Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          wQc4CrKY+EHEpogNgkPFGZgB+3dk/6GgEw2RhiICv/s=
Subject key identifier:   93:FA:92:15:2D:DE:6C:55:62:D2:57:64:CB:66:42:BF:07:31:13:86
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       1282253D0C7DC5985A10C7BE9908DABA90015CD0
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262691
IP address blocks:        179.108.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:82:25:3d:0c:7d:c5:98:5a:10:c7:be:99:08:da:ba:90:01:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject: CN=3082010A0282010100AB8D05278F7ACF00CDF52C4532771495F092B62657B8F25F54B2820C6A052501FA428938C6C8AFC5C2EB9857690995C423DD6FBAFAAB8C1851999300F24A7D3F1EBAA84610B550359D03B736746F756412599AB73A264864415902B897371B0748DCA590EF261473D55D820E63780CAE86B30B4611690553AC2FF1DEC5EC4E117BE3FD23B2A9BF201DC9CDCCB90656E1C5306E4799833EE19748A488477B15B1B71A69F2E9F2C8CFD4871837C2698A8686BD49640D6A996E4052B93EB6B2892B3B635A89A0DC2D75C1FDAA195DF1AEAEB2B581CA465127B234E1FCF4C941BB63F72C6174FFEB4FE85C5388118C8583F0B70980654D149C852A9C7269947223310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:05:27:8f:7a:cf:00:cd:f5:2c:45:32:77:
                    14:95:f0:92:b6:26:57:b8:f2:5f:54:b2:82:0c:6a:
                    05:25:01:fa:42:89:38:c6:c8:af:c5:c2:eb:98:57:
                    69:09:95:c4:23:dd:6f:ba:fa:ab:8c:18:51:99:93:
                    00:f2:4a:7d:3f:1e:ba:a8:46:10:b5:50:35:9d:03:
                    b7:36:74:6f:75:64:12:59:9a:b7:3a:26:48:64:41:
                    59:02:b8:97:37:1b:07:48:dc:a5:90:ef:26:14:73:
                    d5:5d:82:0e:63:78:0c:ae:86:b3:0b:46:11:69:05:
                    53:ac:2f:f1:de:c5:ec:4e:11:7b:e3:fd:23:b2:a9:
                    bf:20:1d:c9:cd:cc:b9:06:56:e1:c5:30:6e:47:99:
                    83:3e:e1:97:48:a4:88:47:7b:15:b1:b7:1a:69:f2:
                    e9:f2:c8:cf:d4:87:18:37:c2:69:8a:86:86:bd:49:
                    64:0d:6a:99:6e:40:52:b9:3e:b6:b2:89:2b:3b:63:
                    5a:89:a0:dc:2d:75:c1:fd:aa:19:5d:f1:ae:ae:b2:
                    b5:81:ca:46:51:27:b2:34:e1:fc:f4:c9:41:bb:63:
                    f7:2c:61:74:ff:eb:4f:e8:5c:53:88:11:8c:85:83:
                    f0:b7:09:80:65:4d:14:9c:85:2a:9c:72:69:94:72:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FA:92:15:2D:DE:6C:55:62:D2:57:64:CB:66:42:BF:07:31:13:86
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:e9:4b:f4:4c:be:89:86:74:fd:55:1c:60:2d:aa:a5:41:ae:
         fb:8c:77:8e:1e:a5:33:4b:6c:73:35:d6:64:7f:c6:ec:ae:98:
         0e:e4:87:4e:cb:f6:3c:ab:27:73:0c:d6:f7:8e:ae:65:e8:09:
         18:7a:33:ef:ad:f4:3f:25:b0:50:7d:64:d4:03:e9:04:1c:89:
         9a:e7:fc:84:05:37:ad:89:e2:03:b2:7a:e0:87:f1:22:54:43:
         ab:f1:50:92:a9:17:ef:66:4a:b6:10:f0:25:4f:ff:d7:aa:58:
         9a:c3:14:ee:b6:aa:60:4f:94:79:d4:55:65:ad:81:a8:72:08:
         ab:e5:f2:c5:93:2d:30:3c:91:d0:b3:6c:61:08:85:d6:ed:3e:
         bb:0e:3a:7c:1c:74:9f:2a:0c:fb:ae:cd:e6:c0:df:d4:3a:ed:
         6d:6a:0c:63:cc:e6:df:78:94:52:a4:af:82:6b:6f:76:06:8d:
         14:13:01:14:80:af:61:77:14:d2:7c:5f:f0:9d:d6:10:c4:8e:
         ee:ca:25:45:d7:09:db:48:8c:ea:fb:a9:83:9b:6f:96:ca:03:
         d9:29:3e:31:9a:f2:34:ac:55:6b:54:5b:41:fc:b7:b3:c9:e7:
         78:bf:48:11:33:bf:dc:eb:36:51:ed:6b:01:31:ce:2d:f5:1f:
         08:09:fe:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org