Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          Xz7oAqBNcmPryeGpNv5oz5MoDgIuQxjIfatq5esD4aY=
Subject key identifier:   F6:59:64:3D:99:DE:69:BA:40:4B:AB:83:75:E4:9F:4E:BE:45:50:61
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       4D61D3524B563C751CE1143E003A29D8F1175491
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:61:d3:52:4b:56:3c:75:1c:e1:14:3e:00:3a:29:d8:f1:17:54:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:67:d2:f2:6e:bc:d1:63:50:bc:4d:b9:4b:
                    ae:23:fc:9d:ed:37:12:13:6e:1c:dd:fa:59:6c:2c:
                    16:a3:02:5f:05:8b:5d:50:c4:41:bc:cc:6a:e6:7b:
                    4f:42:f2:8d:10:9a:a3:36:f2:88:2d:cb:2e:53:4f:
                    a8:1e:91:b0:99:d4:90:ae:58:8e:8e:fb:13:f7:4d:
                    7b:7e:be:51:32:bf:d3:f5:95:04:5c:7e:e8:3b:7e:
                    72:82:b9:bc:81:81:a4:70:89:02:93:b3:fd:d2:06:
                    8e:04:e9:8a:f8:88:7a:8c:2d:f6:0b:02:0b:dc:61:
                    ab:3a:2e:a1:19:0d:8d:7e:8f:90:9a:52:f6:8f:d5:
                    aa:8e:ad:6e:4b:8b:08:ce:2e:20:91:bc:ff:17:bd:
                    3d:7a:2e:c8:89:a4:17:db:37:41:97:fb:48:c0:cb:
                    26:fb:4a:e1:2f:98:91:0f:0b:4a:34:03:6a:92:99:
                    1c:dc:14:48:d0:a7:b8:d9:6c:76:28:92:08:53:69:
                    07:16:18:ec:58:ed:e5:bc:3e:c1:09:36:15:54:77:
                    e1:fc:d7:65:9a:c5:25:0e:a5:d1:e8:28:94:75:e4:
                    f4:54:06:7c:fc:55:8c:b1:4f:f7:61:69:9e:2c:21:
                    13:29:d2:d2:dd:88:ef:fe:96:3c:46:1e:da:f4:df:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:64:3D:99:DE:69:BA:40:4B:AB:83:75:E4:9F:4E:BE:45:50:61
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:49:c0:32:8d:37:f1:9e:34:d0:b6:8a:39:2d:ff:19:c0:
         07:7a:c8:84:32:f7:3a:d8:57:0d:a7:4b:a6:14:94:e9:cf:1c:
         bd:fd:24:a1:89:6f:15:69:68:73:6f:46:55:7e:d1:6c:cd:8a:
         97:12:0e:5f:95:92:63:14:c8:ca:41:d7:9e:88:7a:62:f8:cb:
         ce:68:2d:20:a4:a8:2f:50:3a:a1:88:d0:84:c1:e5:74:fe:a9:
         27:49:0f:ff:13:6b:2c:e2:b6:00:af:88:83:bb:54:7e:c4:14:
         12:f9:cd:34:8f:40:84:be:39:7e:0d:e9:83:55:68:78:4b:fc:
         16:98:d5:41:ea:9c:ba:38:79:14:c0:60:90:f2:47:cb:81:4a:
         a9:1b:73:ec:0a:9f:d4:9c:05:6e:b1:b0:07:31:1d:f4:e3:47:
