Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230312e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3230312e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          2WHvY/CG7KF6e06OZY44tZHsQOnof0ZcHfjeHdJmMiM=
Subject key identifier:   27:08:F4:74:73:63:31:9A:62:28:CA:07:DA:33:CB:A4:8C:EC:03:F6
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       7F74360A84B8A25D0309A4D0301B48D85F4EB3D9
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230312e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        179.108.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:74:36:0a:84:b8:a2:5d:03:09:a4:d0:30:1b:48:d8:5f:4e:b3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:29:1e:62:cc:5e:c7:92:34:c0:df:b3:98:
                    19:32:d0:84:84:63:fd:be:24:a1:b0:6a:f9:d5:42:
                    1b:e5:f0:81:23:9e:de:f6:b2:2b:f0:7f:5a:2c:28:
                    b1:98:e7:a9:aa:15:d1:57:34:48:90:fe:eb:78:8b:
                    d4:61:45:0a:2c:06:2e:48:9a:2b:7e:e5:1f:2a:82:
                    1d:82:3d:8a:e1:25:b4:e8:e0:76:42:b1:fe:8a:e5:
                    d9:14:25:9e:a1:b8:e4:53:c2:84:9b:04:9f:67:2e:
                    6b:15:e2:f8:62:0e:fc:a1:46:51:2f:a6:21:eb:9b:
                    1d:44:6d:db:0e:50:96:43:3d:18:6a:1d:aa:ee:b7:
                    f7:46:84:0e:10:6e:36:ac:36:29:bc:c8:09:c7:da:
                    52:57:54:2c:15:7e:92:4e:9a:85:0c:03:e6:a6:a4:
                    73:67:d5:cf:cc:8c:00:0a:89:d3:a9:f7:d9:4c:9c:
                    1c:7a:ef:36:ab:21:da:81:19:69:56:3e:fe:28:63:
                    cf:df:7b:0b:6e:15:7c:79:dc:a8:72:00:80:c7:94:
                    0b:9c:40:47:4f:b4:a6:61:e1:83:96:5f:3d:5d:12:
                    91:a1:e9:7b:7c:07:de:0f:ea:fc:f2:40:cc:39:9b:
                    13:8a:6a:59:ee:1a:29:65:13:2a:af:04:e9:a6:8a:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:08:F4:74:73:63:31:9A:62:28:CA:07:DA:33:CB:A4:8C:EC:03:F6
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230312e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:fb:ba:f6:1a:12:1b:52:07:b7:32:60:91:46:2b:f9:7e:
         c4:28:20:8d:26:25:ec:89:7e:6a:f1:91:ec:2c:11:02:42:16:
         98:53:45:14:33:86:e0:84:51:c2:c2:dc:cb:2d:ee:86:4d:d8:
         a1:76:f6:e3:76:ec:eb:39:d2:33:23:e8:15:78:0b:2c:33:25:
         b0:d0:0a:ef:ae:23:08:df:06:4b:34:01:f8:e1:75:7c:72:23:
         19:5a:69:08:3a:ae:d0:af:76:9d:12:e8:0c:a4:3a:14:71:52:
         66:d1:13:a4:37:37:f6:45:19:bd:4f:ef:4f:fc:f6:6d:b5:88:
         02:8d:90:f8:a3:54:a6:c8:07:33:19:ed:79:84:ce:84:7a:1e:
         ab:6e:8f:c3:63:63:e5:df:a6:cb:80:48:2c:03:2f:4e:8a:9c:
         d1:01:11:dd:f7:ca:07:f6:24:98:0f:d4:76:bd:57:87:e0:62:
         85:31:18:d9:a0:80:17:1b:7d:95:7f:59:fa:fc:c8:aa:44:be:
         f1:1e:e3:be:30:e8:1c:aa:62:76:0c:9a:00:ff:17:e0:d7:b3:
         1f:ae:84:62:fa:28:fa:2a:fa:3c:23:2f:fb:f3:11:fb:37:8b:
         ab:f6:5a:1e:f6:7c:b3:1d:14:cd:bb:b2:f2:05:11:91:7f:b3:
         4c:26:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org