Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230372e302f32342d3234203d3e20323632363931.roa
File:                     3137392e3130382e3230372e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          PRxjGU0gD2yeZPD7hlWIKTyBPdDWZbD0z9Bqmy8QDhw=
Subject key identifier:   D1:23:87:B5:07:5A:2E:02:AE:A3:C9:1E:64:77:7C:0A:87:47:C9:6E
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       11694E6D1A27970AB40666C4F3D52174A0234147
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230372e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     262691
IP address blocks:        179.108.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:69:4e:6d:1a:27:97:0a:b4:06:66:c4:f3:d5:21:74:a0:23:41:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject: CN=3082010A0282010100C61C328B48EE50E80CBBA3E83AF23B89674E050F403A32C7DAC001A567FFB877180498BB2915FA4F17E224BB6D905DE422F24E4E0AD8E886A6C92C44E318470802CC52254C374B98B59DA2EA7ECA5771BDE58D34903A02B3B9206A7555AC4036102A7B9A3C68370A7885E9FF1879A4637D741D6853C8CCEBC1D52A7FA96D3627BE497504B0370D8CA6C8BA136C362DCBC97619FE586A0B4349A7DAB2880B5DFA7065258976390D8E3F456313806A230100F47282D1454C6258392F45101F725596A8A71C04DDEFE5857CC3FDE08CC63318954755162C981A702ABB7E63E2EE33975DAC7CDB0C2BE1C7347AA32565B88545E4C548154EC8F123B3637BFF501BB70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:32:8b:48:ee:50:e8:0c:bb:a3:e8:3a:f2:
                    3b:89:67:4e:05:0f:40:3a:32:c7:da:c0:01:a5:67:
                    ff:b8:77:18:04:98:bb:29:15:fa:4f:17:e2:24:bb:
                    6d:90:5d:e4:22:f2:4e:4e:0a:d8:e8:86:a6:c9:2c:
                    44:e3:18:47:08:02:cc:52:25:4c:37:4b:98:b5:9d:
                    a2:ea:7e:ca:57:71:bd:e5:8d:34:90:3a:02:b3:b9:
                    20:6a:75:55:ac:40:36:10:2a:7b:9a:3c:68:37:0a:
                    78:85:e9:ff:18:79:a4:63:7d:74:1d:68:53:c8:cc:
                    eb:c1:d5:2a:7f:a9:6d:36:27:be:49:75:04:b0:37:
                    0d:8c:a6:c8:ba:13:6c:36:2d:cb:c9:76:19:fe:58:
                    6a:0b:43:49:a7:da:b2:88:0b:5d:fa:70:65:25:89:
                    76:39:0d:8e:3f:45:63:13:80:6a:23:01:00:f4:72:
                    82:d1:45:4c:62:58:39:2f:45:10:1f:72:55:96:a8:
                    a7:1c:04:dd:ef:e5:85:7c:c3:fd:e0:8c:c6:33:18:
                    95:47:55:16:2c:98:1a:70:2a:bb:7e:63:e2:ee:33:
                    97:5d:ac:7c:db:0c:2b:e1:c7:34:7a:a3:25:65:b8:
                    85:45:e4:c5:48:15:4e:c8:f1:23:b3:63:7b:ff:50:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:23:87:B5:07:5A:2E:02:AE:A3:C9:1E:64:77:7C:0A:87:47:C9:6E
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230372e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:dc:ea:35:73:7f:17:ea:b6:20:c2:28:c6:27:83:b2:e4:25:
         87:94:f3:4a:af:17:c4:e2:20:28:1a:a7:fc:b7:2f:0d:f1:01:
         1f:26:e0:a8:47:52:06:f1:79:17:c5:98:d4:c7:34:80:7d:e1:
         0b:48:14:e0:e0:22:f3:58:ff:0c:d3:fa:6b:5f:cd:21:84:87:
         b8:56:84:1e:73:85:41:75:91:4a:d9:e8:e7:3c:e6:b4:fc:c9:
         fd:bf:7c:67:3b:fe:b1:22:10:d7:36:2f:bf:e5:17:49:bc:4e:
         5f:ff:88:79:f2:9f:70:28:82:8b:f9:af:e0:bc:91:dd:e7:fe:
         a2:eb:34:aa:00:63:a4:bf:ce:ec:36:9d:f1:fe:2c:3b:e0:dd:
         cb:b9:db:69:2c:12:40:da:ec:41:06:d7:d6:f6:12:4e:13:6b:
         06:e2:68:cd:d2:d4:5c:58:3c:45:c4:57:0c:c4:ff:ba:7a:c1:
         a3:28:4f:3e:16:f6:d8:96:00:06:48:53:b5:c2:b1:72:bc:91:
         13:16:57:3d:c4:c7:d6:41:94:69:7e:f8:da:cc:be:4a:8d:b5:
         94:4c:8b:23:56:c9:7f:da:e4:38:4a:5b:d2:18:04:c5:27:24:
         c7:19:36:34:a1:b7:de:9a:23:cf:be:91:39:3b:9f:34:66:13:
         7e:80:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org