Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3230342e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          kORDnqXIBg6uQEDeoWOEe1wQyvjyf0gJXaB8Yz3mZ+A=
Subject key identifier:   AB:72:45:7C:05:78:4E:5D:98:5C:8F:66:8A:9B:E1:6C:61:1F:7B:2C
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       27AED85370CEDD3AB137214B82D7724F46B59ED4
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        179.108.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ae:d8:53:70:ce:dd:3a:b1:37:21:4b:82:d7:72:4f:46:b5:9e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:e5:dc:44:73:d1:20:2d:a3:3d:7a:f1:75:
                    2b:93:ce:84:81:02:40:79:31:87:2a:40:83:c0:cf:
                    e6:92:6f:19:5c:57:be:53:d5:38:ac:9e:f8:97:bc:
                    a9:8d:a9:b4:66:8a:dc:e6:18:0d:45:8d:fd:fa:cc:
                    c0:84:20:94:9a:5e:89:19:1e:e1:08:ce:99:48:5a:
                    32:89:53:cc:46:aa:e8:69:94:4f:ad:7f:fa:bc:9a:
                    d1:c9:7c:ae:97:a9:46:08:c7:59:6c:91:69:ef:ae:
                    ee:28:1f:06:6e:d8:2e:c6:b6:f6:db:42:e0:a1:5e:
                    5f:97:b9:5e:6e:17:23:81:93:93:4a:43:88:33:68:
                    4c:31:a7:c0:b7:97:95:6b:d8:47:d0:6d:f5:a9:6a:
                    ae:c3:c3:cc:46:97:79:00:f8:4c:fa:aa:22:bb:2f:
                    ef:ff:24:e3:2a:bd:16:b8:f4:98:29:0d:b4:d4:9a:
                    26:93:d3:25:db:0c:c1:0b:2d:51:1e:b5:67:d4:32:
                    fb:1f:f1:71:fe:74:db:30:13:cd:2a:f0:5e:12:63:
                    09:8a:0a:9a:dd:3d:eb:ac:9c:3c:3f:a0:44:e7:44:
                    0e:19:bd:5e:49:b7:54:33:6b:62:57:de:c3:ab:dc:
                    36:3d:84:60:c0:c9:9a:1a:9d:bc:18:e0:3f:1b:c4:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:72:45:7C:05:78:4E:5D:98:5C:8F:66:8A:9B:E1:6C:61:1F:7B:2C
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230342e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:36:11:61:51:eb:24:58:86:8c:8d:bb:69:41:8e:60:76:b7:
         0c:69:6f:a5:ad:00:71:e0:e5:2d:64:00:b3:28:e0:af:e9:1d:
         98:32:d9:4b:eb:f3:14:56:19:db:33:d2:04:55:27:0a:2a:67:
         bc:9b:95:da:19:92:04:9a:87:43:af:52:c9:be:7b:37:46:55:
         45:5c:5b:47:bb:e9:50:68:7f:f9:4d:f7:cc:da:4a:37:c8:91:
         84:0b:54:f7:fc:05:5e:55:06:e0:e2:ef:c9:34:e3:df:0b:0f:
         7b:f6:17:19:d3:c1:98:18:41:a2:8f:91:5f:8e:61:53:d3:c4:
