Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          c8YEo8+ZKNjld1pc6oQxpmBE9mxCyHzlNNTFnAvL7mY=
Subject key identifier:   98:7C:D7:B2:30:E2:00:18:9B:50:40:8F:DA:7E:5B:31:9D:13:A9:11
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       373E14A49BBE2BA33E6B41D3A8CFC335B304732C
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     262691
IP address blocks:        179.108.228.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3e:14:a4:9b:be:2b:a3:3e:6b:41:d3:a8:cf:c3:35:b3:04:73:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject: CN=3082010A0282010100BAE5627ADD552B981AE097BA223837BE15F69CD751E01663A6B2E380D5B0A840A6427960339B4F50C11F9FBFF0F6AE2EE343FFD41672297D73407CE145DFDCAB1DECCC0FD1E7A5B640E55704F882137D1F2EA7EA6E1CF7B8E7F3329628CE161B4405D7A86634E1A8A384017F4163A8302FC13FEA4755C423EADA189FDA75E40183DC3266DAB9C06FF459F26E478774C87C5A11E5652917A9DC732CE425C70CAF83230FE1BE0C85560C10BAFC627B87099C34A364142DCF30DAA25D123E03BA42275FB419CB0634FBD6BB22761C3B93B76C65170AF5E2D437A9FB458D3DDA217F828867EAD4389987B3F43977DA2ADC567AC3323262B34E71F95B57144C60B0690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:62:7a:dd:55:2b:98:1a:e0:97:ba:22:38:
                    37:be:15:f6:9c:d7:51:e0:16:63:a6:b2:e3:80:d5:
                    b0:a8:40:a6:42:79:60:33:9b:4f:50:c1:1f:9f:bf:
                    f0:f6:ae:2e:e3:43:ff:d4:16:72:29:7d:73:40:7c:
                    e1:45:df:dc:ab:1d:ec:cc:0f:d1:e7:a5:b6:40:e5:
                    57:04:f8:82:13:7d:1f:2e:a7:ea:6e:1c:f7:b8:e7:
                    f3:32:96:28:ce:16:1b:44:05:d7:a8:66:34:e1:a8:
                    a3:84:01:7f:41:63:a8:30:2f:c1:3f:ea:47:55:c4:
                    23:ea:da:18:9f:da:75:e4:01:83:dc:32:66:da:b9:
                    c0:6f:f4:59:f2:6e:47:87:74:c8:7c:5a:11:e5:65:
                    29:17:a9:dc:73:2c:e4:25:c7:0c:af:83:23:0f:e1:
                    be:0c:85:56:0c:10:ba:fc:62:7b:87:09:9c:34:a3:
                    64:14:2d:cf:30:da:a2:5d:12:3e:03:ba:42:27:5f:
                    b4:19:cb:06:34:fb:d6:bb:22:76:1c:3b:93:b7:6c:
                    65:17:0a:f5:e2:d4:37:a9:fb:45:8d:3d:da:21:7f:
                    82:88:67:ea:d4:38:99:87:b3:f4:39:77:da:2a:dc:
                    56:7a:c3:32:32:62:b3:4e:71:f9:5b:57:14:4c:60:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7C:D7:B2:30:E2:00:18:9B:50:40:8F:DA:7E:5B:31:9D:13:A9:11
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232382e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:18:c4:3d:3a:c8:05:21:b8:ce:17:4d:35:73:3f:f8:2e:59:
         57:51:69:a3:9b:af:28:46:76:e9:e5:ce:ef:9e:a5:07:02:ba:
         dc:a2:28:0b:9b:55:1b:05:66:d1:1d:7e:83:8d:c7:a8:f8:1d:
         cd:5c:eb:9b:40:2b:73:16:a0:c8:10:fc:0e:51:f0:68:f7:c7:
         ba:56:9f:20:d6:14:d0:3a:08:a5:d3:aa:bb:85:ae:b6:38:6b:
         a9:a6:73:1f:cf:ed:b8:97:fc:b3:d6:21:6f:d2:a3:be:e5:5f:
         b2:bb:64:05:32:21:d1:32:94:75:a9:70:61:9a:69:d9:82:e7:
         5e:e5:9c:c6:d9:7f:09:24:ca:8d:ba:b1:52:27:db:e0:d7:e6:
         15:d4:cf:2d:8a:c2:7d:d9:ed:45:b8:df:fb:c1:e8:f2:2a:04:
         a3:c1:fb:33:21:95:a7:9e:75:39:24:7d:2c:7c:52:72:af:fb:
         97:e7:82:ef:92:75:60:20:7a:1f:25:42:68:86:53:c3:c2:d3:
         e8:d2:43:af:4c:7c:4f:c0:37:1c:55:8c:78:51:db:5e:94:c4:
         51:d2:47:bf:29:10:34:a6:a5:c2:61:4d:15:94:4e:db:de:3a:
         2a:9f:a0:60:cf:26:ec:03:c2:a7:5c:b2:ca:1a:40:28:29:c3:
         33:99:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org