Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230302e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          ifp+M1xSIvc4h4Eu0NEIoTRYYKlrg/ltO3E9n+hDdrA=
Subject key identifier:   A4:43:32:4D:F7:AC:FE:7F:16:88:26:8E:7F:F8:AF:D7:6D:4A:6D:9A
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       237C6FD0FE5AF80542C60E002FB1CA40CEB52EDC
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230302e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        179.108.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7c:6f:d0:fe:5a:f8:05:42:c6:0e:00:2f:b1:ca:40:ce:b5:2e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:f6:0c:81:12:1f:35:3a:d8:bf:8c:4a:17:
                    d8:da:eb:c6:eb:01:c2:5a:8b:e6:5f:9d:3d:95:56:
                    f6:f6:28:96:01:42:cb:5d:70:c4:e3:bf:00:98:fe:
                    c5:cb:58:43:de:fe:d8:e2:6d:ce:45:7a:ec:f4:27:
                    2f:15:a1:8d:a8:b7:f7:e7:6b:a5:7f:df:7a:83:55:
                    d5:25:05:64:f5:1d:66:7c:a6:8e:03:13:d2:4f:fd:
                    8f:e0:4b:63:db:7d:77:da:da:05:bf:22:f1:f9:83:
                    8b:6d:73:35:25:6e:1c:6d:40:e6:3f:14:c0:b0:1c:
                    a5:83:27:57:9f:87:a3:ad:53:4b:43:43:e5:36:f3:
                    73:df:b7:1d:87:42:0e:3c:f3:eb:aa:36:72:51:71:
                    30:ed:75:f3:5b:15:36:57:bf:d7:85:b3:04:0a:ee:
                    3b:73:87:c0:a2:57:3c:b4:2b:55:71:f9:17:73:47:
                    23:6d:10:a9:f9:bd:8e:35:cf:ee:a1:bf:01:cf:25:
                    e1:98:51:09:7a:6e:b8:b8:09:c5:04:ad:e4:01:6b:
                    41:aa:14:4c:be:77:e6:13:d6:65:79:64:a8:d6:2f:
                    92:f3:0f:e3:f4:38:42:2a:17:5b:b9:6c:5e:42:52:
                    97:05:2b:1f:68:f9:0e:3a:4c:c2:45:13:c4:5b:63:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:43:32:4D:F7:AC:FE:7F:16:88:26:8E:7F:F8:AF:D7:6D:4A:6D:9A
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:cf:d5:e7:f1:22:c2:a0:6e:e2:8c:23:03:1e:67:e5:e4:d8:
         3a:4a:94:ed:ff:43:0a:e1:28:b2:fe:8f:4f:10:46:ef:d4:40:
         ca:ec:eb:ac:f5:ce:3b:98:ab:6f:a1:a4:14:3d:b6:61:ec:be:
         6c:f2:dc:c3:1f:01:1d:4e:62:33:0c:d4:bb:3c:f6:b2:26:37:
         1d:38:c1:6c:88:3d:93:6e:72:03:17:a2:0c:44:d1:4e:23:14:
         67:b1:d2:f3:b1:15:54:4a:32:a0:7e:61:d9:39:3e:83:fa:4c:
         db:ec:a5:c7:ab:6f:90:3d:32:fe:90:29:4f:ac:77:ac:ed:43:
         53:87:0a:84:b1:3c:89:3a:76:48:34:2d:52:df:eb:88:e0:5a:
         dc:47:5d:3e:47:48:93:2a:27:bf:2f:19:78:1a:3f:62:70:f8:
         dc:ba:35:2c:c2:2a:d1:86:0c:6f:aa:29:c8:fc:fb:28:44:f2:
         cf:49:bf:2b:0c:74:10:77:3f:a4:37:62:08:6d:09:5b:3f:03:
         e6:07:27:60:c3:70:13:1d:89:18:e0:b6:09:29:da:68:8a:7a:
         b5:f4:1f:8a:b0:76:e6:34:2f:51:c2:26:fb:3d:6c:8d:ab:fd:
         69:cf:ae:a5:f7:a1:09:1a:62:ee:9c:80:ff:f6:d8:8d:40:25:
         6a:5d:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org