Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          PUqkjJNNlWsdJ8VCVIKNqItu6ZO9uCDwsAEtkyVp2+A=
Subject key identifier:   3A:64:E0:81:C8:BB:41:76:12:18:90:61:2C:BA:92:FD:E9:61:88:B6
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       4BE11B8E31555876B3ADB0AB4E4E264A3F440792
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        179.108.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e1:1b:8e:31:55:58:76:b3:ad:b0:ab:4e:4e:26:4a:3f:44:07:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=3082010A0282010100EBB9DADFD66C422E3936529EDE869141A6D8287715E78B6632575E481B5830F4D6B9D58FA101558EBEC1695F37B5998C209FCD75A3F1EEC11E96D92DA47778781C3AD22C0681C2DC7AA002CEDF55272C06262E57FFBEFD8B0CD880E4FBD42F4A0B4252C7B62DC8C7F3CD2FF2EA60C805940C7820D1F223A1767195BDA9E75125BA6FF7A3FE7A92407FD5A595CA257004F5A2D50C79478DD046A6EBDA08653005E97146682547EE2E678EF8B0827E2517C7E7E44E2C6569C17957C3F166B3E02EA94C67B4322AA09BAFF5BF3AF65911E7899AAD7F8D876BB0353ACF0DCEFC325124B91DAB146F2B236AD50CC9E92AC1D046986A20BF22CB9207740E22910D79FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b9:da:df:d6:6c:42:2e:39:36:52:9e:de:86:
                    91:41:a6:d8:28:77:15:e7:8b:66:32:57:5e:48:1b:
                    58:30:f4:d6:b9:d5:8f:a1:01:55:8e:be:c1:69:5f:
                    37:b5:99:8c:20:9f:cd:75:a3:f1:ee:c1:1e:96:d9:
                    2d:a4:77:78:78:1c:3a:d2:2c:06:81:c2:dc:7a:a0:
                    02:ce:df:55:27:2c:06:26:2e:57:ff:be:fd:8b:0c:
                    d8:80:e4:fb:d4:2f:4a:0b:42:52:c7:b6:2d:c8:c7:
                    f3:cd:2f:f2:ea:60:c8:05:94:0c:78:20:d1:f2:23:
                    a1:76:71:95:bd:a9:e7:51:25:ba:6f:f7:a3:fe:7a:
                    92:40:7f:d5:a5:95:ca:25:70:04:f5:a2:d5:0c:79:
                    47:8d:d0:46:a6:eb:da:08:65:30:05:e9:71:46:68:
                    25:47:ee:2e:67:8e:f8:b0:82:7e:25:17:c7:e7:e4:
                    4e:2c:65:69:c1:79:57:c3:f1:66:b3:e0:2e:a9:4c:
                    67:b4:32:2a:a0:9b:af:f5:bf:3a:f6:59:11:e7:89:
                    9a:ad:7f:8d:87:6b:b0:35:3a:cf:0d:ce:fc:32:51:
                    24:b9:1d:ab:14:6f:2b:23:6a:d5:0c:c9:e9:2a:c1:
                    d0:46:98:6a:20:bf:22:cb:92:07:74:0e:22:91:0d:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:64:E0:81:C8:BB:41:76:12:18:90:61:2C:BA:92:FD:E9:61:88:B6
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:da:52:fd:a4:99:9b:8e:6a:c9:f0:da:ee:0e:ac:cf:7f:55:
         2e:fc:cb:24:dc:6d:e4:a2:00:cd:63:81:bd:6d:b7:fc:b0:4b:
         7e:37:1f:ae:cd:84:b3:89:50:08:3f:03:ab:db:3e:69:d1:d5:
         10:43:7c:4d:97:f5:18:2e:d6:d3:1d:5a:74:4a:b5:9b:ef:fc:
