Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          3Tt3lusZQ1PbatsfM/VpmFTbxrzFHDfqwk6pNRiWsNA=
Subject key identifier:   19:6E:B1:A3:06:FC:87:BD:78:A6:DB:0E:89:4F:3F:08:98:35:B5:71
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       63DB283C61E954C372FA40AAF657CEA253E27ABD
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        179.108.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:db:28:3c:61:e9:54:c3:72:fa:40:aa:f6:57:ce:a2:53:e2:7a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d6:5a:57:65:b8:67:4f:0b:7e:1f:4b:17:28:
                    3c:3e:f1:0d:98:6f:27:d9:c1:c0:b2:e3:17:ea:1b:
                    b1:65:e0:f2:3f:b2:7a:ab:a0:df:fc:47:71:88:59:
                    08:1f:bc:c5:82:ca:a3:f7:6d:8b:dc:8c:6b:71:30:
                    a8:12:db:a1:7e:f5:0f:ec:31:52:6e:b2:82:44:e9:
                    9f:ce:05:83:39:a4:d5:89:a5:1f:5b:46:0f:5d:ba:
                    35:bc:21:ba:72:03:9a:49:20:20:7a:79:4c:25:57:
                    57:77:84:e4:b6:ea:1b:8d:ca:ed:8f:02:c1:75:77:
                    3b:31:9b:cd:6e:75:53:93:e1:f6:be:70:f2:16:43:
                    51:86:9c:51:87:0a:75:48:91:73:cb:76:83:56:3c:
                    ab:66:84:9f:e3:5c:17:c9:c8:bb:88:87:06:5a:96:
                    11:fb:a0:be:b8:5a:7e:bb:8d:a4:9e:f3:c8:c4:26:
                    e5:47:bd:9b:10:38:25:47:62:8e:86:ff:71:84:13:
                    8c:4d:9e:0d:b6:6c:72:33:24:d9:bc:b4:7f:bd:bd:
                    e9:47:da:e4:e4:d6:1f:7d:8e:b4:0a:77:6c:46:68:
                    60:06:39:cc:68:73:0d:99:02:ee:ab:cf:97:50:f0:
                    9e:ab:83:76:e3:85:29:93:1a:cc:c7:2c:23:53:17:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6E:B1:A3:06:FC:87:BD:78:A6:DB:0E:89:4F:3F:08:98:35:B5:71
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:c1:ed:e3:d0:86:c1:b4:01:9f:5e:0e:d4:dd:a2:2a:d0:e4:
         5a:32:2b:87:fa:6b:74:19:2a:08:04:a3:8b:c2:40:b3:20:4e:
         35:1c:20:05:00:a9:66:d9:ce:9c:51:57:f3:d1:ba:e5:40:b5:
         59:22:b9:ec:05:29:d7:1a:20:93:20:0b:ac:39:f8:95:72:f2:
         14:a3:10:f8:da:38:84:c3:38:76:61:35:35:f9:df:0f:a9:62:
         4b:5e:aa:e0:2c:6a:d8:56:16:7a:0d:9b:8a:a5:1b:37:b1:4c:
         8e:a3:12:3f:ee:67:69:e4:06:f3:ae:ab:fc:4e:69:b9:9f:3b:
         1b:e7:70:e6:47:78:cf:c0:b2:22:be:3a:38:be:95:b9:f0:ab:
         33:41:d1:76:8c:d8:52:d6:8e:86:35:b3:49:60:8d:7e:e2:70:
         ec:84:72:9e:d3:94:c2:23:51:b8:0e:23:b5:cf:fb:85:3b:dd:
         fd:53:f2:94:6c:e5:a2:ed:e4:34:c4:b7:e9:0c:fa:70:94:bb:
         81:2e:9f:96:ed:6d:7c:1a:e6:1f:4b:40:74:5c:9c:c8:85:63:
         e3:48:2f:bb:db:b6:e4:3f:c9:d9:44:42:62:6f:65:7c:7d:62:
         7a:57:e5:d4:85:17:44:4b:21:ee:fb:fa:cd:df:1b:51:ae:ad:
         90:80:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org