Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          MF2P50XxB1Ck3qCIj0SMvelpPIE9r4/69r0ufmycNpA=
Subject key identifier:   0F:17:F3:20:2C:92:69:B1:DE:94:F7:08:0A:11:2A:0D:B5:5C:E6:7E
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       4F5C7740ECA4B1136520FF9E9F10ADFD145511F1
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        179.108.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5c:77:40:ec:a4:b1:13:65:20:ff:9e:9f:10:ad:fd:14:55:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:9c:73:99:56:77:1d:58:25:2e:5a:b2:0d:
                    10:b1:bc:9b:cf:94:c6:f9:e9:74:cb:f9:a6:34:af:
                    43:99:c3:12:38:87:33:7d:cb:c8:53:30:52:15:8f:
                    d1:a6:0c:aa:e8:df:27:55:cf:fe:b6:74:d1:85:3e:
                    bc:3a:bc:9d:76:32:9f:6a:6a:c3:3f:10:61:7a:8e:
                    2d:b6:a5:b1:33:24:d2:d2:d4:72:75:b7:73:ef:73:
                    53:ba:63:28:d0:03:90:23:c8:ee:fd:ad:f2:fc:7e:
                    ee:97:ce:08:ea:09:24:08:89:b7:45:56:2c:e3:96:
                    f6:ca:6e:c8:56:07:6b:20:3b:51:38:59:f9:5e:d0:
                    c5:85:4a:89:cd:c6:2f:2d:7a:1d:a9:b3:56:99:16:
                    6a:14:dd:93:95:fb:30:62:95:d6:e9:aa:5f:e5:6b:
                    60:7f:c7:7f:75:a2:e3:6e:e9:b5:b5:8d:ac:03:3a:
                    31:46:0a:4f:0f:b3:37:36:ce:2e:4a:23:c1:7d:b3:
                    9a:a0:10:fc:e0:66:65:f5:a4:c4:37:7f:b9:4a:fb:
                    7c:1e:1f:d0:ec:2e:24:53:cc:de:36:ec:70:df:35:
                    39:d7:11:fe:69:2c:b4:ed:3e:6b:bc:ea:e0:aa:2e:
                    d7:a6:21:62:81:60:21:9e:9e:c2:ea:e2:57:87:fb:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:17:F3:20:2C:92:69:B1:DE:94:F7:08:0A:11:2A:0D:B5:5C:E6:7E
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3232382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:f8:6f:ac:c0:e1:5b:73:4d:4b:60:e8:54:29:85:85:2e:8d:
         c5:7f:5e:f0:c8:bf:d4:8c:4a:59:d6:3b:3c:25:e7:37:ec:32:
         98:1f:e7:2a:de:56:65:d6:12:3a:2f:8f:83:c0:2e:29:d9:19:
         6d:2c:31:30:df:82:a1:ed:2c:85:41:63:d6:1e:fb:84:c9:b0:
         77:07:e6:9d:f5:3d:f7:56:1a:0e:b2:a3:e1:43:63:de:e2:e6:
         0e:4b:1b:ad:43:99:a9:f6:8f:2b:ea:8e:f9:cd:42:fa:b9:b1:
         d0:3d:77:a4:a0:62:ca:54:f3:f4:4c:32:2d:e3:d2:77:ee:f6:
         78:14:43:63:7a:11:81:91:83:93:7f:dd:32:d9:13:3c:0f:49:
