Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230352e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3230352e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          jYxyy72fYdLpfouwA9pYeQhQD4WV6LTkszaiP+TErJA=
Subject key identifier:   2A:C9:8D:8C:23:68:53:FD:E6:66:E6:C7:00:E3:73:3B:CC:8E:0B:14
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       7553D54E5E39DBB9C6F4EA0ACCC1BE9F2B0BE843
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230352e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        179.108.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:d5:4e:5e:39:db:b9:c6:f4:ea:0a:cc:c1:be:9f:2b:0b:e8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:02:e1:17:24:e6:21:0c:e2:16:fc:83:3d:
                    7c:1b:90:03:aa:8c:ca:9e:ba:38:92:00:f1:1f:23:
                    2f:5a:94:16:22:b9:ad:9a:02:4f:47:57:ea:39:7f:
                    10:fa:22:4e:c4:5d:68:ad:c7:c6:6c:19:34:e3:a7:
                    a1:72:24:c9:1a:46:17:93:8b:fb:9d:34:48:f5:3b:
                    e2:b9:24:c1:3f:95:52:f6:0c:6d:cf:00:62:08:8f:
                    e7:c0:1a:cb:33:93:b7:83:2d:4f:be:a5:37:5a:ee:
                    23:33:51:cd:e6:2e:0b:d8:97:a7:01:24:4c:d5:36:
                    3a:48:1f:72:27:9a:36:91:a9:21:60:5e:ef:1b:10:
                    19:e0:01:49:af:07:72:a7:93:50:be:f1:39:2d:fe:
                    6d:2b:cd:a7:e1:58:70:3c:9d:eb:c2:a5:05:29:22:
                    81:50:e7:97:c0:3a:4e:6d:29:cc:28:12:6a:12:d9:
                    e3:20:40:9a:ae:ef:af:c7:a7:0c:4a:4a:01:79:df:
                    bf:b1:98:25:f8:83:4a:92:66:22:ad:cf:26:c2:7b:
                    12:77:26:f1:41:5e:b1:37:26:46:02:df:3a:d2:f5:
                    a7:9a:43:df:4f:bc:91:32:c8:f0:01:cc:19:39:f5:
                    6a:d4:18:58:90:74:53:2f:d1:41:a6:1a:e5:0d:5a:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C9:8D:8C:23:68:53:FD:E6:66:E6:C7:00:E3:73:3B:CC:8E:0B:14
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230352e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:dd:43:b5:7e:13:99:cc:98:17:c4:97:6b:09:54:43:39:
         94:1c:94:8d:b8:f5:a3:37:d6:81:a6:47:6e:ee:e7:db:23:ba:
         dd:d8:9b:e7:13:f3:e2:3f:c5:24:1b:be:b3:eb:08:b3:2d:93:
         73:79:88:1f:91:bd:38:bc:3c:3b:ae:86:5a:6d:23:09:71:59:
         75:c2:39:4e:0e:67:d1:30:42:81:8d:39:f9:1f:92:1e:43:56:
         8c:5b:01:67:d4:84:38:d4:81:4c:43:36:b0:68:a4:58:11:09:
         e7:8f:c8:39:08:f6:70:24:bd:82:6f:39:d0:b4:e3:c2:8d:a3:
         c7:a4:de:7d:b0:5f:23:4c:8d:89:a1:65:8c:17:10:ab:aa:9f:
         68:74:67:7f:b7:5e:7e:a9:59:01:5b:02:d3:aa:f4:0d:f9:b4:
         42:6b:64:77:e6:a2:d9:01:55:bd:18:cd:4c:01:5e:43:cc:43:
         81:e2:35:81:2d:b8:72:1d:5c:3d:f1:6c:7b:3b:8c:9e:ae:cf:
         23:69:a3:98:90:32:1f:a1:74:37:26:8a:ea:ca:cb:f2:78:03:
         2d:c3:24:b5:8f:6b:fc:b1:31:fe:ff:54:ed:9e:4e:d7:19:3e:
         f6:68:ef:84:05:65:f6:34:37:01:0f:15:ac:30:b6:57:a0:78:
         27:41:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org