Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          OwU0/bLYy8EyjzmK914llpEyffoYvTTIauAWy5ZxyKI=
Subject key identifier:   45:1F:20:6D:A2:94:E2:6B:44:A8:24:31:CF:0F:D7:03:02:0D:64:BD
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       0A7C3C785F10A21951DA62DD5903383E3D284D43
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        179.108.220.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7c:3c:78:5f:10:a2:19:51:da:62:dd:59:03:38:3e:3d:28:4d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=3082010A02820101009AD7096C085082AA17DBDA4F1A95EEF54B64F7DEFD146A3545E031191C1AB74A513AA6149473C22552C4FD302D8EC03C728123E834AF764D18DBBE6BD3B3E5AD0B600926900DD350CEEB72AF891CAA8D0939C1996F7D4A83A82D3D0E3D9BD1F6B1C4EE323FBAF5B937E701E7A257B4362964A8FC916A052A056C70B4E775B011146015CC5F7CA8D71718A2D85B1DBBF488DD6E7EC37BDA9DAEEDA471CC7F400CFF084EF7771BA17605E5CCC6758F2ADB4AD8D735B2DA0E74A88587AF9F257F1B142B97DC64123589969E47D143AC9DE453643CCA793C103919946C7C5027CADE568B636BD41FD39AAE295DF85FF81CC2B9F3E14B8FFCC28C7D9E7A22D2AEDE430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:09:6c:08:50:82:aa:17:db:da:4f:1a:95:
                    ee:f5:4b:64:f7:de:fd:14:6a:35:45:e0:31:19:1c:
                    1a:b7:4a:51:3a:a6:14:94:73:c2:25:52:c4:fd:30:
                    2d:8e:c0:3c:72:81:23:e8:34:af:76:4d:18:db:be:
                    6b:d3:b3:e5:ad:0b:60:09:26:90:0d:d3:50:ce:eb:
                    72:af:89:1c:aa:8d:09:39:c1:99:6f:7d:4a:83:a8:
                    2d:3d:0e:3d:9b:d1:f6:b1:c4:ee:32:3f:ba:f5:b9:
                    37:e7:01:e7:a2:57:b4:36:29:64:a8:fc:91:6a:05:
                    2a:05:6c:70:b4:e7:75:b0:11:14:60:15:cc:5f:7c:
                    a8:d7:17:18:a2:d8:5b:1d:bb:f4:88:dd:6e:7e:c3:
                    7b:da:9d:ae:ed:a4:71:cc:7f:40:0c:ff:08:4e:f7:
                    77:1b:a1:76:05:e5:cc:c6:75:8f:2a:db:4a:d8:d7:
                    35:b2:da:0e:74:a8:85:87:af:9f:25:7f:1b:14:2b:
                    97:dc:64:12:35:89:96:9e:47:d1:43:ac:9d:e4:53:
                    64:3c:ca:79:3c:10:39:19:94:6c:7c:50:27:ca:de:
                    56:8b:63:6b:d4:1f:d3:9a:ae:29:5d:f8:5f:f8:1c:
                    c2:b9:f3:e1:4b:8f:fc:c2:8c:7d:9e:7a:22:d2:ae:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1F:20:6D:A2:94:E2:6B:44:A8:24:31:CF:0F:D7:03:02:0D:64:BD
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:80:22:2e:22:5b:a8:33:87:29:69:78:74:a5:b4:db:cd:1f:
         dd:86:16:3d:5f:97:11:e5:4c:68:5c:61:4f:11:8b:cb:ce:50:
         a9:49:ac:47:8b:28:84:d3:b8:0f:c6:4b:bc:03:4c:cc:3e:68:
         dd:ca:6a:0e:d8:b4:bf:a8:fc:2b:46:73:3d:a6:a6:16:0f:5b:
