Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3231362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          T4TCq4bjjXTWFgJB2I31Oyqya7Uvfwb3XuL+JVpJOg4=
Subject key identifier:   ED:B1:8A:D8:93:EF:32:FB:29:58:40:71:DB:3C:42:D6:B1:E7:D5:B0
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       6B365B087B125E5EEBC7D85B327D63F41E3EFC93
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.216.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:36:5b:08:7b:12:5e:5e:eb:c7:d8:5b:32:7d:63:f4:1e:3e:fc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject: CN=3082010A0282010100D3B04AFE97C4FE97CB73D5F30AD6286A7730D699F88E68811AB5122965F786BA1605761B5F59F5EB0FD7209ED393EFFDCF39CA3CD63647BFAEE526732ADADE78ABEA0C7B8CBF1C652CA24391E941671846501DBE08E3C940E1893BE716DB5C66BDF4DC397E58E20D8A7583C2C5243735DF924615752D079F3BA43E5C1757E77B463CBBE71F3311A29373E2E4916D480E25FE73FFA3B23600341D0CCC6A332F214AD759602AC2CFC92F680BD87B4B358DA677208A4FB74467E88A8AB66D9F144C9578494D2E1CC0BD18111BD20FC058B80F1DCB657C3ED8C519C46AD9BDD93B41C6ABCA6283883154615EF9DA8C8E1DF906AFEEE10CD57FEA20D5B64BF619AB050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:4a:fe:97:c4:fe:97:cb:73:d5:f3:0a:d6:
                    28:6a:77:30:d6:99:f8:8e:68:81:1a:b5:12:29:65:
                    f7:86:ba:16:05:76:1b:5f:59:f5:eb:0f:d7:20:9e:
                    d3:93:ef:fd:cf:39:ca:3c:d6:36:47:bf:ae:e5:26:
                    73:2a:da:de:78:ab:ea:0c:7b:8c:bf:1c:65:2c:a2:
                    43:91:e9:41:67:18:46:50:1d:be:08:e3:c9:40:e1:
                    89:3b:e7:16:db:5c:66:bd:f4:dc:39:7e:58:e2:0d:
                    8a:75:83:c2:c5:24:37:35:df:92:46:15:75:2d:07:
                    9f:3b:a4:3e:5c:17:57:e7:7b:46:3c:bb:e7:1f:33:
                    11:a2:93:73:e2:e4:91:6d:48:0e:25:fe:73:ff:a3:
                    b2:36:00:34:1d:0c:cc:6a:33:2f:21:4a:d7:59:60:
                    2a:c2:cf:c9:2f:68:0b:d8:7b:4b:35:8d:a6:77:20:
                    8a:4f:b7:44:67:e8:8a:8a:b6:6d:9f:14:4c:95:78:
                    49:4d:2e:1c:c0:bd:18:11:1b:d2:0f:c0:58:b8:0f:
                    1d:cb:65:7c:3e:d8:c5:19:c4:6a:d9:bd:d9:3b:41:
                    c6:ab:ca:62:83:88:31:54:61:5e:f9:da:8c:8e:1d:
                    f9:06:af:ee:e1:0c:d5:7f:ea:20:d5:b6:4b:f6:19:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B1:8A:D8:93:EF:32:FB:29:58:40:71:DB:3C:42:D6:B1:E7:D5:B0
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3231362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:50:66:24:37:90:4d:59:33:52:38:ea:2b:a6:a9:5d:62:
         28:ee:7c:cf:9f:33:11:1f:e8:f6:b9:90:f2:4c:01:a4:17:1a:
         ac:d0:1a:62:21:81:cf:49:09:bf:f5:3e:bc:17:31:0d:3e:f9:
         ea:78:9f:e9:50:7c:87:88:d9:94:96:d5:93:de:3e:ed:4a:88:
         3e:37:0b:9c:ed:b1:d6:b3:70:9d:e1:a2:55:0d:49:7f:21:52:
         18:05:bd:46:a5:7d:c8:71:10:a5:15:a3:d2:8f:59:c7:33:c0:
         ee:7d:3f:a3:0b:52:93:f9:e7:a1:ea:ac:9e:60:8e:05:e7:92:
         46:98:0b:6a:0d:fb:91:44:b5:46:db:62:ed:7e:0c:94:2b:9a:
         e5:89:cc:79:fb:6f:e1:a2:d1:8f:36:46:31:11:7a:b2:e7:21:
         06:29:b7:5b:8d:49:d9:e5:ac:80:3c:1f:3a:87:1f:08:26:26:
         f8:d2:12:11:cc:61:1d:9a:bf:c3:5f:09:f3:c9:61:2a:0e:b8:
         ab:12:11:e4:19:f7:4d:e8:fe:e6:72:3b:24:2f:ec:bb:a3:aa:
         e7:6c:5f:8f:53:80:b3:b6:d6:3b:4e:0e:42:d9:a9:35:56:68:
         45:e0:cd:64:61:e4:3d:ed:ac:3a:79:04:a5:4b:d5:e4:48:d5:
         54:01:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org