Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          ihDYemlGbr55i2Q7yBw/0u2zTpA2QU49pL2oWEmfTd4=
Subject key identifier:   1A:AA:95:E6:15:9C:84:DB:B5:7F:28:5A:B2:7F:30:A8:9F:6B:4C:3A
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       6573B5E92088654DE00B3C12D3CDF3FB1F59691A
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     262691
IP address blocks:        179.108.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:73:b5:e9:20:88:65:4d:e0:0b:3c:12:d3:cd:f3:fb:1f:59:69:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:6c:c0:03:04:90:5c:ba:08:db:30:e1:9c:
                    fb:57:72:ea:30:9a:3b:34:70:4f:2d:73:28:10:10:
                    27:9b:ce:0c:a4:a3:f0:93:1d:a4:e2:bd:22:67:c2:
                    ea:5f:57:6c:8c:c9:16:75:25:9c:65:ce:69:b3:8f:
                    2b:15:70:d7:0b:25:56:e3:47:76:5c:99:32:da:40:
                    6f:e7:3f:08:20:cf:58:27:80:2c:87:18:a5:70:f0:
                    4f:0e:c8:f3:fa:c6:44:43:06:43:be:78:a4:a6:70:
                    60:42:9c:a2:ef:56:0e:5b:aa:4e:c4:72:45:98:3d:
                    e0:e7:f0:ea:bb:14:f6:cd:1c:4d:a6:e2:12:ed:4e:
                    a1:f8:b2:17:e0:01:fc:bd:99:fd:15:d8:08:7c:dc:
                    73:99:df:4c:31:f0:6a:ea:04:74:08:fc:4c:ac:51:
                    44:db:4b:5d:50:8f:8a:4c:a3:22:ee:ec:f4:8f:01:
                    b4:b2:f5:f6:81:bb:22:86:f9:6e:fe:07:c2:52:43:
                    29:b3:42:0c:49:35:28:4f:c2:fa:59:c7:7c:c4:b4:
                    99:32:a3:0b:f4:9e:77:f0:c8:05:3e:78:fc:a3:bb:
                    26:d1:b8:a6:1e:de:e3:a3:af:d8:24:e0:dc:d8:5f:
                    0f:e4:4b:65:bb:a4:c0:51:77:54:34:77:51:cb:fd:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:95:E6:15:9C:84:DB:B5:7F:28:5A:B2:7F:30:A8:9F:6B:4C:3A
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:6c:5a:4e:2f:f5:d1:a8:b0:03:e9:23:f6:1a:e6:84:c4:22:
         b2:fc:26:8c:7a:65:cc:4d:13:e3:38:8e:19:16:b1:c9:f1:84:
         30:f6:93:e8:63:b8:f1:72:6f:78:6f:85:2e:49:b3:ac:45:ac:
         f0:54:99:37:e3:99:f4:75:1b:93:3c:47:70:7b:12:c2:56:64:
         63:fb:39:6c:41:74:7c:43:47:fe:82:2b:6f:61:14:61:ba:7a:
         2b:34:3e:4b:d0:9a:c1:b7:ec:a2:39:78:c6:51:23:2a:4b:14:
         2d:59:29:21:a9:ee:9e:0e:61:2c:a0:fc:b2:70:2b:25:d5:7f:
         1a:f0:a3:77:c4:9f:6f:dc:cc:74:1f:6b:3e:79:47:77:5a:bf:
         9d:d0:09:22:2e:2c:12:cb:31:c5:b1:b2:a9:a1:42:bb:d1:ff:
         44:5c:96:70:b2:92:d4:a6:63:e6:34:b4:76:8a:4f:7f:17:24:
         6a:a9:88:5b:bc:7e:85:4e:4f:a6:0c:8a:b5:50:fd:d8:a1:2b:
         e0:44:ff:df:6f:c5:da:4e:9f:e3:a7:e9:0f:63:86:44:3a:6e:
         b3:ea:7e:c4:e3:78:82:28:37:5f:59:58:18:ec:25:e9:84:0f:
         dc:bf:90:39:43:ae:e8:86:03:02:0b:96:4d:07:88:4c:d7:2f:
         6e:90:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org