Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          23cwVDNLdzdlH3RkRTsP4WWFaFJGwayxjqosH7qaYRo=
Subject key identifier:   2E:AC:D5:49:6F:D6:0D:5B:6A:04:4B:A9:0A:E7:D2:97:72:4A:FE:EC
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       31F08C202E81DE64D2EB0EB695C8CC53C1DD24C4
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        179.108.230.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f0:8c:20:2e:81:de:64:d2:eb:0e:b6:95:c8:cc:53:c1:dd:24:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:79:96:6e:97:74:4e:50:71:dd:cd:c4:49:47:
                    af:82:29:13:c6:b6:a8:11:a9:4b:63:d0:8a:31:7e:
                    8e:2c:a5:5f:75:66:ae:eb:2a:dd:6c:bf:09:81:be:
                    54:46:a3:82:5b:07:b5:6b:23:71:cb:f5:b4:6d:af:
                    b1:9a:95:7d:fa:46:04:12:8d:cb:c2:26:ee:4c:24:
                    f2:4a:d6:83:61:bd:b4:bc:b1:e4:16:a9:a5:46:36:
                    f3:44:c4:59:a3:21:ea:51:33:da:f7:99:b2:d1:7a:
                    01:e5:04:14:49:45:af:ba:dd:1f:c3:89:39:af:fd:
                    ad:4c:af:e8:c8:ef:da:3c:b6:6a:eb:ed:86:70:75:
                    78:d0:1f:16:71:4e:d3:33:96:f7:9a:8a:6a:6e:0d:
                    32:1d:99:09:5b:e8:97:2a:03:44:81:df:44:31:f6:
                    5c:fc:86:5c:5b:ac:83:c9:0d:f0:8d:cf:e6:d4:3e:
                    13:b8:e0:33:b9:c3:d6:63:bf:6f:05:82:89:72:d5:
                    68:b1:da:a8:d9:49:12:52:0d:24:9b:b3:ff:f4:1f:
                    a2:38:0c:da:b1:5d:f6:c0:d7:b0:14:5d:19:b7:e2:
                    ee:8e:e6:2a:9f:76:55:9c:e4:f8:57:22:34:cd:5c:
                    8d:66:ef:da:a3:d0:ff:0c:b6:e6:17:ce:89:4a:1e:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:D5:49:6F:D6:0D:5B:6A:04:4B:A9:0A:E7:D2:97:72:4A:FE:EC
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:85:9c:d5:e9:a8:a7:f5:bc:a8:59:17:65:b1:45:10:21:
         ba:af:63:68:a1:86:20:9b:e0:59:5b:14:e7:8e:b0:cf:a7:34:
         4d:8b:ea:47:f9:ab:8c:8e:11:e0:02:16:a8:93:68:3d:5f:02:
         92:b1:30:e5:28:15:b4:42:0e:62:24:e9:fe:bc:bf:53:08:f7:
         a9:69:19:56:ce:2b:97:b5:4e:61:94:56:87:0a:6a:8c:d8:6d:
         66:97:10:f9:58:d5:76:1e:ea:b0:2b:9f:c7:46:4f:1e:dd:b8:
         4b:7e:70:62:84:ed:95:5a:3e:e7:3c:fe:9e:5e:6c:c5:85:a8:
         48:65:2f:66:5b:ba:14:79:8b:b5:b7:27:f7:0d:76:60:f5:7d:
         b1:1a:a2:88:69:25:9b:b2:23:3c:b7:09:aa:bf:0f:bf:41:3d:
         62:33:9b:dc:0b:94:82:12:09:16:88:f8:16:9c:45:86:25:f1:
         84:d4:64:99:f0:20:f0:80:c8:33:11:ae:2f:5f:b9:34:50:3e:
         29:1b:a9:12:36:f4:7b:90:14:5a:de:a4:ff:43:b5:2b:da:ed:
         52:10:67:7d:57:98:6b:a6:be:2d:fb:49:eb:25:ea:4b:4c:7b:
         0a:21:24:53:61:ab:48:6f:c0:54:43:24:80:18:cc:88:5f:a3:
         40:0c:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org