Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230362e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3230362e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          1p9BYUe1pcGGiOoghW/HqiCYnUBLXseUYxd2bJKSLos=
Subject key identifier:   79:CB:7C:49:91:CB:FD:DA:C5:81:78:A6:8E:C1:7B:5C:E6:69:FD:BB
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       71E99B4C3B0BA765F3FC75CC0E48D43CADD58356
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230362e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        179.108.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e9:9b:4c:3b:0b:a7:65:f3:fc:75:cc:0e:48:d4:3c:ad:d5:83:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:ae:e6:f0:8c:d2:e3:40:ba:20:5a:ba:01:
                    54:47:7d:d8:98:f7:08:bb:06:1d:e1:1d:25:8c:31:
                    b9:7f:d5:d2:1e:ad:ef:38:ad:75:13:78:cf:c1:97:
                    9e:da:59:0c:a2:96:b1:5c:6a:9e:f4:20:05:cf:d2:
                    2d:36:7f:31:29:f5:c5:fd:2d:d6:95:15:cf:41:e7:
                    b1:e4:16:65:bb:fc:1c:6f:a0:8d:c3:bb:de:1f:f6:
                    15:5c:8c:91:c1:44:db:6d:d9:0f:e4:81:61:69:a0:
                    cb:16:64:b7:fa:f1:1f:47:7c:6f:b8:fc:8a:f8:f6:
                    4f:08:52:90:7d:8c:c2:86:8e:4f:63:e9:47:a8:65:
                    fa:88:5c:1a:bc:76:0c:21:5b:cc:fb:0f:db:a3:9c:
                    58:6c:62:20:50:43:30:85:a1:16:31:8a:f8:be:e7:
                    5a:cd:02:0f:05:bd:50:52:5e:c2:f1:fe:23:db:3a:
                    c0:90:e7:82:cf:61:d1:ce:c1:bc:35:0b:29:92:aa:
                    94:6e:75:5a:b7:ce:85:cc:87:4f:05:d8:86:0f:b3:
                    5c:78:e6:6d:7b:5a:a4:69:64:99:c0:69:20:ed:5d:
                    75:24:3a:25:1b:fc:18:69:d7:5f:f8:d0:a5:81:9c:
                    95:34:73:90:50:c8:c6:d9:3a:fb:51:e5:cc:40:e7:
                    a1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:7C:49:91:CB:FD:DA:C5:81:78:A6:8E:C1:7B:5C:E6:69:FD:BB
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230362e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:16:88:28:23:8f:e5:06:49:86:b8:11:88:62:96:17:f3:
         b6:fb:e6:29:8e:7f:d9:ef:fe:6c:43:b6:4b:f5:59:67:c5:1a:
         e9:b0:cc:b0:70:14:b2:3f:34:6a:07:b6:a6:da:55:04:4e:55:
         2f:42:b8:38:1a:43:12:77:6f:7d:30:bb:ce:6a:e1:09:98:01:
         91:e7:d0:ef:2b:97:94:48:e5:63:af:43:e3:a4:69:b9:bb:c9:
         34:76:ce:f6:9d:b4:c3:18:9e:bb:7b:af:34:14:25:20:5b:93:
         8b:5f:91:15:9c:11:41:34:a7:b0:02:00:9b:30:dc:1d:08:44:
         bc:ff:c0:90:49:67:8c:85:0b:e6:23:ac:6d:1e:cc:a4:96:f6:
         16:bc:7f:9c:11:8e:3d:87:7c:2e:98:aa:76:5b:a6:b0:95:fa:
         b0:3e:2c:1f:25:38:ed:9a:37:b7:ac:7a:7b:5c:d3:d5:dc:e9:
         27:d2:57:24:de:9c:7a:3e:93:4b:3b:9e:d0:65:92:f2:30:84:
         16:03:2d:50:43:cd:67:05:d0:01:27:a1:4c:7e:18:eb:1c:05:
         c8:b9:bb:95:bb:1c:ed:a8:e5:80:45:19:ac:21:0f:99:58:b2:
         ce:3e:58:ef:a3:10:02:58:7c:bc:e6:69:9e:54:64:c7:a7:50:
         24:61:60:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org