Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          MVZ/zkTN+JvsYi6ORW/l6wfqsF/Y+2+MsCcjn0Ut2zE=
Subject key identifier:   7F:98:1A:C2:6C:E8:2C:0B:11:99:40:EC:6C:68:72:40:B5:92:BB:FE
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       2BC7910C262B7534050F3C6ACA1525728445DA5E
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        179.108.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:91:0c:26:2b:75:34:05:0f:3c:6a:ca:15:25:72:84:45:da:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:5e:1f:c8:d5:1e:87:c8:b8:07:0a:87:8a:
                    e9:cb:96:40:0b:c4:9c:77:ad:b7:13:dd:89:aa:ce:
                    8b:37:c8:c7:5b:d0:83:0e:97:11:92:8e:39:da:b6:
                    75:2e:2f:13:cb:28:bb:33:18:af:39:c0:4b:67:b7:
                    4c:b5:51:2b:b1:cd:f5:7d:02:11:04:0e:20:5f:7c:
                    bf:f9:78:f2:59:08:4d:52:59:c3:72:16:c8:37:cd:
                    f0:69:19:b5:8a:e6:58:1d:aa:d1:f1:af:ed:20:d0:
                    e5:70:16:50:07:36:90:ec:cf:3c:7a:d3:9d:0a:b6:
                    53:47:6c:bf:0a:59:55:7d:4f:2a:20:42:00:8a:52:
                    29:fe:7e:e1:ab:71:21:e2:78:70:ed:3f:c2:14:fa:
                    20:ac:05:dc:c5:4c:90:7f:4a:c2:73:03:49:78:3b:
                    7a:3a:3f:3f:1e:2d:a3:d1:f1:f7:3d:48:bf:6b:5a:
                    de:7b:72:b1:3f:c7:1e:90:75:98:7d:9f:02:fb:a3:
                    c0:c9:61:64:c7:54:f8:14:7b:a4:23:9b:ca:7c:bb:
                    8a:d6:20:ee:a1:21:14:4b:39:68:a0:d4:ef:20:89:
                    a5:80:37:83:dd:74:6c:35:fb:e7:6a:12:a4:83:35:
                    45:8c:96:70:af:33:55:bc:1b:35:9a:fb:a7:34:fa:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:98:1A:C2:6C:E8:2C:0B:11:99:40:EC:6C:68:72:40:B5:92:BB:FE
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:2a:d1:d9:b8:3b:29:37:87:18:92:00:9e:a9:fa:c1:dd:cc:
         2b:b0:c6:44:66:3b:e6:c4:0e:81:91:ad:49:c1:cd:6c:aa:9f:
         3b:30:a3:69:0e:e4:4a:13:ad:15:7e:9c:bb:47:a5:91:72:c9:
         b8:69:04:cb:69:d3:ba:f3:cc:1c:5d:65:d8:26:bb:e1:87:ab:
         9c:5c:e1:75:ad:48:39:d8:2e:f2:a4:11:3e:48:75:9b:13:6b:
         99:8d:36:c1:6d:43:6e:dc:dc:b3:87:f6:c4:db:1f:85:ba:30:
         4c:75:a3:83:95:18:3f:c0:da:22:ac:0c:0d:34:67:7f:71:73:
         0f:a9:fd:d2:5a:7b:a9:af:dc:0c:03:6b:10:1a:d2:fe:66:dd:
         38:b9:8b:ad:3c:68:23:09:48:05:97:e9:d5:b2:83:30:f9:18:
         4c:2e:34:d3:d2:7f:2e:e8:74:87:52:68:29:8f:87:4d:12:8e:
         75:92:47:52:b4:45:06:d9:02:21:a5:4c:5d:60:8b:e8:d1:06:
         df:f8:0d:4c:2e:7e:3e:5c:e4:7a:79:24:72:21:14:c0:28:29:
         57:95:1a:81:cf:2a:58:bf:44:76:cb:4e:d6:45:6b:f7:ec:67:
         61:9f:c1:74:37:d9:98:31:b5:e2:79:f6:e1:75:4d:7e:bd:24:
         1f:05:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org