Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          fK4IN5nkdy4ns9ahnRFO/1E6ID3XkD2zr2k+HXJaK2U=
Subject key identifier:   40:65:1C:B7:FE:62:55:DB:CE:B6:C3:DF:1C:B6:93:6D:3D:F4:79:4C
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       A2E4A4BF454B377B783DDF2463F7F4F19764FF
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     262691
IP address blocks:        179.108.214.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a2:e4:a4:bf:45:4b:37:7b:78:3d:df:24:63:f7:f4:f1:97:64:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:57:75:32:fb:1a:15:0d:9d:80:f3:c9:20:
                    39:30:b2:30:85:f7:d3:8f:1e:b9:0b:1d:46:e9:93:
                    9d:ea:88:b1:f5:bc:ac:29:2f:98:51:c6:b2:c8:b4:
                    7c:b1:28:58:be:77:82:3d:50:4b:56:cd:73:30:96:
                    31:7c:fb:35:d2:12:d3:79:12:f7:35:88:b8:0c:04:
                    cc:69:64:ed:64:92:28:ad:a7:fe:e3:6f:97:fe:a4:
                    42:48:9a:45:95:eb:71:09:56:72:76:e5:44:a7:8d:
                    2c:13:fc:6a:e7:17:24:d1:22:fa:25:6a:02:41:06:
                    96:5b:d5:9f:e6:2f:23:29:b1:42:32:7f:72:53:d8:
                    42:72:68:13:32:00:11:9d:8d:d6:72:3a:fb:ce:2f:
                    03:ca:bf:52:70:d9:69:45:89:7a:b3:8a:d7:99:03:
                    37:52:dc:5c:b9:c5:6f:f7:47:fc:66:7e:07:52:8d:
                    d3:e1:19:1d:67:a8:a9:bc:66:4f:2d:1a:de:63:c2:
                    00:e5:e5:90:20:6b:45:08:18:55:f5:6f:cb:a9:75:
                    8b:72:f2:85:4d:5e:99:a2:49:72:f8:0a:3b:5d:f4:
                    b2:4a:58:3b:18:50:60:ad:4e:cd:2e:63:67:f5:0c:
                    4d:aa:46:87:86:9e:87:da:eb:8c:3f:14:79:e8:06:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:65:1C:B7:FE:62:55:DB:CE:B6:C3:DF:1C:B6:93:6D:3D:F4:79:4C
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:de:88:46:dc:ac:48:10:08:09:5a:28:81:ac:03:52:9c:
         02:ca:b8:04:68:e4:52:26:83:07:5a:9c:78:0a:ba:d7:68:0b:
         e5:1d:9c:28:1f:64:3b:2e:bc:0d:49:d2:ae:37:83:8c:6d:9e:
         2a:e8:5a:81:68:29:f1:02:7e:1a:7f:03:a9:c5:72:88:74:b1:
         1d:a0:34:a7:91:d0:8d:cd:bc:0b:01:44:4a:ea:23:d1:f8:51:
         b5:1e:61:01:35:ed:05:fb:b5:3c:02:bf:c6:e1:f4:d7:14:dd:
         df:72:a1:42:9a:db:45:78:65:51:65:0c:2f:d7:59:fc:06:6e:
         13:dd:77:38:cb:fc:d2:7e:f4:b7:37:50:a7:24:59:e4:f0:78:
         82:53:97:2d:5c:03:eb:e0:e5:dc:b8:6c:23:c8:e5:e8:a2:df:
         1b:7b:f8:da:32:36:18:44:e5:e0:3d:d0:22:67:db:f4:51:56:
         6e:c8:78:a6:4c:a1:e4:87:af:dc:2b:0a:1e:bf:af:68:e5:da:
         9d:78:02:77:c5:67:0c:d7:6c:ec:62:74:7d:2c:18:c7:2d:21:
         fc:5d:2e:c6:97:18:74:bb:cb:e6:97:d1:4f:b6:d0:66:54:73:
         49:c0:56:e6:e4:72:70:8d:a9:57:04:8f:62:da:9e:3b:e3:65:
         05:2d:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org