Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          aiAyzMTTyAbAzkLnq/xhsu50cIypIiGpo98+beHuEAM=
Subject key identifier:   B4:C6:19:1F:52:93:27:E0:A0:27:3D:4E:87:83:0A:E1:D5:4D:6F:73
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       702BFD3999273BF1D191682E955968E15B365FC5
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        179.108.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2b:fd:39:99:27:3b:f1:d1:91:68:2e:95:59:68:e1:5b:36:5f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:a9:33:7c:d9:fc:a2:d9:fa:cf:7b:5c:a5:
                    46:ae:23:14:79:b8:0c:cb:a9:69:0b:0c:29:45:cd:
                    31:ec:12:86:f5:47:61:59:0a:7f:f7:9a:3a:a0:0c:
                    c7:6f:f0:b9:80:b8:1c:89:74:87:1f:bd:61:07:ad:
                    64:54:87:b4:c7:9f:43:d5:b3:c4:f2:4f:88:20:bf:
                    8c:47:fd:d2:7e:72:5e:6a:33:a9:50:73:6c:93:25:
                    73:8f:b7:46:81:9e:50:f0:24:56:a3:d2:2c:93:e5:
                    95:7f:5f:c9:f0:58:47:a3:ba:ee:13:b4:98:ee:65:
                    b5:fc:ff:11:9c:e6:c1:47:87:b2:b6:8e:6f:8c:5f:
                    0f:1e:85:b9:18:28:e2:58:27:c3:25:ff:ff:f9:19:
                    1e:33:d5:a7:db:ba:d6:f5:78:74:d5:af:f3:17:46:
                    71:b6:d6:4e:d3:fc:6b:f3:b5:92:93:eb:1e:f9:4c:
                    99:8d:46:00:d5:ab:f2:aa:56:a3:2e:7c:2f:65:06:
                    61:cd:81:fe:c0:ea:b3:77:a7:19:69:05:84:c0:2e:
                    75:51:90:69:07:3e:7d:26:aa:87:0f:51:6f:15:30:
                    a2:9b:77:a7:26:88:14:55:86:de:16:d4:ee:49:46:
                    aa:b4:e5:b0:00:d3:ca:2a:c1:9c:1e:e9:ea:bb:ef:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C6:19:1F:52:93:27:E0:A0:27:3D:4E:87:83:0A:E1:D5:4D:6F:73
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:05:95:19:c0:73:b9:17:a4:db:b5:35:2d:df:f8:00:68:4e:
         39:f3:21:9c:0b:38:fd:39:07:86:7c:bf:b8:a8:5f:97:db:6a:
         db:c7:d1:a7:e2:65:8e:e8:4d:ea:57:0c:13:71:2c:b1:b6:c9:
         83:f6:72:82:7f:f2:49:1f:9b:64:bd:52:d2:ec:9a:5a:fc:ca:
         fa:0b:81:00:9b:b7:9d:26:0d:09:3a:16:34:f5:55:e4:8d:9c:
         1f:91:74:cb:cc:ce:30:46:63:34:7d:bb:0f:ea:55:2e:ba:38:
         67:4c:81:e1:ed:4b:72:84:a2:f1:e7:a8:8e:00:7b:ff:08:1d:
         27:db:7b:52:e8:cd:aa:a7:f7:06:1f:47:17:00:28:bc:3a:98:
         2b:e4:63:dc:a4:72:ce:2b:1e:25:a4:c4:17:1f:62:65:7c:b8:
         1d:23:08:a4:58:66:b2:3b:81:a7:cd:da:f3:2f:64:84:a7:41:
         81:39:5b:69:7b:78:a3:e0:fa:83:b7:f1:96:d5:69:e8:b4:4b:
         08:ca:c2:97:3f:7a:1f:52:f8:30:f6:db:f0:9d:9f:ca:49:0b:
         9a:ec:9e:8c:82:9b:1a:db:68:d8:7f:c6:74:45:79:a1:bd:ad:
         63:e0:7c:5b:4a:c1:b8:b2:c1:4a:85:23:ba:42:f8:d3:0a:97:
         4d:50:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org