Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          EyUDBMIfnrKckRq6PyMi0OR138VKPljc4vjgJil1Hk4=
Subject key identifier:   47:AD:55:2E:ED:0C:2B:56:18:C4:8E:3F:1E:0B:7C:2D:5C:11:A6:A1
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       3EB54DEFA94F7A506246BC543D168C32D7D6A494
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     262691
IP address blocks:        179.108.224.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b5:4d:ef:a9:4f:7a:50:62:46:bc:54:3d:16:8c:32:d7:d6:a4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:8f:fd:b4:dd:c1:65:e9:11:5a:51:7e:c4:
                    94:c8:a9:0a:f7:45:83:5a:7d:19:eb:0b:dd:4e:3d:
                    50:5d:e5:e9:a5:8e:2f:6c:88:47:c8:19:5e:71:12:
                    02:8c:5b:f2:ec:f0:15:0e:ab:67:fe:2b:26:f1:31:
                    95:28:a5:82:f6:cc:5a:4c:f7:69:fc:9c:64:cf:ef:
                    70:9c:77:23:04:71:a8:78:ab:36:81:a8:4d:1c:1d:
                    1a:81:68:8f:9c:ff:20:41:98:ec:9d:0f:31:4a:9d:
                    1f:2b:be:e5:4f:16:1c:db:54:dc:06:54:04:35:a9:
                    f4:25:cd:24:a6:36:2e:9b:fc:12:d3:b3:27:f7:31:
                    5f:43:2b:4e:2b:91:15:7e:4f:81:85:dd:24:37:87:
                    36:c8:de:bc:87:8c:a6:aa:56:12:30:78:bd:ae:4f:
                    70:2f:6c:13:04:b3:18:31:96:22:ec:5c:1e:63:b5:
                    94:92:34:82:f6:eb:b3:aa:1c:4a:62:25:5b:e6:66:
                    aa:a7:c8:27:5c:12:10:ba:77:0e:e4:70:21:cf:93:
                    14:fa:c7:d6:89:0b:63:f9:c1:8b:f0:88:96:d0:cb:
                    26:dc:46:da:db:49:e4:50:4a:50:4a:68:b0:84:e6:
                    65:45:fb:b1:1a:3f:5d:3b:8a:87:1c:af:3c:22:6d:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:55:2E:ED:0C:2B:56:18:C4:8E:3F:1E:0B:7C:2D:5C:11:A6:A1
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:3b:19:16:8c:f2:e4:e4:d2:43:f2:7f:b5:b0:d8:83:34:73:
         6a:f9:de:3f:7c:69:67:93:a4:7a:51:97:5e:57:d6:a3:76:00:
         27:73:6e:00:91:ca:eb:12:d3:89:d9:0e:a7:e2:db:c0:48:6a:
         54:e1:d1:45:c0:ac:b3:2d:cd:8c:4f:ae:a6:27:7a:0a:cb:2a:
         0b:bf:e3:36:9d:38:c5:2e:3a:ed:d0:27:9b:16:4b:da:ff:f7:
         58:9e:af:8e:30:42:4c:b9:d9:b1:a1:6d:bb:d4:a6:6f:c1:b3:
         2d:ca:cc:a8:5f:bb:b8:97:04:67:7d:fe:19:cb:12:77:00:62:
         8d:99:7a:67:0f:8d:fa:f7:89:10:3c:5e:38:95:ba:93:4a:c3:
         6f:20:d9:ff:06:7c:8d:56:dc:7e:03:53:fe:f7:48:db:6a:5f:
         c2:c1:a1:f0:35:01:64:c1:de:81:26:1b:6c:79:fb:12:72:a4:
         b1:da:e5:14:5a:2c:ad:00:e3:e7:8c:d7:3c:00:98:2c:e5:4b:
         a6:20:3a:1a:e6:d7:a7:e1:2c:0c:91:0e:27:8d:b0:6d:b9:ff:
         f9:1b:27:89:9b:35:28:70:0b:18:8a:ec:90:48:62:38:46:f9:
         9b:dd:13:a7:5b:35:41:8f:a6:db:22:d5:8d:eb:b4:38:c5:8e:
         93:4d:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org