Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          egTlCKBizc/AFp0oWZw9Eg/dNdscpB9yzV9HETy4JQU=
Subject key identifier:   24:6B:E3:44:FB:0F:E8:A2:01:4D:FC:06:D0:14:63:6E:70:0B:C5:A5
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       6E18C6B3D046306CBAF48344B1F7BB4768594EC0
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     262691
IP address blocks:        179.108.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:18:c6:b3:d0:46:30:6c:ba:f4:83:44:b1:f7:bb:47:68:59:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:16:9b:ca:95:34:08:bd:5a:2b:9f:7a:b0:
                    a1:49:9c:b4:db:48:fb:73:29:88:8d:b9:28:67:fc:
                    d5:0c:a6:59:5f:c8:2d:9b:55:91:cb:15:ea:76:57:
                    a6:f0:46:22:31:b8:52:2a:97:eb:01:55:42:fd:1a:
                    83:1e:d7:4a:64:5c:ed:a8:86:97:5c:34:c9:92:97:
                    98:fc:95:a7:6d:d7:e6:ad:87:49:8f:28:4e:7a:f2:
                    d7:d7:92:88:fd:5b:d9:24:82:71:d4:4a:f7:5b:85:
                    ab:b2:b1:ef:fe:2a:03:e6:a4:27:87:c3:0e:1b:b2:
                    b6:42:68:ed:cc:56:9e:30:ab:04:5c:70:26:4e:12:
                    a2:a1:da:bf:03:2d:38:bb:36:89:8f:79:cb:af:1d:
                    e9:c0:c9:9f:86:52:4d:ba:b4:23:4e:26:20:43:18:
                    e1:24:55:79:ea:ee:56:a5:88:04:f1:a8:c0:7b:5d:
                    dd:78:7f:b0:90:95:a8:08:6a:ad:ca:38:b8:f3:33:
                    67:b5:e5:51:0e:44:ef:ae:26:2c:d0:67:47:8d:00:
                    5e:7d:a5:ce:73:89:78:d3:fe:6c:e9:fc:8f:53:4d:
                    d3:0d:8a:05:98:f7:28:92:5b:a4:35:5b:12:ed:0e:
                    c4:c2:97:1d:80:05:7c:34:c0:1c:ea:93:6e:f5:0a:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6B:E3:44:FB:0F:E8:A2:01:4D:FC:06:D0:14:63:6E:70:0B:C5:A5
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:93:8a:93:f2:97:20:4c:2a:10:8e:44:21:d4:cc:93:a5:24:
         01:70:27:10:85:d5:6f:3f:19:84:bc:5c:e3:c6:a7:e6:6b:c7:
         34:4f:23:1e:9a:ca:e8:29:e3:18:6f:00:53:83:a6:ef:b1:d4:
         4e:b0:bd:05:fd:9f:af:3b:98:84:37:ca:30:77:55:07:8d:f8:
         24:7b:81:6d:72:cf:38:57:60:37:2d:dd:b1:04:4a:1f:5e:77:
         ca:2d:30:63:90:a6:9b:62:52:f7:7b:f4:86:17:29:7e:c1:0d:
         ab:81:b3:38:6d:1b:95:0f:3c:be:a6:f9:aa:ce:79:77:25:2e:
         83:8c:c8:2e:c4:cb:41:51:52:98:80:cc:df:57:85:0b:3e:df:
