Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          LTXerkHTOVMva/RVmyJkjGqGWbOqGkq/QbLEzG4h0NI=
Subject key identifier:   D9:92:1C:7C:E3:C4:9C:17:E8:AC:E7:34:1C:6F:97:71:92:60:8A:F6
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       3EDDE0C93A1365629BB4C8C3165B5E927155D324
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        179.108.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:dd:e0:c9:3a:13:65:62:9b:b4:c8:c3:16:5b:5e:92:71:55:d3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:8d:04:4d:f9:81:88:6d:ff:f3:c5:fe:f9:
                    be:6c:ee:48:83:7c:17:9b:64:6a:55:e6:fd:18:37:
                    b3:02:8a:d8:62:cc:5f:ac:5c:b7:88:a2:5f:b9:f1:
                    cb:78:a1:07:f1:ea:b5:12:74:1a:b1:9d:4f:f7:32:
                    ac:da:83:56:ad:b3:0a:e8:a8:0f:b2:4e:42:7c:74:
                    38:dd:77:56:eb:72:e0:bd:be:f3:4a:d6:3e:7c:41:
                    73:6a:8e:b7:4f:63:46:6b:4a:77:8a:b3:d1:aa:91:
                    f0:4a:21:08:11:a5:ac:3c:f6:72:37:24:0e:a7:5a:
                    d8:40:9b:1e:b4:7d:1a:37:c3:41:e8:6f:3e:77:c2:
                    79:02:59:65:1e:10:8c:43:4a:8f:1c:58:b1:3d:06:
                    1e:99:bf:fb:0c:47:48:82:31:6f:fe:87:f5:a5:be:
                    c4:1f:46:0f:00:c6:6e:40:b0:bb:31:71:3c:eb:98:
                    90:c3:e8:8b:10:6c:74:46:df:3d:29:d6:74:ce:37:
                    4e:25:38:ad:01:3d:19:15:0c:22:2d:ec:78:c1:f0:
                    11:0a:ef:3f:47:a1:de:dd:96:6e:b7:2f:a3:3a:e7:
                    5a:48:17:6a:5b:87:99:77:42:1e:cc:da:9e:4c:1d:
                    45:a1:ec:d4:92:44:71:4a:28:e2:f2:63:1f:19:39:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:1C:7C:E3:C4:9C:17:E8:AC:E7:34:1C:6F:97:71:92:60:8A:F6
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:e7:75:fe:58:72:32:22:5f:9c:53:3e:77:d7:bc:b3:54:
         36:8c:63:1b:f5:63:cd:90:cc:38:1c:09:90:29:ed:1a:a6:2e:
         f8:ac:77:9b:84:7d:cd:ac:4a:6c:f5:2c:ae:d0:6e:80:34:74:
         df:4b:0b:cc:40:63:9b:8d:47:e2:a3:15:60:c7:c3:39:72:a9:
         7c:38:cc:7e:a8:fe:cb:80:2b:e6:d1:58:f2:e0:91:23:36:d7:
         6a:47:b5:ff:89:29:7d:5e:98:d6:06:64:9c:58:9f:5a:d3:e1:
         f5:37:8c:8a:0f:3c:c0:b0:62:b6:bd:5c:fe:eb:46:8e:f7:05:
         e1:dd:a1:db:4e:70:8c:76:0f:eb:1a:48:02:24:d0:f5:21:7a:
         82:70:06:20:55:49:53:1c:0c:33:f3:a8:7a:0c:8b:c9:1a:42:
         ae:7b:cc:4b:19:d9:b8:c6:54:82:3b:5c:43:c0:ba:5b:74:01:
         7b:13:c7:f5:c8:0f:69:6b:05:83:20:1d:11:96:15:c5:10:39:
         34:7d:2b:88:37:a9:0d:bb:a6:26:75:a7:d4:5a:88:45:2c:2a:
         92:0d:ec:3f:1e:d8:7b:33:54:cf:77:cb:87:b8:86:7f:b2:03:
         cf:f4:72:72:1d:f1:b2:21:e1:31:66:50:e3:14:0c:4d:de:53:
         bc:15:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org