         3c:02:65:7c:f0:ca:c2:5c:f1:a4:aa:7e:15:06:01:7e:f8:b6:
         a7:13:fb:58:e8:d5:af:79:71:99:d9:b7:72:44:33:0c:01:c2:
         55:3a:3a:0f:ff:f9:0a:5c:8d:f4:22:28:73:41:34:3f:4d:dd:
         20:e5:bc:82:4c:fa:b7:d8:9a:bc:16:f4:04:cd:67:2d:5d:fb:
         be:1b:a9:1d:4f:3f:2d:a2:51:f3:bc:bd:5c:5a:97:59:3a:6e:
         fb:41:6d:23
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUTWHTUktWPHUc4RQ+ADop2PEXVJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTBaFw0yNTA0MDIxODMwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI0NDY3RDJGMjZFQkNEMTYz
NTBCQzREQjk0QkFFMjNGQzlERUQzNzEyMTM2RTFDRERGQTU5NkMyQzE2QTMwMjVG
MDU4QjVENTBDNDQxQkNDQzZBRTY3QjRGNDJGMjhEMTA5QUEzMzZGMjg4MkRDQjJF
NTM0RkE4MUU5MUIwOTlENDkwQUU1ODhFOEVGQjEzRjc0RDdCN0VCRTUxMzJCRkQz
RjU5NTA0NUM3RUU4M0I3RTcyODJCOUJDODE4MUE0NzA4OTAyOTNCM0ZERDIwNjhF
MDRFOThBRjg4ODdBOEMyREY2MEIwMjBCREM2MUFCM0EyRUExMTkwRDhEN0U4Rjkw
OUE1MkY2OEZENUFBOEVBRDZFNEI4QjA4Q0UyRTIwOTFCQ0ZGMTdCRDNEN0EyRUM4
ODlBNDE3REIzNzQxOTdGQjQ4QzBDQjI2RkI0QUUxMkY5ODkxMEYwQjRBMzQwMzZB
OTI5OTFDREMxNDQ4RDBBN0I4RDk2Qzc2Mjg5MjA4NTM2OTA3MTYxOEVDNThFREU1
QkMzRUMxMDkzNjE1NTQ3N0UxRkNENzY1OUFDNTI1MEVBNUQxRTgyODk0NzVFNEY0
NTQwNjdDRkM1NThDQjE0RkY3NjE2OTlFMkMyMTEzMjlEMkQyREQ4OEVGRkU5NjND
NDYxRURBRjRERjRCQTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwkRn0vJuvNFjULxNuUuuI/yd7TcSE24c3fpZbCwWowJfBYtdUMRB
vMxq5ntPQvKNEJqjNvKILcsuU0+oHpGwmdSQrliOjvsT9017fr5RMr/T9ZUEXH7o
O35ygrm8gYGkcIkCk7P90gaOBOmK+Ih6jC32CwIL3GGrOi6hGQ2Nfo+QmlL2j9Wq
jq1uS4sIzi4gkbz/F709ei7IiaQX2zdBl/tIwMsm+0rhL5iRDwtKNANqkpkc3BRI
0Ke42Wx2KJIIU2kHFhjsWO3lvD7BCTYVVHfh/NdlmsUlDqXR6CiUdeT0VAZ8/FWM
sU/3YWmeLCETKdLS3Yjv/pY8Rh7a9N9LpQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPZZZD2Z3mm6QEurg3Xkn06+RVBhMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMx
MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKzbNgwDQYJKoZIhvcNAQELBQADggEBAKTIScAyjTfxnjTQtoo5Lf8ZwAd6yIQy
9zrYVw2nS6YUlOnPHL39JKGJbxVpaHNvRlV+0WzNipcSDl+VkmMUyMpB156IemL4
y85oLSCkqC9QOqGI0ITB5XT+qSdJD/8TayzitgCviIO7VH7EFBL5zTSPQIS+OX4N
6YNVaHhL/BaY1UHqnLo4eRTAYJDyR8uBSqkbc+wKn9ScBW6xsAcxHfTjRzwCZXzw
ysJc8aSqfhUGAX74tqcT+1jo1a95cZnZt3JEMwwBwlU6Og//+QpcjfQiKHNBND9N
3SDlvIJM+rfYmrwW9ATNZy1d+74bqR1PPy2iUfO8vVxal1k6bvtBbSM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org