         1d:36:cd:f4:35:ad:78:d4:b8:98:b6:e4:6b:91:69:23:0a:61:
         4c:09:dd:26:e1:00:91:10:39:8e:08:a8:a7:b2:b1:ba:98:99:
         b2:57:4f:1f:89:b8:d3:d0:38:f6:8d:47:1d:a4:bc:dc:4e:23:
         c0:a9:81:0e:9a:e6:4e:6e:56:d2:12:97:f4:7d:a1:c7:36:b8:
         a3:8f:bd:30:07:db:9e:2e:1f:6f:dc:9f:d0:34:cf:a0:fa:96:
         a6:86:42:52:c8:b7:79:a9:8a:50:eb:78:6a:0f:33:1b:5c:a7:
         33:e9:54:b0
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUT1x3QOyksRNlIP+enxCt/RRVEfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MThaFw0yNTA0MDIxODMwMThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJDRTlDNzM5OTU2NzcxRDU4
MjUyRTVBQjIwRDEwQjFCQzlCQ0Y5NEM2RjlFOTc0Q0JGOUE2MzRBRjQzOTlDMzEy
Mzg4NzMzN0RDQkM4NTMzMDUyMTU4RkQxQTYwQ0FBRThERjI3NTVDRkZFQjY3NEQx
ODUzRUJDM0FCQzlENzYzMjlGNkE2QUMzM0YxMDYxN0E4RTJEQjZBNUIxMzMyNEQy
RDJENDcyNzVCNzczRUY3MzUzQkE2MzI4RDAwMzkwMjNDOEVFRkRBREYyRkM3RUVF
OTdDRTA4RUEwOTI0MDg4OUI3NDU1NjJDRTM5NkY2Q0E2RUM4NTYwNzZCMjAzQjUx
Mzg1OUY5NUVEMEM1ODU0QTg5Q0RDNjJGMkQ3QTFEQTlCMzU2OTkxNjZBMTRERDkz
OTVGQjMwNjI5NUQ2RTlBQTVGRTU2QjYwN0ZDNzdGNzVBMkUzNkVFOUI1QjU4REFD
MDMzQTMxNDYwQTRGMEZCMzM3MzZDRTJFNEEyM0MxN0RCMzlBQTAxMEZDRTA2NjY1
RjVBNEM0Mzc3RkI5NEFGQjdDMUUxRkQwRUMyRTI0NTNDQ0RFMzZFQzcwREYzNTM5
RDcxMUZFNjkyQ0I0RUQzRTZCQkNFQUUwQUEyRUQ3QTYyMTYyODE2MDIxOUU5RUMy
RUFFMjU3ODdGQkI1Q0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAos6cc5lWdx1YJS5asg0Qsbybz5TG+el0y/mmNK9DmcMSOIczfcvI
UzBSFY/Rpgyq6N8nVc/+tnTRhT68OryddjKfamrDPxBheo4ttqWxMyTS0tRydbdz
73NTumMo0AOQI8ju/a3y/H7ul84I6gkkCIm3RVYs45b2ym7IVgdrIDtROFn5XtDF
hUqJzcYvLXodqbNWmRZqFN2TlfswYpXW6apf5Wtgf8d/daLjbum1tY2sAzoxRgpP
D7M3Ns4uSiPBfbOaoBD84GZl9aTEN3+5Svt8Hh/Q7C4kU8zeNuxw3zU51xH+aSy0
7T5rvOrgqi7XpiFigWAhnp7C6uJXh/u1zQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FA8X8yAskmmx3pT3CAoRKg21XOZ+MB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMy
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbOQwDQYJKoZIhvcNAQELBQADggEBAMP4b6zA4VtzTUtg6FQphYUujcV/XvDI
v9SMSlnWOzwl5zfsMpgf5yreVmXWEjovj4PALinZGW0sMTDfgqHtLIVBY9Ye+4TJ
sHcH5p31PfdWGg6yo+FDY97i5g5LG61Dman2jyvqjvnNQvq5sdA9d6SgYspU8/RM
Mi3j0nfu9ngUQ2N6EYGRg5N/3TLZEzwPSR02zfQ1rXjUuJi25GuRaSMKYUwJ3Sbh
AJEQOY4IqKeysbqYmbJXTx+JuNPQOPaNRx2kvNxOI8CpgQ6a5k5uVtISl/R9occ2
uKOPvTAH254uH2/cn9A0z6D6lqaGQlLIt3mpilDreGoPMxtcpzPpVLA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org