Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230322e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3230322e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          dGJUPGN0bMsV1jU8+rC15Vb/UGgmq3ba9IWRKtXtA6Q=
Subject key identifier:   B6:59:5A:E9:5E:45:E7:D7:1C:6B:0A:36:77:64:BB:5E:A6:F7:F6:75
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       30DB12DEA9B1FB082DC0FB6DCBC236D305477238
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230322e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        179.108.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:db:12:de:a9:b1:fb:08:2d:c0:fb:6d:cb:c2:36:d3:05:47:72:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject: CN=3082010A0282010100AF326D0CD26AEC4DBFA16B1F5BA0E2A728E44C1EFACA3AA44133A640B626D21E7269C39C6215F03A0CE59C8FEF5DF201B6F1A31E17AA2975BAA6DDD98A6C3894EE700C86B0BF0C3D06DCC0BCC9C5ECB47BCA4F30B8F38C7526D59489E7CD1B86F57C3FB32C6ABB0A86BAE7CFEFD4EEF8556A01C90EE98AEBB21D9AA68008076A19CED88902B4B4AACDF1FA72F4145A08C3D2C8E76CA61EAC85EB72A8E4BF443ABA4705CA0B09A90DFA2A318E0FCEFEB030339C5CECDDE4405C39775A211D59D7C3F5C1B081522F405AE4EC6F2EF42D94FE5AC28B5955BC85C8E7FE64408C8EDE0640C059213932FE5EE4A45A391AEDD3200747171AB6DD331A7764CEE50CE2350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:6d:0c:d2:6a:ec:4d:bf:a1:6b:1f:5b:a0:
                    e2:a7:28:e4:4c:1e:fa:ca:3a:a4:41:33:a6:40:b6:
                    26:d2:1e:72:69:c3:9c:62:15:f0:3a:0c:e5:9c:8f:
                    ef:5d:f2:01:b6:f1:a3:1e:17:aa:29:75:ba:a6:dd:
                    d9:8a:6c:38:94:ee:70:0c:86:b0:bf:0c:3d:06:dc:
                    c0:bc:c9:c5:ec:b4:7b:ca:4f:30:b8:f3:8c:75:26:
                    d5:94:89:e7:cd:1b:86:f5:7c:3f:b3:2c:6a:bb:0a:
                    86:ba:e7:cf:ef:d4:ee:f8:55:6a:01:c9:0e:e9:8a:
                    eb:b2:1d:9a:a6:80:08:07:6a:19:ce:d8:89:02:b4:
                    b4:aa:cd:f1:fa:72:f4:14:5a:08:c3:d2:c8:e7:6c:
                    a6:1e:ac:85:eb:72:a8:e4:bf:44:3a:ba:47:05:ca:
                    0b:09:a9:0d:fa:2a:31:8e:0f:ce:fe:b0:30:33:9c:
                    5c:ec:dd:e4:40:5c:39:77:5a:21:1d:59:d7:c3:f5:
                    c1:b0:81:52:2f:40:5a:e4:ec:6f:2e:f4:2d:94:fe:
                    5a:c2:8b:59:55:bc:85:c8:e7:fe:64:40:8c:8e:de:
                    06:40:c0:59:21:39:32:fe:5e:e4:a4:5a:39:1a:ed:
                    d3:20:07:47:17:1a:b6:dd:33:1a:77:64:ce:e5:0c:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:59:5A:E9:5E:45:E7:D7:1C:6B:0A:36:77:64:BB:5E:A6:F7:F6:75
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230322e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:80:ab:b6:52:6b:4b:62:51:39:52:46:6b:ea:d6:20:19:
         24:93:e4:f0:26:83:bd:44:bd:a5:10:0b:b4:09:5e:18:60:f4:
         cc:6c:1c:0c:ad:05:f1:52:18:fc:dd:c5:61:00:df:81:83:23:
         39:d5:a3:00:3a:01:b9:2b:9a:b0:23:1f:3e:7b:4e:e8:0a:2a:
         f3:cb:51:6d:46:c2:f4:a9:a7:cd:be:a9:45:a9:6b:59:14:54:
         f8:57:c2:e1:d1:13:c6:80:a7:54:09:c5:c7:80:a7:f2:0e:53:
         ab:f2:c6:d5:81:9f:81:30:b1:10:01:6c:b7:42:e6:b5:c5:50:
         d8:57:0e:9e:3f:7e:1d:d4:cd:2a:38:99:76:4e:56:14:b3:9c:
         65:27:88:0c:35:78:bf:cf:d7:1e:65:f0:9d:6f:90:9a:dc:f7:
         b5:00:c0:6b:43:18:5e:6d:62:2f:38:75:68:4f:10:cb:ca:22:
         34:d2:0c:f4:08:50:61:7d:c4:79:e2:79:84:c0:8e:83:14:65:
         e6:aa:a5:1e:0b:51:b6:4a:63:b4:1d:9c:6e:ef:99:9f:3f:0b:
         85:1f:4b:a0:80:3f:c6:52:30:00:e6:e4:f0:55:2d:e0:d4:c0:
         4b:e2:f1:05:e1:28:ba:7d:4a:83:a7:61:eb:30:b7:11:48:21:
         b5:12:8e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org