Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          curS1eFkSQpTfVuhzoDK5DG4HT76D7cR70MihnGxvDE=
Subject key identifier:   B6:38:16:35:97:45:2C:E7:9A:62:E7:E6:A7:68:97:0F:A6:FA:ED:C6
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       01DA5270F50ED385C6FEF13CD9948DD07682A192
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        179.108.208.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:da:52:70:f5:0e:d3:85:c6:fe:f1:3c:d9:94:8d:d0:76:82:a1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:7e:39:d4:0a:b1:d1:05:4e:96:44:01:cd:
                    b2:f9:68:1e:ad:96:a6:67:01:04:a3:b4:e1:4e:fd:
                    c8:6b:06:d0:2a:9e:8a:bd:eb:fd:53:57:30:2e:9a:
                    f9:43:60:0a:c3:9a:75:4a:e2:a2:95:04:d3:00:c6:
                    28:ab:14:7f:a2:f2:b9:07:d6:e7:3a:dc:35:a7:e7:
                    b8:08:45:44:87:c3:4f:52:77:8a:b9:11:a6:20:0d:
                    9e:03:64:86:54:62:6a:ae:35:ca:8b:fd:73:a1:d5:
                    cf:58:20:d5:e4:80:6b:44:88:dd:e9:b7:d7:bc:9f:
                    5e:b6:19:77:e2:5e:b0:c9:88:1c:62:a5:71:5f:af:
                    18:ec:03:28:65:0f:4e:60:70:06:02:b6:26:a4:c7:
                    ab:5b:42:71:ef:88:67:0d:79:67:30:80:bc:fe:d2:
                    d1:c0:89:44:01:ba:d2:2a:8e:f9:ed:b6:e4:29:09:
                    0c:ed:04:70:7a:43:42:fd:88:80:e4:b1:56:04:f9:
                    ca:28:a7:4e:49:29:06:bc:12:e7:d0:c6:39:9b:bb:
                    7d:75:d8:2a:f3:52:62:7d:fb:85:b9:c2:39:3b:39:
                    aa:a7:c1:eb:03:0b:2d:ce:ac:23:2d:95:ce:8f:e8:
                    9f:c8:a1:00:e7:f0:4f:95:ea:e8:e9:ef:69:05:40:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:16:35:97:45:2C:E7:9A:62:E7:E6:A7:68:97:0F:A6:FA:ED:C6
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:a6:5f:b8:aa:0d:5e:54:d5:98:62:f3:cd:2b:40:20:a1:
         09:fd:9f:71:13:86:48:34:30:65:4a:ee:b3:db:b6:38:8f:96:
         7b:d8:ac:83:e0:27:8c:59:00:82:60:d0:cd:9f:36:37:4f:31:
         36:ec:ad:92:1d:4e:03:29:9e:5b:6b:28:a5:43:e6:4a:98:0d:
         7e:6a:6f:27:03:6c:17:71:1e:14:5f:8d:71:3d:e9:ad:fd:41:
         60:6a:63:e6:32:d7:76:b5:70:af:a4:23:cf:49:32:39:02:4e:
         68:33:d7:90:55:16:78:f5:d6:94:88:0d:75:9d:bb:7f:12:a8:
         9a:cc:06:80:34:6a:80:ca:f8:c7:55:ef:3a:0d:86:bc:20:f0:
         e4:5b:75:d4:7c:1e:9c:a9:b6:39:79:2f:cc:c4:97:fe:83:0c:
         7b:10:4e:f7:f0:24:26:93:74:9c:ef:fb:fe:47:eb:af:dd:6f:
         68:d1:11:0a:97:64:5f:c2:84:98:e4:0f:74:32:72:0d:39:19:
         e4:07:3d:85:93:62:c4:83:a8:8f:8b:b3:37:08:5a:04:4d:6b:
         14:8a:5e:12:19:58:dd:7f:f0:f1:23:21:a1:6e:57:f0:d6:e5:
         84:e4:c2:ba:76:6b:44:24:0f:72:a1:5c:73:62:99:63:5d:95:
         b6:3a:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org