Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          EPSTSHdidA24b9rguoXhKfbh7DPM64xdXOA4xKT4Vn8=
Subject key identifier:   99:91:42:7A:DE:73:F8:5D:A0:4B:A2:74:41:5B:AC:76:FB:45:99:81
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       291BA497546EDDF73609512DBEF59F79F62E73D3
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        179.108.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1b:a4:97:54:6e:dd:f7:36:09:51:2d:be:f5:9f:79:f6:2e:73:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:32:1f:05:a1:ab:a3:af:d9:0b:74:82:e6:
                    14:ec:42:ed:a2:25:ad:fb:62:e6:75:62:08:2e:29:
                    dd:9f:a6:62:cf:72:f2:36:82:2b:23:90:b1:f4:9f:
                    4b:03:da:46:e6:da:ed:9e:65:2b:00:6a:e7:f8:59:
                    b7:3c:cf:d3:05:82:3b:11:f3:95:28:91:ba:4e:85:
                    e0:09:df:92:64:29:f5:e0:e2:50:78:73:56:cf:98:
                    45:a7:79:28:3b:86:5c:a2:24:2e:07:da:25:a9:6b:
                    24:30:9a:4f:f2:ea:72:f6:0d:df:9a:e3:21:b9:8a:
                    31:a6:8b:b5:01:31:29:13:ac:7b:72:f6:58:46:d9:
                    e8:2c:67:5b:00:09:a8:e1:81:c1:5a:90:cd:19:d5:
                    2a:2d:8b:c8:b9:19:21:83:4a:a6:a2:37:2d:b2:d4:
                    d0:41:96:83:68:fa:25:81:51:22:59:81:68:3b:30:
                    30:21:91:18:d7:d3:7d:f7:9e:44:d9:f9:06:e5:af:
                    df:10:01:a2:de:75:20:43:e8:1c:f3:1f:b2:c5:48:
                    6d:48:fc:c0:01:da:35:38:c2:fb:46:92:4b:49:18:
                    80:94:a6:16:15:06:4f:95:af:a8:7b:07:3f:cb:2e:
                    44:f6:33:68:b4:21:2e:ce:e3:2e:b9:2a:ec:5f:f7:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:42:7A:DE:73:F8:5D:A0:4B:A2:74:41:5B:AC:76:FB:45:99:81
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:83:1e:c9:85:d6:6f:aa:9a:5d:82:09:b6:b7:9d:16:c8:b3:
         e5:02:b3:6f:12:49:bb:ae:8f:ce:48:5f:2a:fd:a0:11:e9:e2:
         d8:d5:b7:8f:a2:1d:99:d1:a5:d7:1d:81:1f:1c:4e:11:be:b6:
         bd:ee:cf:91:7e:48:15:ce:b2:46:0f:33:c9:68:63:a5:81:51:
         8c:aa:1f:00:cb:45:35:f1:c6:ce:6e:75:0f:a8:51:8d:fd:48:
         e1:16:87:0c:5e:10:b8:1b:3b:01:72:7e:2b:ca:48:1f:e7:ee:
         fb:5b:38:79:16:6e:ef:12:ff:4b:24:eb:27:a3:77:d6:9a:1d:
         c7:4d:97:72:1a:bd:a5:4b:31:1e:e7:86:60:cd:ea:ae:0e:d0:
         49:59:4f:af:6d:c3:fe:a9:02:b7:84:17:95:bf:77:33:cb:a4:
         76:e3:a7:b3:ef:11:8e:bd:85:cc:8f:70:bc:67:44:01:d3:2e:
         6b:43:df:a0:7c:c6:3d:10:14:6d:16:10:f3:80:a3:79:af:c8:
         a0:b7:db:d6:c7:e3:40:98:38:d0:c6:a4:7a:f8:30:1f:07:70:
         33:2d:4c:47:32:81:a2:4e:8c:ce:28:20:ec:93:c3:f7:20:f7:
         03:4a:6a:0a:3c:df:1b:2a:5b:ee:28:9a:da:56:56:e7:43:94:
         b3:29:98:12
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUKRukl1Ru3fc2CVEtvvWfefYuc9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTRaFw0yNTA0MDIxODMwMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjIxNjMyMUYwNUExQUJBM0FG
RDkwQjc0ODJFNjE0RUM0MkVEQTIyNUFERkI2MkU2NzU2MjA4MkUyOUREOUZBNjYy
Q0Y3MkYyMzY4MjJCMjM5MEIxRjQ5RjRCMDNEQTQ2RTZEQUVEOUU2NTJCMDA2QUU3
Rjg1OUI3M0NDRkQzMDU4MjNCMTFGMzk1Mjg5MUJBNEU4NUUwMDlERjkyNjQyOUY1
RTBFMjUwNzg3MzU2Q0Y5ODQ1QTc3OTI4M0I4NjVDQTIyNDJFMDdEQTI1QTk2QjI0
MzA5QTRGRjJFQTcyRjYwRERGOUFFMzIxQjk4QTMxQTY4QkI1MDEzMTI5MTNBQzdC
NzJGNjU4NDZEOUU4MkM2NzVCMDAwOUE4RTE4MUMxNUE5MENEMTlENTJBMkQ4QkM4
QjkxOTIxODM0QUE2QTIzNzJEQjJENEQwNDE5NjgzNjhGQTI1ODE1MTIyNTk4MTY4
M0IzMDMwMjE5MTE4RDdEMzdERjc5RTQ0RDlGOTA2RTVBRkRGMTAwMUEyREU3NTIw
NDNFODFDRjMxRkIyQzU0ODZENDhGQ0MwMDFEQTM1MzhDMkZCNDY5MjRCNDkxODgw
OTRBNjE2MTUwNjRGOTVBRkE4N0IwNzNGQ0IyRTQ0RjYzMzY4QjQyMTJFQ0VFMzJF
QjkyQUVDNUZGNzJBNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAshYyHwWhq6Ov2Qt0guYU7ELtoiWt+2LmdWIILindn6Ziz3LyNoIr
I5Cx9J9LA9pG5trtnmUrAGrn+Fm3PM/TBYI7EfOVKJG6ToXgCd+SZCn14OJQeHNW
z5hFp3koO4ZcoiQuB9olqWskMJpP8upy9g3fmuMhuYoxpou1ATEpE6x7cvZYRtno
LGdbAAmo4YHBWpDNGdUqLYvIuRkhg0qmojctstTQQZaDaPolgVEiWYFoOzAwIZEY
19N9955E2fkG5a/fEAGi3nUgQ+gc8x+yxUhtSPzAAdo1OML7RpJLSRiAlKYWFQZP
la+oewc/yy5E9jNotCEuzuMuuSrsX/cqVwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJmRQnrec/hdoEuidEFbrHb7RZmBMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMx
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbNIwDQYJKoZIhvcNAQELBQADggEBAG2DHsmF1m+qml2CCba3nRbIs+UCs28S
Sbuuj85IXyr9oBHp4tjVt4+iHZnRpdcdgR8cThG+tr3uz5F+SBXOskYPM8loY6WB
UYyqHwDLRTXxxs5udQ+oUY39SOEWhwxeELgbOwFyfivKSB/n7vtbOHkWbu8S/0sk
6yejd9aaHcdNl3IavaVLMR7nhmDN6q4O0ElZT69tw/6pAreEF5W/dzPLpHbjp7Pv
EY69hcyPcLxnRAHTLmtD36B8xj0QFG0WEPOAo3mvyKC329bH40CYONDGpHr4MB8H
cDMtTEcygaJOjM4oIOyTw/cg9wNKago83xsqW+4omtpWVudDlLMpmBI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org