Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3231322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          OJOlTfHxwkdD6TqovPkRU3+eyAOmHVE9+XUiUnXzgSc=
Subject key identifier:   81:DE:F8:77:A6:8C:E5:22:51:54:8B:C6:22:B9:AF:9B:79:D2:12:FA
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       210D3668ECF804836DA54FDEB99501869ED0192A
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        179.108.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0d:36:68:ec:f8:04:83:6d:a5:4f:de:b9:95:01:86:9e:d0:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:7e:af:a0:6b:96:72:2b:ef:39:84:88:42:
                    59:23:01:9a:ae:5b:1e:61:bf:76:e7:63:96:bc:00:
                    b1:55:26:4d:84:74:6b:c9:7d:ff:56:dd:4f:a9:2d:
                    28:f1:9e:37:be:0b:de:7e:f6:a3:f6:01:1d:43:8e:
                    4c:3c:bf:9e:f6:c5:4a:a4:f5:f4:79:a8:c2:4d:fe:
                    38:c4:34:a8:f6:e0:cb:26:d3:02:c0:90:5f:62:d8:
                    4a:75:97:04:fb:0e:04:0d:8c:e6:a9:c4:78:5f:d4:
                    1c:86:2c:fb:65:55:da:61:4a:2a:40:c9:15:34:bc:
                    94:29:ab:43:15:8f:32:e5:a2:cd:7d:1b:ba:44:67:
                    b3:79:62:f9:db:ac:ca:11:d0:8f:e9:ac:2b:e6:c4:
                    e7:57:88:88:b4:06:1b:ad:5d:b4:c0:af:c7:93:2b:
                    ee:9f:51:0d:c2:4e:77:7a:49:fd:ee:cb:77:f6:f7:
                    2d:e9:a9:52:0f:a6:dc:fc:81:d3:fa:28:0a:01:a1:
                    37:2c:49:4c:4b:68:8c:25:46:ef:53:71:85:18:54:
                    fe:12:8a:f5:f0:5e:84:89:7c:87:b3:18:95:ed:93:
                    92:d9:f5:5b:dd:0d:8a:6d:f0:47:9b:67:5a:c3:ef:
                    b9:97:dc:14:f4:6c:07:b9:ec:78:f7:80:f3:a2:74:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:F8:77:A6:8C:E5:22:51:54:8B:C6:22:B9:AF:9B:79:D2:12:FA
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:98:b6:a6:16:cf:4b:4b:12:e2:72:ca:b2:4d:a3:51:6c:
         08:80:c8:4a:bd:a9:e9:7c:45:cf:8f:23:45:cc:38:70:92:2f:
         a6:6b:ca:a4:63:0d:84:74:62:d9:d3:76:46:9c:9f:53:0a:bf:
         dd:1b:33:02:a7:01:a5:86:c6:b4:0d:15:5d:ee:47:e5:57:d5:
         c7:94:9e:93:d1:8b:8c:17:f8:30:00:c4:b8:53:be:e7:a9:a4:
         ea:7f:c9:49:26:5c:5e:e0:ae:0c:ee:0f:dc:5e:2e:8b:2a:69:
         6e:5d:fe:03:bc:11:e5:9a:f8:d0:1e:ee:67:33:3f:47:46:2e:
         df:3d:31:c3:c9:59:92:2a:6d:7e:9f:48:c9:9c:49:3d:0c:3f:
         a9:e7:45:b2:60:c4:6d:22:54:2d:55:d4:4b:2e:a5:8f:dc:a4:
         e0:db:bf:2b:2f:f8:d6:ec:aa:e0:99:0a:1f:30:5e:21:cf:05:
         0a:14:14:dd:89:a1:70:e7:e6:76:8c:66:6a:95:e6:11:7b:5a:
         5e:e8:9f:84:c4:4d:54:f6:47:99:6b:8d:d3:c7:3c:47:9b:66:
         e5:25:2d:d2:2c:a9:88:3d:bc:08:58:18:78:30:7c:7c:ca:ed:
         46:12:ac:5a:ab:58:da:b5:dc:12:cf:45:3f:1f:bb:54:87:66:
         d1:63:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org