Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          vgjHJQyYfi+Jku6Nq4OAbF2C22+A+xyuOAc6N/Qvv8o=
Subject key identifier:   0D:C4:2A:72:E0:4A:5C:88:0A:20:C8:8F:03:44:6B:29:45:FA:77:F8
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       1047739A0AC2FE825ED14174F13A3DAB05D5E291
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        179.108.226.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:47:73:9a:0a:c2:fe:82:5e:d1:41:74:f1:3a:3d:ab:05:d5:e2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject: CN=3082010A0282010100EF33168DBF21839A26419C09738E661CE4EF87BA30C6A31AB1FA61D2FAC1D63564466BB84509BAAABF11A0C57BEBCA5C2023F9519A828F6940A45A3E78911689EEA7CA90C3797B3F49461534E0452520059C0D5FC54B7547BF23F21B8D0B754EC0790EAB8015DCDF67B84B1253C6AEE843D8765561698CC56693DC0F04DB8B3F39BEEA22305ED14AE04E3EBEC1F004ACD9C5FBC4765BD89D6065151D8A9923AFF00DAFC5990C11EB0EF8344B368038AA759E5C08B411304D2BA6EAC8F1674B6B34E3AD45841D583E7FC17C90E8D192F28B08723D2102D2C9698646FFFA8B6A5FD7DB271B23E8AFDE3CD99A7DE214303E01E21A33E4CB311DF21B48BDC0C7B7EF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:16:8d:bf:21:83:9a:26:41:9c:09:73:8e:
                    66:1c:e4:ef:87:ba:30:c6:a3:1a:b1:fa:61:d2:fa:
                    c1:d6:35:64:46:6b:b8:45:09:ba:aa:bf:11:a0:c5:
                    7b:eb:ca:5c:20:23:f9:51:9a:82:8f:69:40:a4:5a:
                    3e:78:91:16:89:ee:a7:ca:90:c3:79:7b:3f:49:46:
                    15:34:e0:45:25:20:05:9c:0d:5f:c5:4b:75:47:bf:
                    23:f2:1b:8d:0b:75:4e:c0:79:0e:ab:80:15:dc:df:
                    67:b8:4b:12:53:c6:ae:e8:43:d8:76:55:61:69:8c:
                    c5:66:93:dc:0f:04:db:8b:3f:39:be:ea:22:30:5e:
                    d1:4a:e0:4e:3e:be:c1:f0:04:ac:d9:c5:fb:c4:76:
                    5b:d8:9d:60:65:15:1d:8a:99:23:af:f0:0d:af:c5:
                    99:0c:11:eb:0e:f8:34:4b:36:80:38:aa:75:9e:5c:
                    08:b4:11:30:4d:2b:a6:ea:c8:f1:67:4b:6b:34:e3:
                    ad:45:84:1d:58:3e:7f:c1:7c:90:e8:d1:92:f2:8b:
                    08:72:3d:21:02:d2:c9:69:86:46:ff:fa:8b:6a:5f:
                    d7:db:27:1b:23:e8:af:de:3c:d9:9a:7d:e2:14:30:
                    3e:01:e2:1a:33:e4:cb:31:1d:f2:1b:48:bd:c0:c7:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C4:2A:72:E0:4A:5C:88:0A:20:C8:8F:03:44:6B:29:45:FA:77:F8
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:a5:c4:40:54:e9:c9:6c:81:2d:4b:8d:7f:d8:4d:60:e2:28:
         9d:ea:68:26:c6:f7:6d:96:26:0e:dc:8d:0a:af:5c:99:8b:74:
         73:61:77:aa:a6:e5:5c:4c:40:bc:43:0b:e3:1f:61:e3:00:42:
         d2:1f:a5:76:01:ad:d9:20:b6:58:ba:f0:0f:bf:b6:9b:78:40:
         5e:82:46:11:56:6a:39:35:3f:af:08:58:a1:ca:56:6d:ae:7a:
         06:7f:06:bf:3f:cc:1d:b3:65:b0:b3:0c:3f:fc:01:65:4e:55:
         e4:81:56:5d:64:f5:dd:f9:64:1a:ae:a3:5b:8a:75:75:92:69:
         2b:fd:1a:95:1a:df:77:f8:52:40:b6:9b:cb:11:78:59:1d:34:
         67:34:31:5f:d7:a4:44:7e:a0:0f:c5:9f:10:70:8d:28:10:1d:
         d0:83:95:65:d8:ea:30:ec:a1:6b:fd:6a:1d:99:56:c9:d4:4c:
         d8:31:55:63:92:b9:a5:b7:a4:33:e2:0a:15:e0:4f:97:bb:12:
         3e:f9:e6:8f:09:40:f9:94:da:46:62:84:ff:f1:49:6e:e9:97:
         8d:21:39:f1:70:39:de:b3:95:be:04:95:11:7c:18:51:8b:9e:
         03:16:9c:f0:da:4d:4f:0d:fa:d3:b5:34:92:74:1b:30:aa:86:
         eb:46:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org