         d7:4c:f9:57:78:ef:70:ee:30:ec:0e:68:2f:b0:51:8e:fa:c0:
         5d:18:46:fb:89:65:d1:e4:c4:2b:23:f1:92:e0:c9:24:79:6b:
         11:d4:b9:81:69:07:16:14:2d:5a:ed:c4:9b:f2:8d:e3:c1:3a:
         42:37:da:04:2d:3b:a2:c6:29:9b:97:e2:44:1f:f8:37:59:1d:
         d3:6b:ec:ea:5a:b3:8f:ea:70:3e:88:d0:12:8b:da:4c:c7:e8:
         85:ee:e3:39:d7:d6:c0:98:2b:5b:ce:3d:7f:70:5f:96:69:b3:
         26:64:09:0d:8e:8d:b9:8a:fb:9c:a4:b7:14:d9:db:a1:37:91:
         f4:cb:50:e5
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUJ67YU3DO3TqxNyFLgtdyT0a1ntQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTNaFw0yNTA0MDIxODMwMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJBNUU1REM0NDczRDEyMDJE
QTMzRDdBRjE3NTJCOTNDRTg0ODEwMjQwNzkzMTg3MkE0MDgzQzBDRkU2OTI2RjE5
NUM1N0JFNTNENTM4QUM5RUY4OTdCQ0E5OERBOUI0NjY4QURDRTYxODBENDU4REZE
RkFDQ0MwODQyMDk0OUE1RTg5MTkxRUUxMDhDRTk5NDg1QTMyODk1M0NDNDZBQUU4
Njk5NDRGQUQ3RkZBQkM5QUQxQzk3Q0FFOTdBOTQ2MDhDNzU5NkM5MTY5RUZBRUVF
MjgxRjA2NkVEODJFQzZCNkY2REI0MkUwQTE1RTVGOTdCOTVFNkUxNzIzODE5Mzkz
NEE0Mzg4MzM2ODRDMzFBN0MwQjc5Nzk1NkJEODQ3RDA2REY1QTk2QUFFQzNDM0ND
NDY5Nzc5MDBGODRDRkFBQTIyQkIyRkVGRkYyNEUzMkFCRDE2QjhGNDk4MjkwREI0
RDQ5QTI2OTNEMzI1REIwQ0MxMEIyRDUxMUVCNTY3RDQzMkZCMUZGMTcxRkU3NERC
MzAxM0NEMkFGMDVFMTI2MzA5OEEwQTlBREQzREVCQUM5QzNDM0ZBMDQ0RTc0NDBF
MTlCRDVFNDlCNzU0MzM2QjYyNTdERUMzQUJEQzM2M0Q4NDYwQzBDOTlBMUE5REJD
MThFMDNGMUJDNENGQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwqXl3ERz0SAtoz168XUrk86EgQJAeTGHKkCDwM/mkm8ZXFe+U9U4
rJ74l7ypjam0Zorc5hgNRY39+szAhCCUml6JGR7hCM6ZSFoyiVPMRqroaZRPrX/6
vJrRyXyul6lGCMdZbJFp767uKB8Gbtguxrb220LgoV5fl7lebhcjgZOTSkOIM2hM
MafAt5eVa9hH0G31qWquw8PMRpd5APhM+qoiuy/v/yTjKr0WuPSYKQ201Jomk9Ml
2wzBCy1RHrVn1DL7H/Fx/nTbMBPNKvBeEmMJigqa3T3rrJw8P6BE50QOGb1eSbdU
M2tiV97Dq9w2PYRgwMmaGp28GOA/G8TPvwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKtyRXwFeE5dmFyPZoqb4WxhH3ssMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMw
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzbMwwDQYJKoZIhvcNAQELBQADggEBAGc2EWFR6yRYhoyNu2lBjmB2twxpb6Wt
AHHg5S1kALMo4K/pHZgy2Uvr8xRWGdsz0gRVJwoqZ7ybldoZkgSah0OvUsm+ezdG
VUVcW0e76VBof/lN98zaSjfIkYQLVPf8BV5VBuDi78k0498LD3v2FxnTwZgYQaKP
kV+OYVPTxNdM+Vd473DuMOwOaC+wUY76wF0YRvuJZdHkxCsj8ZLgySR5axHUuYFp
BxYULVrtxJvyjePBOkI32gQtO6LGKZuX4kQf+DdZHdNr7Opas4/qcD6I0BKL2kzH
6IXu4znX1sCYK1vOPX9wX5ZpsyZkCQ2OjbmK+5yktxTZ26E3kfTLUOU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org