         d3:40:d9:1c:73:0e:71:e3:e8:46:cc:91:3b:c3:35:f3:64:dc:
         19:f5:2a:d1:7c:25:ca:37:39:9a:00:2f:16:f2:93:b9:53:2d:
         6c:a0:d3:e0:71:36:ba:de:b1:b6:61:76:4c:08:48:38:56:40:
         6d:68:d6:93:67:41:00:d1:a6:c2:d0:4e:47:51:5b:d1:27:86:
         5d:5b:31:d1:6b:d0:c2:9a:ad:9b:4e:9c:a6:d1:12:c9:03:e4:
         f4:ec:00:fb:aa:22:02:b2:db:b2:fe:13:89:cd:79:6c:94:ff:
         ef:a7:66:1d:6e:f4:55:36:ff:ee:d2:20:26:02:6f:a9:9e:e7:
         0e:2e:9b:ef:c3:4a:eb:78:c7:23:23:47:a8:38:2c:46:68:39:
         7e:92:2a:b9:ad:15:96:a3:88:4b:54:7b:ab:e6:d0:e4:3f:12:
         62:08:b2:c6:a2:e6:b0:7b:f0:7a:f5:cd:b7:a9:5a:f2:e4:24:
         e8:f1:14:71
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUS+EbjjFVWHazrbCrTk4mSj9EB5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MDlaFw0yNTA0MDIxODMwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUJCOURBREZENjZDNDIyRTM5
MzY1MjlFREU4NjkxNDFBNkQ4Mjg3NzE1RTc4QjY2MzI1NzVFNDgxQjU4MzBGNEQ2
QjlENThGQTEwMTU1OEVCRUMxNjk1RjM3QjU5OThDMjA5RkNENzVBM0YxRUVDMTFF
OTZEOTJEQTQ3Nzc4NzgxQzNBRDIyQzA2ODFDMkRDN0FBMDAyQ0VERjU1MjcyQzA2
MjYyRTU3RkZCRUZEOEIwQ0Q4ODBFNEZCRDQyRjRBMEI0MjUyQzdCNjJEQzhDN0Yz
Q0QyRkYyRUE2MEM4MDU5NDBDNzgyMEQxRjIyM0ExNzY3MTk1QkRBOUU3NTEyNUJB
NkZGN0EzRkU3QTkyNDA3RkQ1QTU5NUNBMjU3MDA0RjVBMkQ1MEM3OTQ3OEREMDQ2
QTZFQkRBMDg2NTMwMDVFOTcxNDY2ODI1NDdFRTJFNjc4RUY4QjA4MjdFMjUxN0M3
RTdFNDRFMkM2NTY5QzE3OTU3QzNGMTY2QjNFMDJFQTk0QzY3QjQzMjJBQTA5QkFG
RjVCRjNBRjY1OTExRTc4OTlBQUQ3RjhEODc2QkIwMzUzQUNGMERDRUZDMzI1MTI0
QjkxREFCMTQ2RjJCMjM2QUQ1MENDOUU5MkFDMUQwNDY5ODZBMjBCRjIyQ0I5MjA3
NzQwRTIyOTEwRDc5RkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA67na39ZsQi45NlKe3oaRQabYKHcV54tmMldeSBtYMPTWudWPoQFV
jr7BaV83tZmMIJ/NdaPx7sEeltktpHd4eBw60iwGgcLceqACzt9VJywGJi5X/779
iwzYgOT71C9KC0JSx7YtyMfzzS/y6mDIBZQMeCDR8iOhdnGVvannUSW6b/ej/nqS
QH/VpZXKJXAE9aLVDHlHjdBGpuvaCGUwBelxRmglR+4uZ474sIJ+JRfH5+ROLGVp
wXlXw/Fms+AuqUxntDIqoJuv9b869lkR54marX+Nh2uwNTrPDc78MlEkuR2rFG8r
I2rVDMnpKsHQRphqIL8iy5IHdA4ikQ15+wIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FDpk4IHIu0F2EhiQYSy6kv3pYYi2MB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMw
MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbM4wDQYJKoZIhvcNAQELBQADggEBAI3aUv2kmZuOasnw2u4OrM9/VS78yyTc
beSiAM1jgb1tt/ywS343H67NhLOJUAg/A6vbPmnR1RBDfE2X9Rgu1tMdWnRKtZvv
/NNA2RxzDnHj6EbMkTvDNfNk3Bn1KtF8Jco3OZoALxbyk7lTLWyg0+BxNrresbZh
dkwISDhWQG1o1pNnQQDRpsLQTkdRW9Enhl1bMdFr0MKarZtOnKbREskD5PTsAPuq
IgKy27L+E4nNeWyU/++nZh1u9FU2/+7SICYCb6me5w4um+/DSut4xyMjR6g4LEZo
OX6SKrmtFZajiEtUe6vm0OQ/EmIIssai5rB78Hr1zbepWvLkJOjxFHE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org