Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          GR2LJpEy/JVkuY1aNfts4OtgXOl2F0FHmhMMFt7/q9k=
Subject key identifier:   90:05:F2:6A:8B:36:5D:94:02:7A:AE:87:C5:7B:FB:ED:29:99:92:6A
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       205C3308F785E1D11875E5F5144A64D030FD8FE7
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5c:33:08:f7:85:e1:d1:18:75:e5:f5:14:4a:64:d0:30:fd:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:03:16:5b:66:e2:26:ec:ae:5f:21:a3:ba:
                    75:ba:6f:da:2c:76:36:50:4e:06:b4:18:23:50:37:
                    4c:99:5f:4e:d7:fd:b7:ea:d5:15:e3:fc:44:ad:0e:
                    1c:0f:94:8e:f8:8c:9c:42:c6:39:d1:75:53:ea:08:
                    eb:a8:ea:cc:11:58:cf:2c:c0:e9:64:e5:f9:c6:1b:
                    2b:38:18:0f:20:9c:ba:df:86:ae:89:c6:ef:5a:81:
                    19:d9:dc:11:d3:3a:72:5e:ed:f3:53:f1:f0:56:53:
                    b7:bf:9a:22:cb:91:1d:ee:23:95:09:c3:8b:b0:bc:
                    3e:19:aa:92:81:9c:71:3e:f9:bf:dc:5f:7b:8a:74:
                    89:54:3c:5f:b5:87:6e:67:b5:2e:67:ef:e2:e5:c7:
                    02:79:f1:29:dd:2f:aa:5b:90:5d:ab:98:6b:5c:dd:
                    f7:6a:8e:7b:2c:fd:33:37:97:ce:e8:16:b5:71:5d:
                    e1:d3:9b:25:44:2e:c9:32:e6:fc:5c:f9:79:ce:0f:
                    3b:26:e5:85:65:c0:ab:df:0f:d7:01:22:f7:fd:d2:
                    df:d1:66:ea:64:6c:26:a4:86:cc:49:1e:d7:6e:3b:
                    9e:09:4e:2f:a9:cb:d6:da:5c:7f:4a:02:54:fd:2f:
                    14:e1:dd:1c:ac:ed:d1:0b:73:36:3a:70:ce:e1:d9:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:05:F2:6A:8B:36:5D:94:02:7A:AE:87:C5:7B:FB:ED:29:99:92:6A
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:c5:86:9a:01:a4:92:f3:3c:19:1c:65:cf:0a:7d:ee:d2:7e:
         f3:46:7c:10:b1:b2:19:b3:ef:39:8a:02:1f:96:35:b1:5d:fa:
         23:65:96:6b:4a:43:d7:6f:58:ae:d8:1a:fe:b8:78:17:2c:d7:
         6a:25:26:89:59:17:15:4c:d1:5d:bc:ad:cc:18:f5:0d:fb:04:
         35:63:62:fa:44:60:51:3d:11:c0:37:d2:3d:47:10:25:6d:c9:
         22:68:cf:c3:03:bf:a3:9a:46:e9:80:a8:5c:38:18:43:39:31:
         6a:f9:e6:b8:1e:49:03:99:c1:51:37:71:e4:e8:1b:e6:03:98:
         da:79:74:39:eb:ab:48:70:05:fb:c7:7d:fc:f9:00:ea:4d:61:
         26:3d:89:b2:58:0d:0f:93:db:59:c3:e0:bc:1b:cc:c2:ca:d1:
         e8:64:94:91:b5:fd:9d:28:e7:8a:b3:be:51:b2:ed:59:e3:50:
         13:37:4a:e7:d1:0c:96:82:4c:cc:70:a5:b0:ae:59:0b:9b:62:
         eb:9c:41:2a:e5:b8:03:65:c1:44:14:03:2b:5f:bc:04:d8:26:
         81:f9:08:12:96:96:8a:1e:ef:e4:27:8b:8b:47:32:15:9c:cc:
         f8:d4:2a:76:68:bd:dd:d5:a0:ca:37:87:38:c8:11:d7:73:0e:
         5d:b7:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org