Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          Ym5kgeVgW9GNxfq0AfUCSw0ZG92ZF+qRtxcAj8vhXCM=
Subject key identifier:   B6:50:F0:BC:4F:6B:E1:80:1A:8A:50:5A:57:C6:D6:DD:C0:2D:E2:67
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       38CDDD4818BA29CD3F4418C1686D9E8764A52A46
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        179.108.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cd:dd:48:18:ba:29:cd:3f:44:18:c1:68:6d:9e:87:64:a5:2a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:f8:86:0c:58:29:20:e5:fe:bf:f5:13:f3:
                    b9:41:35:23:d4:76:ca:72:14:df:6a:42:a9:bd:7f:
                    37:64:79:f3:0f:cc:2b:74:f1:4a:86:5d:70:e3:f8:
                    e7:15:bf:5e:67:7e:da:ba:39:d8:3a:53:9a:3b:e2:
                    66:fb:41:51:98:c1:3b:aa:67:54:48:82:7a:8d:e3:
                    ae:80:e7:8b:d6:c9:9e:63:81:5e:09:07:9b:bc:79:
                    aa:10:67:b2:e0:8a:92:9a:c2:6e:26:3d:61:65:78:
                    32:7b:71:04:8e:23:6e:5a:dc:22:b6:1c:ab:b7:4a:
                    7c:1a:1b:e0:c0:0c:3d:3d:51:1b:65:32:2c:43:1f:
                    12:dd:b5:fb:82:c5:03:11:85:47:c3:34:75:1c:3f:
                    c9:65:9b:72:f4:17:7f:20:3c:1d:2a:92:8f:c9:0c:
                    87:de:ab:be:13:88:30:4a:39:ec:9e:07:5f:10:75:
                    00:55:dc:e2:b7:78:d3:f4:6b:58:f0:7a:1f:a0:7c:
                    e8:24:b5:75:4d:18:25:36:c8:21:68:8f:8f:df:ac:
                    1d:62:28:49:85:b8:42:51:e9:7f:03:b2:38:df:89:
                    e0:4a:b7:f9:a6:ba:9f:d1:e6:e8:26:67:2b:ac:5c:
                    20:8d:85:d9:8c:15:0b:d1:27:cd:43:03:ee:e1:be:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:50:F0:BC:4F:6B:E1:80:1A:8A:50:5A:57:C6:D6:DD:C0:2D:E2:67
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:09:dc:86:c1:05:69:2b:a1:37:53:ff:ff:50:2f:a9:1c:
         d1:81:de:b3:ad:9c:ad:61:d3:75:e9:1c:aa:fc:56:c8:68:54:
         13:c9:b5:9b:31:68:d3:d4:12:ce:76:eb:66:5b:45:76:4f:9a:
         7b:ea:0c:fc:5e:bf:7d:59:f5:07:e3:d2:08:9c:8d:72:69:bf:
         57:bb:92:11:d0:db:62:91:fe:96:66:a0:b9:5a:27:5c:f4:90:
         33:50:39:50:1b:75:01:db:48:0f:89:71:66:1d:97:33:34:52:
         22:d8:28:23:a6:6f:8d:9f:17:f7:ac:80:2a:6a:12:09:ed:43:
         d7:33:4c:90:4f:0c:16:11:ba:c6:f4:61:26:10:f4:45:2c:26:
         30:35:74:e0:55:b5:0d:f8:77:11:b3:32:93:2a:94:68:ad:a9:
         8b:c0:6e:6b:c8:b4:d8:cc:68:a5:91:bc:e7:5f:70:bd:e5:aa:
         3e:9e:97:ca:27:db:ba:de:49:c2:0c:57:b1:4d:51:6d:fe:99:
         27:58:50:2d:b3:5a:8f:35:60:30:ff:8e:53:b0:b7:94:3e:e3:
         32:82:6a:e5:09:73:e7:bd:5a:dc:07:58:ed:f0:21:85:45:23:
         01:3a:f5:fb:62:35:dc:d3:3b:4d:63:22:4e:4a:f7:d8:09:b6:
         f7:ab:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org