Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230332e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3230332e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          9GhkmmMagwnhg9LvLJqbwUYEc09h4prPih4D6O0gn10=
Subject key identifier:   9F:EB:49:83:9F:74:15:2A:F1:BF:CE:46:B7:B3:B5:A3:71:28:DC:B8
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       37FC05A206F6EAC2F863CFD74179B19FFFAFF7F7
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230332e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        179.108.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fc:05:a2:06:f6:ea:c2:f8:63:cf:d7:41:79:b1:9f:ff:af:f7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject: CN=3082010A0282010100B0506E642B517EEA692D78F6F454E1ADCD2DA2FC94B7046D809132BE89E7F09D8D5D57C5491EF113CFD3B68B2795DEF8CCBB095CA5EA0D37F4C574E2E31364F6BD8F6D69DD255D00AD0E4AA578556D3EE3DF119385D66012CBE50B21DDB21B539869162C3EFEC4CD4B7F619DDF676B7F9AF6842716AA5E353DEE51F023A32CA98A6724FFB7400191334AACD75B75D02F390F1AC566E3C9E0C912635BB245CBEA8A6068E6DA8E6E3BDF589F9D79F4DD04D8DA94500C072922F43F3524F51D66F93485551848BAE83EA498FA052C1C3E04951E111529229DBC10ECA0925B9A881B591DF09A89D6C1C63FEE4E58FE03FAA2265722F81ED8C18D5552E6178D73C9250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:6e:64:2b:51:7e:ea:69:2d:78:f6:f4:54:
                    e1:ad:cd:2d:a2:fc:94:b7:04:6d:80:91:32:be:89:
                    e7:f0:9d:8d:5d:57:c5:49:1e:f1:13:cf:d3:b6:8b:
                    27:95:de:f8:cc:bb:09:5c:a5:ea:0d:37:f4:c5:74:
                    e2:e3:13:64:f6:bd:8f:6d:69:dd:25:5d:00:ad:0e:
                    4a:a5:78:55:6d:3e:e3:df:11:93:85:d6:60:12:cb:
                    e5:0b:21:dd:b2:1b:53:98:69:16:2c:3e:fe:c4:cd:
                    4b:7f:61:9d:df:67:6b:7f:9a:f6:84:27:16:aa:5e:
                    35:3d:ee:51:f0:23:a3:2c:a9:8a:67:24:ff:b7:40:
                    01:91:33:4a:ac:d7:5b:75:d0:2f:39:0f:1a:c5:66:
                    e3:c9:e0:c9:12:63:5b:b2:45:cb:ea:8a:60:68:e6:
                    da:8e:6e:3b:df:58:9f:9d:79:f4:dd:04:d8:da:94:
                    50:0c:07:29:22:f4:3f:35:24:f5:1d:66:f9:34:85:
                    55:18:48:ba:e8:3e:a4:98:fa:05:2c:1c:3e:04:95:
                    1e:11:15:29:22:9d:bc:10:ec:a0:92:5b:9a:88:1b:
                    59:1d:f0:9a:89:d6:c1:c6:3f:ee:4e:58:fe:03:fa:
                    a2:26:57:22:f8:1e:d8:c1:8d:55:52:e6:17:8d:73:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EB:49:83:9F:74:15:2A:F1:BF:CE:46:B7:B3:B5:A3:71:28:DC:B8
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230332e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:16:ac:13:4d:be:c7:df:17:51:76:96:1f:12:75:d8:05:9f:
         95:2f:4c:51:61:d9:cf:87:df:70:39:3f:e3:1e:9e:12:b5:ba:
         47:c7:4a:e0:1c:ba:b2:78:a5:8e:69:d0:1c:99:2e:7f:78:0a:
         92:57:ca:cb:3d:61:03:5f:91:c5:01:af:4b:22:a5:bc:7d:c7:
         68:96:52:a8:7b:10:f4:73:01:eb:5a:53:54:ff:b2:e5:c6:fc:
         e0:99:98:f6:ba:b9:2f:be:18:01:9b:ff:17:19:ca:90:4c:ff:
         66:33:06:b0:65:db:93:59:17:cc:43:85:f5:73:9a:ed:fd:0a:
         db:a1:6a:c3:a3:25:ae:93:dc:7b:0a:dc:33:68:bd:f2:6c:44:
         2c:ed:8c:20:0e:59:1a:db:8d:bf:ff:b3:07:92:e6:9a:c0:36:
         6b:ca:94:ae:0a:78:37:4e:36:c6:34:ca:00:c7:65:b6:5a:c4:
         6a:1c:62:2c:1b:be:86:96:9e:4b:3b:2a:d7:bf:0f:a1:b0:00:
         d3:1f:d2:db:03:72:53:db:db:f5:00:40:b0:a0:bc:85:78:21:
         fc:0f:79:13:c2:9a:c8:f1:8e:35:49:fc:41:40:c1:6b:35:4e:
         f0:50:ee:7d:32:7f:33:7f:9f:22:68:a4:2d:12:d0:c1:ca:25:
         df:be:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org