Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          neCeRv2fSIeKSX9F/3cQwYf7J0KTjbph9Xgiwu03ZZo=
Subject key identifier:   ED:89:2E:76:9F:D3:7E:9F:E2:3E:00:A6:ED:AA:8C:F2:FF:96:EB:75
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       3A47A5DA07F2D2E4C9A0BA325C0C232F71028417
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     262691
IP address blocks:        179.108.232.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:47:a5:da:07:f2:d2:e4:c9:a0:ba:32:5c:0c:23:2f:71:02:84:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:42:ea:9e:8c:e8:3c:62:b2:07:1c:da:80:
                    48:f6:58:73:b9:0b:3f:0e:97:6f:9a:91:eb:6a:52:
                    0a:a2:9f:98:eb:6c:ec:3a:cf:d9:40:cf:78:31:c3:
                    4e:b6:98:d5:c2:3c:24:fd:bd:14:51:9a:db:cd:34:
                    6e:6a:96:0d:eb:73:55:0f:ec:6c:cd:86:72:47:f9:
                    5e:4b:ce:e7:fd:a8:87:9a:d8:1e:f4:29:76:f4:3e:
                    c0:4d:35:44:c1:b8:c8:a9:97:e4:11:71:52:f7:8e:
                    43:36:38:5b:a7:33:bf:91:30:f3:8e:fa:33:7f:0e:
                    48:46:ef:ac:a9:35:65:90:02:a1:fc:c4:fb:f4:c5:
                    b7:c4:8b:85:6c:34:4c:23:2e:7a:09:a7:71:7b:b8:
                    83:05:72:c3:14:3c:e0:5e:88:42:b5:02:b2:72:07:
                    6a:d0:d8:92:6a:69:f9:6d:c6:0f:68:f8:32:26:09:
                    e4:7a:1d:54:4b:be:8f:5f:30:2f:9f:eb:15:40:84:
                    78:71:ca:3b:25:26:b8:54:8a:90:8e:ca:d5:2a:79:
                    ce:19:42:68:ee:ff:fc:3d:09:e0:95:19:1d:13:8e:
                    9a:95:04:d8:8d:44:26:4d:03:a1:28:b5:2e:36:eb:
                    84:63:29:aa:8e:82:43:6c:83:45:5a:0c:c3:5d:c4:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:89:2E:76:9F:D3:7E:9F:E2:3E:00:A6:ED:AA:8C:F2:FF:96:EB:75
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:8e:b3:48:29:81:92:d4:d3:39:3e:0b:9c:49:a6:c7:95:
         3c:99:89:db:0f:2c:b3:d5:fa:fa:27:b0:f7:0b:ad:3e:fb:52:
         16:6c:87:c3:af:9d:45:dc:03:42:64:48:92:3d:89:50:29:6d:
         a5:5b:cb:a8:87:d4:32:09:c4:8d:13:5c:13:1c:f8:1f:3b:81:
         3b:88:16:13:23:23:87:d1:c0:7e:22:77:dd:e6:7b:8e:44:fb:
         89:6c:a1:f3:03:60:9b:7d:7f:44:ba:86:60:5f:d7:e9:82:af:
         d9:78:cd:24:ce:b8:01:41:87:44:4d:9d:0d:74:6d:e0:55:88:
         4c:7e:50:62:1f:03:39:da:ea:28:d0:ab:c3:f9:f2:94:ab:3d:
