Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          LT5DW3UlgjfYGaRnYMBIMGN7sQZb4U5DEOKyTOPaO0I=
Subject key identifier:   27:F1:29:70:AC:79:45:A7:67:2F:B1:06:02:D2:0C:93:B7:14:1F:B7
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       1512738F47BC356713394C270E0D2EDE7ED320F8
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     262691
IP address blocks:        179.108.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:12:73:8f:47:bc:35:67:13:39:4c:27:0e:0d:2e:de:7e:d3:20:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9c:30:a6:00:7c:3d:66:ca:1f:ae:2b:32:85:
                    a0:da:3f:f9:63:ec:6a:8e:b1:5c:9c:7c:41:d4:1f:
                    32:b3:09:3c:60:60:ff:bb:1b:b4:b9:47:8e:f1:47:
                    87:7b:07:10:50:ca:7e:74:64:e6:59:b6:a6:77:31:
                    c9:ed:15:49:a1:92:44:96:d3:64:0a:5d:bb:da:aa:
                    41:91:bd:6f:ce:7b:be:69:92:7c:91:4b:27:74:a4:
                    b8:02:50:d4:89:6e:82:26:7a:40:26:e1:84:79:b3:
                    6f:d1:40:c8:37:10:6d:ef:76:74:d5:a6:dc:b4:cc:
                    1b:e6:d3:01:ea:25:78:62:ed:8c:d7:76:20:c9:fa:
                    88:6e:9e:f2:9d:9d:36:db:ed:de:a3:09:c9:b1:a6:
                    1e:78:b8:5b:03:87:91:60:b8:33:51:48:2d:bd:6f:
                    f8:e1:07:1d:56:17:98:1c:a4:0f:33:eb:20:f1:a1:
                    ae:0d:52:51:06:b1:ea:c0:8d:5a:da:19:a9:3d:7b:
                    51:34:7a:d7:04:1a:56:e8:20:b1:26:42:aa:c5:f1:
                    eb:d6:e3:f9:59:37:2f:f8:85:49:d2:05:95:6b:ae:
                    e6:65:f9:a9:29:85:b2:1d:2a:6d:7c:16:55:e8:ba:
                    a6:4e:e7:e7:73:84:b0:88:64:bc:0c:0c:d4:2e:25:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F1:29:70:AC:79:45:A7:67:2F:B1:06:02:D2:0C:93:B7:14:1F:B7
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:e9:4d:f5:a4:10:29:11:75:83:4d:2a:80:fd:47:a3:da:
         07:56:d4:b2:21:a2:f7:f0:f8:be:9a:29:9f:d7:12:38:04:a7:
         70:b4:7f:c0:fc:4b:1a:6b:f3:80:88:44:f3:c6:74:d8:5b:99:
         a5:16:ec:9e:9b:df:13:a3:75:de:6a:96:7e:eb:51:e0:ed:f7:
         74:7f:b2:05:ce:44:21:ab:c3:5d:62:f4:ca:bf:73:42:77:9e:
         2e:94:3a:3c:c4:a1:f4:47:e1:d0:09:04:84:6a:68:64:8a:39:
         ec:ed:84:2f:32:33:b3:c8:d2:25:b5:6b:3c:38:20:77:fb:5b:
         c4:b8:99:26:77:37:f0:f0:5f:93:26:ce:c1:e8:14:92:9c:00:
         80:f6:38:a0:dd:9e:e0:f6:a6:48:80:c0:cc:cc:9a:77:15:79:
         79:55:a0:13:f1:c3:e8:b2:4d:79:1d:c7:7f:eb:62:75:ef:56:
         83:15:e1:23:d2:07:ee:0e:0b:99:bd:ab:a0:e3:4b:10:f7:b6:
         bb:1b:ea:a3:7c:0d:6b:66:d1:b2:9c:10:7a:4e:16:b5:89:12:
         00:5e:22:66:9b:96:6e:8f:14:98:b4:b7:b3:b1:45:4c:7d:ab:
         94:69:93:41:54:3b:8e:a9:86:d5:94:2d:b0:b3:9d:e8:7b:a7:
         19:61:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org