         7f:f0:dd:05:57:99:1c:b2:27:73:64:3b:e4:d1:90:de:c2:84:
         1e:d7:2d:4c:2c:13:77:b3:76:b6:36:a1:ad:ee:bd:c8:80:c8:
         a8:0f:63:d7:7f:5b:4d:b5:74:cd:e0:16:d5:b6:c6:8b:c4:ab:
         d0:4c:fc:c3:e9:11:d9:59:12:f0:a5:13:df:02:da:b7:dc:27:
         8f:92:30:a2:45:10:9a:86:94:7d:0f:dd:42:47:41:8d:53:0a:
         c2:a9:dc:51:15:81:27:59:0a:af:b7:1d:45:cc:ae:a3:1f:a8:
         99:de:fe:b2
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUbhjGs9BGMGy69INEsfe7R2hZTsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTJaFw0yNTA0MDIxODMwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjg4MjE2OUJDQTk1MzQwOEJE
NUEyQjlGN0FCMEExNDk5Q0I0REI0OEZCNzMyOTg4OERCOTI4NjdGQ0Q1MENBNjU5
NUZDODJEOUI1NTkxQ0IxNUVBNzY1N0E2RjA0NjIyMzFCODUyMkE5N0VCMDE1NTQy
RkQxQTgzMUVENzRBNjQ1Q0VEQTg4Njk3NUMzNEM5OTI5Nzk4RkM5NUE3NkREN0U2
QUQ4NzQ5OEYyODRFN0FGMkQ3RDc5Mjg4RkQ1QkQ5MjQ4MjcxRDQ0QUY3NUI4NUFC
QjJCMUVGRkUyQTAzRTZBNDI3ODdDMzBFMUJCMkI2NDI2OEVEQ0M1NjlFMzBBQjA0
NUM3MDI2NEUxMkEyQTFEQUJGMDMyRDM4QkIzNjg5OEY3OUNCQUYxREU5QzBDOTlG
ODY1MjREQkFCNDIzNEUyNjIwNDMxOEUxMjQ1NTc5RUFFRTU2QTU4ODA0RjFBOEMw
N0I1RERENzg3RkIwOTA5NUE4MDg2QUFEQ0EzOEI4RjMzMzY3QjVFNTUxMEU0NEVG
QUUyNjJDRDA2NzQ3OEQwMDVFN0RBNUNFNzM4OTc4RDNGRTZDRTlGQzhGNTM0REQz
MEQ4QTA1OThGNzI4OTI1QkE0MzU1QjEyRUQwRUM0QzI5NzFEODAwNTdDMzRDMDFD
RUE5MzZFRjUwQTBENTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuIIWm8qVNAi9WiuferChSZy020j7cymIjbkoZ/zVDKZZX8gtm1WR
yxXqdlem8EYiMbhSKpfrAVVC/RqDHtdKZFztqIaXXDTJkpeY/JWnbdfmrYdJjyhO
evLX15KI/VvZJIJx1Er3W4WrsrHv/ioD5qQnh8MOG7K2QmjtzFaeMKsEXHAmThKi
odq/Ay04uzaJj3nLrx3pwMmfhlJNurQjTiYgQxjhJFV56u5WpYgE8ajAe13deH+w
kJWoCGqtyji48zNnteVRDkTvriYs0GdHjQBefaXOc4l40/5s6fyPU03TDYoFmPco
klukNVsS7Q7EwpcdgAV8NMAc6pNu9QoNUQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FCRr40T7D+iiAU38BtAUY25wC8WlMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMw
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbMowDQYJKoZIhvcNAQELBQADggEBAGCTipPylyBMKhCORCHUzJOlJAFwJxCF
1W8/GYS8XOPGp+ZrxzRPIx6ayugp4xhvAFODpu+x1E6wvQX9n687mIQ3yjB3VQeN
+CR7gW1yzzhXYDct3bEESh9ed8otMGOQpptiUvd79IYXKX7BDauBszhtG5UPPL6m
+arOeXclLoOMyC7Ey0FRUpiAzN9XhQs+33/w3QVXmRyyJ3NkO+TRkN7ChB7XLUws
E3ezdrY2oa3uvciAyKgPY9d/W021dM3gFtW2xovEq9BM/MPpEdlZEvClE98C2rfc
J4+SMKJFEJqGlH0P3UJHQY1TCsKp3FEVgSdZCq+3HUXMrqMfqJne/rI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org