Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          rGbD1ZupO1QiyNUvv1a1LYGB0FbKsmsC2bjmvz0RAsI=
Subject key identifier:   42:82:D0:98:22:DD:38:8B:43:3D:01:44:12:D1:F8:BB:29:D6:F0:CB
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       666E9F98DCCF30619680DEBB712CB25738D9E844
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6e:9f:98:dc:cf:30:61:96:80:de:bb:71:2c:b2:57:38:d9:e8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:dc:36:38:e7:ca:56:b5:3f:73:0a:83:20:
                    7a:7a:ce:c8:1e:14:8b:60:85:27:52:8a:cb:bb:c3:
                    20:8f:05:1d:8b:03:0f:c9:4a:3e:66:5b:db:b4:6f:
                    44:36:3c:af:74:1d:bd:34:aa:98:a5:18:cc:f4:c1:
                    c2:3c:a6:22:1d:64:2c:70:9b:65:29:69:18:97:93:
                    6a:17:7e:b1:d4:64:e1:4f:92:f5:3b:93:78:1d:eb:
                    63:83:80:7e:11:34:1e:9b:54:1a:2b:8c:ec:e6:d5:
                    ea:83:d5:82:28:88:10:b6:6b:dd:76:25:2c:ff:5d:
                    a8:4e:7d:4c:3e:cb:ad:db:60:f9:b3:a3:23:27:c1:
                    42:17:5e:86:52:ce:55:6b:90:93:a4:73:48:cb:76:
                    73:a1:8f:ec:40:e7:7a:9e:c1:ca:ef:b4:77:ff:2d:
                    1e:6c:be:7f:60:22:4d:31:da:2e:cc:24:9e:b5:ce:
                    d1:ed:cd:e3:07:8d:d7:6f:a6:ea:67:25:39:f0:2a:
                    e4:6d:3a:a2:8a:d2:f8:7b:0b:23:e4:0f:b9:66:09:
                    48:25:80:9a:12:34:93:48:a2:1c:8c:ee:13:a2:d3:
                    7d:13:07:25:c7:e6:d8:db:33:8b:63:2f:38:51:6f:
                    1c:73:a2:a5:f7:a4:a0:18:a1:58:d3:13:73:72:8f:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:82:D0:98:22:DD:38:8B:43:3D:01:44:12:D1:F8:BB:29:D6:F0:CB
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3230382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:c1:f8:35:38:e8:3d:2d:39:ef:17:f6:48:56:2f:2f:4f:c4:
         db:54:e1:68:d8:1e:70:75:ee:48:af:0a:19:18:ac:2f:a8:58:
         2e:33:41:91:65:00:94:0e:32:e8:d9:2e:9f:9f:b9:85:13:a9:
         5c:d9:42:71:d3:96:3f:ac:ca:d1:b5:b5:68:97:10:4a:24:09:
         76:db:dc:d8:ae:3c:73:56:39:23:9f:a7:bb:f3:50:f7:2d:23:
         87:a3:13:33:84:fc:e6:f3:95:a8:b4:a2:47:ca:84:0f:95:ef:
         63:79:9e:1e:d7:9c:2a:30:34:04:51:ea:4f:8b:03:0d:af:d6:
         07:b2:48:b0:85:85:f9:a2:fd:52:32:85:0c:85:84:a8:79:b5:
         83:29:67:6d:1b:56:36:9f:f4:d6:0f:39:ca:c2:72:c7:88:b8:
         7a:a7:b2:f3:ef:7c:5a:f1:e1:f3:d9:de:9b:74:4d:23:ca:d9:
         16:58:a4:8c:80:83:65:17:d6:7c:d2:ae:c7:cb:1f:04:4d:38:
         80:46:1c:75:df:3f:c3:86:81:e3:08:03:48:04:a9:9e:06:a3:
         fb:db:e0:ce:c1:71:a1:df:1d:f0:ba:e8:ce:c1:06:6d:eb:1c:
         e2:52:5e:b4:89:af:b9:13:28:ca:b6:0c:14:59:56:32:bb:87:
         26:e8:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org