Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa
File:                     3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          mdXAndSND/D8PnfSLPDUdSLecpaSu6QVhxYdOFHi2gA=
Subject key identifier:   CB:1B:BF:ED:38:85:16:48:DC:D6:5A:AB:23:C8:FF:0B:32:20:31:B0
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       69EB592E525C143E9593E463300EED4EEE1A77F4
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        179.108.232.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:eb:59:2e:52:5c:14:3e:95:93:e4:63:30:0e:ed:4e:ee:1a:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:96:e6:0d:2e:62:07:43:9c:03:c6:8e:b2:
                    b9:6b:14:df:96:76:ea:de:99:26:46:ce:70:20:17:
                    62:83:a7:04:55:14:c9:60:05:e3:62:f5:b3:53:27:
                    f7:62:2a:dd:fb:c5:02:cb:08:e4:c7:c2:61:44:25:
                    7d:ee:7d:d1:c2:7e:28:c6:bc:45:67:e9:7c:e4:cf:
                    84:a5:9a:cb:63:81:8c:6d:c2:d5:a5:76:16:35:08:
                    b8:e4:ae:6e:b4:81:8f:7b:e4:4a:41:30:ed:39:c4:
                    cc:eb:a0:fe:d3:7b:d2:7b:e5:e0:ed:97:79:cb:04:
                    d3:c0:bf:d1:49:68:3f:15:ba:3d:8a:8d:7b:75:80:
                    9a:67:36:64:54:ac:64:89:02:4c:8e:ce:31:ad:19:
                    af:b0:4f:d8:f8:98:8e:b1:94:40:12:13:56:1c:de:
                    3e:5a:84:0a:50:7a:9d:34:10:31:20:76:e9:dd:3d:
                    49:88:12:17:54:d6:07:c7:c9:27:58:86:6c:d4:84:
                    a1:76:a8:3f:0e:94:52:c8:56:a7:6d:41:86:96:07:
                    83:41:b3:4e:a3:22:6b:9b:74:13:ab:41:32:68:ce:
                    89:a8:87:51:2c:f6:97:d2:d9:1c:fc:99:6a:1c:a1:
                    2d:6f:c3:21:f3:f6:22:93:4a:86:09:7b:02:4c:92:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:BF:ED:38:85:16:48:DC:D6:5A:AB:23:C8:FF:0B:32:20:31:B0
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233322e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:58:97:89:56:74:e4:70:dd:76:8a:0e:54:05:ff:17:ac:91:
         07:d5:7f:f8:6a:d4:8d:1b:bb:28:16:5b:da:52:a1:d4:4e:05:
         07:0f:e4:d6:d8:60:9f:39:2d:44:fc:c8:2d:c8:f6:e4:bb:40:
         28:da:73:a9:6c:15:5a:c8:1f:53:ba:7e:48:fc:d7:35:c0:d2:
         de:8a:84:d6:79:c0:8f:5a:5f:68:9a:9a:a0:49:b6:07:8f:8b:
         2e:78:20:a8:fc:74:80:90:35:a6:eb:d1:47:d2:fd:eb:c1:ed:
         13:1a:90:5c:5a:68:8f:15:d4:67:7d:b0:67:c6:26:73:ad:7c:
         8b:72:55:8e:93:15:40:d5:66:3a:0b:cb:dd:ce:56:98:63:e4:
         66:6c:89:4c:5e:cc:dd:2f:bf:24:2b:5c:a3:f1:3b:d6:8d:10:
         e9:58:26:f3:bc:93:c9:29:a9:1e:6e:f0:d4:6c:38:ad:81:f8:
         2e:02:3d:4c:96:33:2c:d7:63:d8:ef:9a:02:7e:73:f6:9d:35:
         7b:cc:09:47:17:ef:f0:f4:27:c8:34:30:dc:f0:40:f6:cb:0a:
         e4:a1:ac:f7:24:95:2e:6b:4f:4e:54:f7:69:81:77:4a:5b:49:
         1e:07:59:4e:7c:13:16:19:79:06:c0:10:96:49:9f:be:7f:89:
         81:62:8a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org