca:
                    3f:aa:fe:b9:d6:f3:53:2a:c8:35:c5:06:83:35:65:
                    09:45:e9:23:86:fd:5f:10:24:d1:8f:86:61:70:a9:
                    a8:3c:08:48:2a:a4:03:3a:55:99:c9:8b:bf:bc:37:
                    57:78:39:ef:8e:d2:6e:c4:b7:45:16:c3:d8:66:0e:
                    52:55:b2:69:8a:bb:31:40:c3:b9:9f:3e:b1:a3:76:
                    cd:e6:ed:a9:a1:f5:a4:dc:7a:65:31:8b:3c:68:65:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BA:20:61:28:77:A4:FC:A1:84:6E:B0:74:78:1D:85:AD:99:61:51
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230302e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:0b:8d:2f:c9:67:e9:42:15:48:fd:f2:64:16:dc:8b:1a:63:
         56:bc:33:6c:bb:1a:3d:fb:3d:8c:67:0d:be:fd:bf:05:44:8a:
         0b:02:94:ac:1c:47:9b:ef:82:f6:18:63:93:25:66:4d:62:1e:
         49:26:d7:90:c6:41:dd:54:af:f1:b8:31:16:45:ef:04:95:1e:
         74:34:82:de:4d:a6:70:f2:c1:8f:dd:74:2f:b4:56:4f:ec:cc:
         67:35:fd:e4:27:31:40:19:c5:dc:23:bd:21:39:7f:db:50:26:
         a2:f3:26:fe:46:ae:48:b6:55:bf:1d:aa:db:cc:1d:25:71:ef:
         ab:e3:0b:e3:a8:76:99:d1:9d:22:67:a6:0d:88:42:ea:62:5c:
         a3:a2:ff:b0:8f:6a:21:1f:22:77:8b:67:87:3b:9b:80:11:fb:
         ef:18:e1:69:93:4d:d3:2f:b8:1c:13:5a:ab:b6:d5:59:2e:77:
         f4:ba:6c:93:26:87:42:b4:6d:cb:b5:c8:d5:d3:ad:40:bd:b8:
         f6:90:cb:80:10:ed:c7:e2:5b:13:ed:ca:13:f2:a2:f4:ea:5f:
         96:fe:14:dd:11:13:65:7e:5f:c6:00:af:59:71:6f:7f:ee:6c:
         e5:62:a6:b2:b8:73:72:ba:51:ab:3b:c2:11:06:ba:64:79:8a:
         e7:4e:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org