         d7:a5:dd:f6:78:7f:26:fd:a8:ff:f7:02:59:c2:de:e5:dc:85:
         2c:d5:33:c2:d2:e0:a0:29:9e:4f:27:a7:f1:c6:60:00:1c:29:
         43:65:1f:5a:6f:31:91:75:1e:66:06:23:7e:6c:08:12:ef:60:
         15:49:6e:e5:a9:e8:ca:aa:77:66:5d:f7:2e:01:d3:a3:68:5c:
         87:09:34:95:5a:38:bd:ec:cc:47:f3:d6:9c:17:af:5d:c8:07:
         56:ab:78:a2:5e:39:60:c3:05:26:e6:65:f2:c0:f6:0b:89:e3:
         ce:9e:4f:db:f9:5a:fc:97:e5:f8:94:a4:65:8a:49:9d:1b:ce:
         bd:38:87:55:c1:a1:53:02:3e:c5:32:47:66:03:f2:1b:38:45:
         30:f8:80:ad:d7:15:25:c3:9a:c3:6f:4b:0b:d3:3a:0a:d8:5a:
         ff:55:e9:f4:07:1e:e9:80:07:9a:a7:bf:3a:ce:2d:35:b4:30:
         71:bc:92:18
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUCnw8eF8QohlR2mLdWQM4Pj0oTUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MDlaFw0yNTA0MDIxODMwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUFENzA5NkMwODUwODJBQTE3
REJEQTRGMUE5NUVFRjU0QjY0RjdERUZEMTQ2QTM1NDVFMDMxMTkxQzFBQjc0QTUx
M0FBNjE0OTQ3M0MyMjU1MkM0RkQzMDJEOEVDMDNDNzI4MTIzRTgzNEFGNzY0RDE4
REJCRTZCRDNCM0U1QUQwQjYwMDkyNjkwMEREMzUwQ0VFQjcyQUY4OTFDQUE4RDA5
MzlDMTk5NkY3RDRBODNBODJEM0QwRTNEOUJEMUY2QjFDNEVFMzIzRkJBRjVCOTM3
RTcwMUU3QTI1N0I0MzYyOTY0QThGQzkxNkEwNTJBMDU2QzcwQjRFNzc1QjAxMTE0
NjAxNUNDNUY3Q0E4RDcxNzE4QTJEODVCMURCQkY0ODhERDZFN0VDMzdCREE5REFF
RURBNDcxQ0M3RjQwMENGRjA4NEVGNzc3MUJBMTc2MDVFNUNDQzY3NThGMkFEQjRB
RDhENzM1QjJEQTBFNzRBODg1ODdBRjlGMjU3RjFCMTQyQjk3REM2NDEyMzU4OTk2
OUU0N0QxNDNBQzlERTQ1MzY0M0NDQTc5M0MxMDM5MTk5NDZDN0M1MDI3Q0FERTU2
OEI2MzZCRDQxRkQzOUFBRTI5NURGODVGRjgxQ0MyQjlGM0UxNEI4RkZDQzI4QzdE
OUU3QTIyRDJBRURFNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmtcJbAhQgqoX29pPGpXu9Utk9979FGo1ReAxGRwat0pROqYUlHPC
JVLE/TAtjsA8coEj6DSvdk0Y275r07PlrQtgCSaQDdNQzutyr4kcqo0JOcGZb31K
g6gtPQ49m9H2scTuMj+69bk35wHnole0NilkqPyRagUqBWxwtOd1sBEUYBXMX3yo
1xcYothbHbv0iN1ufsN72p2u7aRxzH9ADP8ITvd3G6F2BeXMxnWPKttK2Nc1stoO
dKiFh6+fJX8bFCuX3GQSNYmWnkfRQ6yd5FNkPMp5PBA5GZRsfFAnyt5Wi2Nr1B/T
mq4pXfhf+BzCufPhS4/8wox9nnoi0q7eQwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FEUfIG2ilOJrRKgkMc8P1wMCDWS9MB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMy
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbNwwDQYJKoZIhvcNAQELBQADggEBAFaAIi4iW6gzhylpeHSltNvNH92GFj1f
lxHlTGhcYU8Ri8vOUKlJrEeLKITTuA/GS7wDTMw+aN3Kag7YtL+o/CtGcz2mphYP
W9el3fZ4fyb9qP/3AlnC3uXchSzVM8LS4KApnk8np/HGYAAcKUNlH1pvMZF1HmYG
I35sCBLvYBVJbuWp6Mqqd2Zd9y4B06NoXIcJNJVaOL3szEfz1pwXr13IB1areKJe
OWDDBSbmZfLA9guJ486eT9v5WvyX5fiUpGWKSZ0bzr04h1XBoVMCPsUyR2YD8hs4
RTD4gK3XFSXDmsNvSwvTOgrYWv9V6fQHHumAB5qnvzrOLTW0MHG8khg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org