Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          Xb12AxqPuGBAoT+Vad76zu+eOXC2HS1BV1verPpjna0=
Subject key identifier:   75:09:3F:01:E7:46:64:6C:C9:34:B7:0B:15:85:96:53:66:BE:E9:14
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       3C10686AD46BE3F06A29F2FD7746EFFC315179B0
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     262691
IP address blocks:        179.108.208.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:68:6a:d4:6b:e3:f0:6a:29:f2:fd:77:46:ef:fc:31:51:79:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:7e:27:e8:d5:18:4b:3b:dd:43:d3:a6:68:
                    f4:b9:ac:7a:68:a7:67:9e:b5:a3:d5:7c:fb:8c:8b:
                    1d:f4:f3:cd:3f:b8:24:20:0a:72:0f:fc:7d:56:99:
                    51:52:47:77:9a:bb:42:d6:56:d9:60:70:0b:9c:39:
                    79:61:ba:47:9e:6a:8f:b6:d8:20:98:6c:d5:83:33:
                    de:ad:4e:c8:b1:46:1e:52:b3:f1:67:f2:b2:0c:bb:
                    89:55:63:3a:63:36:e0:cc:3e:39:9a:c7:4f:72:f9:
                    de:d5:dd:80:f9:09:7b:c8:e4:21:7b:2a:8a:48:d4:
                    ea:c8:af:3a:0d:73:1f:b5:e2:db:dd:a9:66:6f:46:
                    b6:12:91:c1:fb:e3:a6:75:cb:a9:ff:ab:78:28:01:
                    fa:c5:d6:85:91:c0:cb:7e:ea:c0:f7:8a:75:0d:1a:
                    93:15:80:99:a0:d3:84:f6:83:26:40:ce:46:e7:4e:
                    df:ab:97:32:86:2c:58:6e:67:fc:4b:17:4e:90:17:
                    2a:fb:18:21:eb:af:2a:bd:f7:b7:35:60:95:8a:ef:
                    05:82:4c:81:01:dc:a6:3b:0c:f6:9b:28:c9:5c:0b:
                    2e:5b:00:6d:57:1a:0a:53:40:de:39:c6:9d:6a:35:
                    c1:34:df:c7:fa:89:56:94:77:f4:86:fa:6d:9d:2e:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:09:3F:01:E7:46:64:6C:C9:34:B7:0B:15:85:96:53:66:BE:E9:14
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:f9:9f:bc:53:d0:b7:c7:27:62:3e:c1:33:74:b8:6b:c3:07:
         75:7a:90:6c:45:9c:5c:8e:79:a4:77:f1:19:0a:e9:f3:42:19:
         e0:bd:d2:7e:0d:3a:8e:d4:54:ef:e9:55:fe:d8:b6:e6:24:63:
         22:fa:48:73:2b:0c:83:fd:52:ce:cd:43:6f:bc:2a:45:0e:76:
         dc:40:ed:09:3e:39:f4:65:51:1a:0b:72:38:93:2b:53:02:ba:
         ed:13:56:58:f4:06:53:6a:7a:ce:45:c8:e4:54:9e:53:fb:52:
         28:73:f1:60:c3:ad:7c:d9:a2:30:6c:03:6e:a7:df:d0:e6:60:
         44:44:13:08:8c:0f:cb:0f:d3:cb:dd:f2:1d:ab:d4:a7:29:e9:
         84:af:c3:2f:92:ca:36:dd:f6:29:99:f0:fb:9e:e8:cb:40:77:
         45:f1:d2:15:87:dc:62:5c:82:e3:fc:75:60:d2:bb:e7:b7:2d:
         8e:f5:d1:47:64:ba:fc:cd:b2:31:11:5c:cc:54:1a:14:1a:26:
         e0:a5:30:ff:bf:93:83:db:c2:a8:eb:55:32:b9:49:ac:32:4d:
         8f:f9:b9:d3:cc:30:53:bc:31:31:fe:c0:11:88:0f:81:1b:68:
         02:39:71:3f:18:e1:37:36:98:01:c3:ae:26:82:02:06:07:c9:
         08:8f:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org