         c2:25:74:17:0e:19:7d:8a:03:1a:19:1d:91:3f:9b:4b:14:86:
         63:dd:dd:64:c9:4d:41:14:8f:68:bd:8d:08:8f:50:d1:38:cb:
         5e:a2:76:98:d3:3c:85:b7:63:4a:5b:f8:1a:ff:11:ab:09:c8:
         21:86:af:f7:55:d9:b7:7e:54:06:73:70:88:c6:89:e1:3d:fa:
         eb:af:ca:c3:a8:a9:94:91:2e:c2:ea:ba:9d:ca:e1:c2:08:fc:
         e2:53:13:52:fb:64:48:e8:17:ce:a2:3d:af:3d:3e:98:74:b3:
         de:86:7c:f9
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUOkel2gfy0uTJoLoyXAwjL3EChBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTVaFw0yNTA0MDIxODMwMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0YxRjQyRUE5RThDRTgzQzYy
QjIwNzFDREE4MDQ4RjY1ODczQjkwQjNGMEU5NzZGOUE5MUVCNkE1MjBBQTI5Rjk4
RUI2Q0VDM0FDRkQ5NDBDRjc4MzFDMzRFQjY5OEQ1QzIzQzI0RkRCRDE0NTE5QURC
Q0QzNDZFNkE5NjBERUI3MzU1MEZFQzZDQ0Q4NjcyNDdGOTVFNEJDRUU3RkRBODg3
OUFEODFFRjQyOTc2RjQzRUMwNEQzNTQ0QzFCOEM4QTk5N0U0MTE3MTUyRjc4RTQz
MzYzODVCQTczM0JGOTEzMEYzOEVGQTMzN0YwRTQ4NDZFRkFDQTkzNTY1OTAwMkEx
RkNDNEZCRjRDNUI3QzQ4Qjg1NkMzNDRDMjMyRTdBMDlBNzcxN0JCODgzMDU3MkMz
MTQzQ0UwNUU4ODQyQjUwMkIyNzIwNzZBRDBEODkyNkE2OUY5NkRDNjBGNjhGODMy
MjYwOUU0N0ExRDU0NEJCRThGNUYzMDJGOUZFQjE1NDA4NDc4NzFDQTNCMjUyNkI4
NTQ4QTkwOEVDQUQ1MkE3OUNFMTk0MjY4RUVGRkZDM0QwOUUwOTUxOTFEMTM4RTlB
OTUwNEQ4OEQ0NDI2NEQwM0ExMjhCNTJFMzZFQjg0NjMyOUFBOEU4MjQzNkM4MzQ1
NUEwQ0MzNURDNDhENzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzx9C6p6M6Dxisgcc2oBI9lhzuQs/DpdvmpHralIKop+Y62zsOs/Z
QM94McNOtpjVwjwk/b0UUZrbzTRuapYN63NVD+xszYZyR/leS87n/aiHmtge9Cl2
9D7ATTVEwbjIqZfkEXFS945DNjhbpzO/kTDzjvozfw5IRu+sqTVlkAKh/MT79MW3
xIuFbDRMIy56Cadxe7iDBXLDFDzgXohCtQKycgdq0NiSamn5bcYPaPgyJgnkeh1U
S76PXzAvn+sVQIR4cco7JSa4VIqQjsrVKnnOGUJo7v/8PQnglRkdE46alQTYjUQm
TQOhKLUuNuuEYymqjoJDbINFWgzDXcSNcwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FO2JLnaf036f4j4Apu2qjPL/lut1MB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMz
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbOgwDQYJKoZIhvcNAQELBQADggEBAFxTjrNIKYGS1NM5PgucSabHlTyZidsP
LLPV+vonsPcLrT77UhZsh8OvnUXcA0JkSJI9iVApbaVby6iH1DIJxI0TXBMc+B87
gTuIFhMjI4fRwH4id93me45E+4lsofMDYJt9f0S6hmBf1+mCr9l4zSTOuAFBh0RN
nQ10beBViEx+UGIfAzna6ijQq8P58pSrPcIldBcOGX2KAxoZHZE/m0sUhmPd3WTJ
TUEUj2i9jQiPUNE4y16idpjTPIW3Y0pb+Br/EasJyCGGr/dV2bd+VAZzcIjGieE9
+uuvysOoqZSRLsLqup3K4cII/OJTE1L7ZEjoF86iPa89Pph0s96GfPk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org