Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          V3biI35XZu5jCw1Dw7W6d4nmQrd4FakWuGQF8dbYN3A=
Subject key identifier:   59:F5:3B:E0:40:6D:62:F4:CD:97:FB:F5:4C:69:F6:23:D1:1C:26:39
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       70D61FDEF685E81E475A1562CFB195F811C92CEF
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d6:1f:de:f6:85:e8:1e:47:5a:15:62:cf:b1:95:f8:11:c9:2c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:d9:81:a4:99:ca:8a:e1:3c:bc:07:ee:26:
                    54:0b:34:4a:4e:e1:0a:ce:e2:71:e4:22:a3:75:0b:
                    7f:f3:5c:5f:4d:a3:53:e0:c7:7b:a0:23:21:81:4d:
                    6e:af:fb:b4:c3:dd:6b:80:78:60:d7:be:e5:9d:77:
                    ff:16:7f:bd:eb:b5:f3:c6:b8:35:c1:3e:ab:b2:4b:
                    64:09:1f:07:56:06:5a:de:49:46:2e:1b:1b:c9:ef:
                    79:21:84:04:5e:e5:17:f5:89:f5:04:62:af:39:41:
                    5f:99:aa:d0:bf:36:f2:59:f3:6f:ca:cb:c4:73:46:
                    02:00:b3:11:66:2a:be:92:c6:10:8f:78:46:ea:64:
                    8e:f4:6a:06:08:e1:c2:6b:ee:02:30:55:4a:1c:23:
                    35:0f:0d:53:d5:47:62:01:45:76:16:c3:9a:ad:7a:
                    e0:93:8e:6b:24:a4:a3:37:7b:e4:8e:a3:3b:d8:38:
                    8f:3b:82:60:a4:7f:a9:8d:a1:5a:f3:4a:8f:e5:6c:
                    c8:75:8c:52:98:e1:90:b1:33:99:50:5a:0d:16:e8:
                    10:4f:a5:0e:1f:6f:bf:fa:2d:e7:49:b5:6c:93:d7:
                    05:39:39:f5:0f:ca:e6:ab:01:b9:ca:21:ee:0e:d4:
                    98:e8:44:95:4b:b1:83:59:27:13:87:e1:f8:38:15:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F5:3B:E0:40:6D:62:F4:CD:97:FB:F5:4C:69:F6:23:D1:1C:26:39
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:b7:50:b9:0e:e9:0c:6e:4c:df:92:a9:60:17:7f:0b:a7:
         eb:05:8b:54:36:d9:5e:2e:55:19:19:18:74:e3:bb:4c:05:36:
         a3:14:23:aa:4c:19:0f:ec:c4:0d:f8:fc:fe:cb:50:fa:c8:68:
         49:d7:ce:90:01:90:ce:6f:64:32:4f:a1:0a:f9:4c:6f:33:7c:
         ff:f6:17:38:6b:3c:6c:b8:e8:d2:73:44:cd:99:46:ab:68:2f:
         2d:1f:48:22:33:a9:98:23:3b:84:20:db:ae:d4:3d:a9:06:6d:
         fa:91:fd:00:ed:27:93:e0:00:ed:08:1f:cb:7d:25:6e:fe:40:
         ed:04:fd:80:50:58:ce:4c:a6:1d:98:61:e6:4a:cf:5a:9a:4f:
         64:f1:56:56:44:fc:1c:75:4f:52:08:01:1d:09:1f:b2:48:26:
         8e:ab:d1:e9:65:de:d4:60:ab:a8:bc:07:26:19:a3:d7:4d:f5:
         18:b0:a1:17:0d:d5:51:63:25:be:af:6f:8c:52:15:0d:1b:53:
         93:de:82:32:17:b5:90:b3:9a:2e:0f:f7:86:b5:59:5f:4b:4b:
         10:57:8d:ab:57:a3:74:38:90:1b:60:1d:94:3a:f0:37:d6:c5:
         5c:6d:49:85:05:cc:7a:8b:db:34:bf:6b:eb:2a:ff:1a:2a:dd:
         bb:8d:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org