Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          pBqnowkxon0PNnVmlCkhWeu4puDEeqFWa78TzXYcG04=
Subject key identifier:   82:D2:34:23:1F:FD:47:8E:A3:91:C7:83:7B:1E:22:94:8F:F4:85:1E
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       54FF7DEDC2C56F999FA4B71C13B90121F58A9B9A
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        179.108.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ff:7d:ed:c2:c5:6f:99:9f:a4:b7:1c:13:b9:01:21:f5:8a:9b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject: CN=3082010A0282010100A528141A353F663F0FD261561E307F94B23C5145BB3CA0A2488E85BB604779B9C45D94F07970D5296F6C76213DB31D030010C8EEF554DB18381C2D2D69A8AC1F03034AE609D779563F361D634EF750C21CB336ED9125BA694AE60BA213A03C7ED7D7C2EA882C121A6FCEAB427A3EB419B833305048E505D9A0C8FF4F32C5EE2CB132B3EB954EC7807903D7BA5267983DE033EED7F03A5560FA9CEB778DF15B68020434CC1ABB8396EA709E7FE37A0228D2D6A73213534371C6978EB873F184E9700D1EC2C5D8D899DBC9678CC7F5CE77E3586F6B533A77E3EB0BC900D5A4BBE3BE6F8A100A24CBEA9F3F71F85E19A0336DBBE8ECFD65514A37C86B52838A081F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:14:1a:35:3f:66:3f:0f:d2:61:56:1e:30:
                    7f:94:b2:3c:51:45:bb:3c:a0:a2:48:8e:85:bb:60:
                    47:79:b9:c4:5d:94:f0:79:70:d5:29:6f:6c:76:21:
                    3d:b3:1d:03:00:10:c8:ee:f5:54:db:18:38:1c:2d:
                    2d:69:a8:ac:1f:03:03:4a:e6:09:d7:79:56:3f:36:
                    1d:63:4e:f7:50:c2:1c:b3:36:ed:91:25:ba:69:4a:
                    e6:0b:a2:13:a0:3c:7e:d7:d7:c2:ea:88:2c:12:1a:
                    6f:ce:ab:42:7a:3e:b4:19:b8:33:30:50:48:e5:05:
                    d9:a0:c8:ff:4f:32:c5:ee:2c:b1:32:b3:eb:95:4e:
                    c7:80:79:03:d7:ba:52:67:98:3d:e0:33:ee:d7:f0:
                    3a:55:60:fa:9c:eb:77:8d:f1:5b:68:02:04:34:cc:
                    1a:bb:83:96:ea:70:9e:7f:e3:7a:02:28:d2:d6:a7:
                    32:13:53:43:71:c6:97:8e:b8:73:f1:84:e9:70:0d:
                    1e:c2:c5:d8:d8:99:db:c9:67:8c:c7:f5:ce:77:e3:
                    58:6f:6b:53:3a:77:e3:eb:0b:c9:00:d5:a4:bb:e3:
                    be:6f:8a:10:0a:24:cb:ea:9f:3f:71:f8:5e:19:a0:
                    33:6d:bb:e8:ec:fd:65:51:4a:37:c8:6b:52:83:8a:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:34:23:1F:FD:47:8E:A3:91:C7:83:7B:1E:22:94:8F:F4:85:1E
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:89:ce:d5:cd:a9:13:43:46:d8:24:ef:b2:54:aa:15:c9:
         e4:f0:11:d8:2d:07:f8:94:86:94:51:68:c1:c1:45:da:b1:18:
         87:d3:6d:d1:cc:c9:b4:10:88:a2:a3:c0:ee:63:ec:7a:81:10:
         08:90:9c:4e:a1:b4:a7:ce:a0:0e:4c:87:62:0a:74:51:00:2b:
         06:05:1c:05:a5:de:95:b8:ae:48:6b:59:60:bb:55:2c:58:3d:
         5a:e4:61:80:41:cf:5c:2a:ea:e7:81:88:9e:d3:94:28:60:b8:
         4b:85:9c:f2:ca:c0:5f:45:1b:ff:ee:1b:3b:e1:f9:8c:52:2f:
         1a:ba:2d:b3:cc:ae:8c:23:b4:98:7b:78:3c:6b:6f:d5:66:37:
         34:d8:d5:6c:6e:99:d9:85:7c:9d:60:21:24:71:33:5e:c5:c7:
         89:4b:a0:25:fe:ef:b4:ff:f8:8a:dd:df:64:18:e8:2a:7a:7e:
         59:36:a9:8f:2c:0d:e9:cd:ae:40:3e:3c:2a:c3:14:0d:9e:40:
         72:b6:78:b8:0f:4c:7d:06:b8:19:36:5c:8b:5b:f9:d9:cf:3a:
         9a:1f:ca:83:4d:d8:a0:65:73:7a:46:d6:16:45:f1:d5:00:29:
         1e:32:1d:98:7d:1e:20:7c:8a:33:0a:ac:04:9f:68:fd:8f:56:
         b9:43:95:cc
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUVP997cLFb5mfpLccE7kBIfWKm5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTRaFw0yNTA0MDIxODMwMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTUyODE0MUEzNTNGNjYzRjBG
RDI2MTU2MUUzMDdGOTRCMjNDNTE0NUJCM0NBMEEyNDg4RTg1QkI2MDQ3NzlCOUM0
NUQ5NEYwNzk3MEQ1Mjk2RjZDNzYyMTNEQjMxRDAzMDAxMEM4RUVGNTU0REIxODM4
MUMyRDJENjlBOEFDMUYwMzAzNEFFNjA5RDc3OTU2M0YzNjFENjM0RUY3NTBDMjFD
QjMzNkVEOTEyNUJBNjk0QUU2MEJBMjEzQTAzQzdFRDdEN0MyRUE4ODJDMTIxQTZG
Q0VBQjQyN0EzRUI0MTlCODMzMzA1MDQ4RTUwNUQ5QTBDOEZGNEYzMkM1RUUyQ0Ix
MzJCM0VCOTU0RUM3ODA3OTAzRDdCQTUyNjc5ODNERTAzM0VFRDdGMDNBNTU2MEZB
OUNFQjc3OERGMTVCNjgwMjA0MzRDQzFBQkI4Mzk2RUE3MDlFN0ZFMzdBMDIyOEQy
RDZBNzMyMTM1MzQzNzFDNjk3OEVCODczRjE4NEU5NzAwRDFFQzJDNUQ4RDg5OURC
Qzk2NzhDQzdGNUNFNzdFMzU4NkY2QjUzM0E3N0UzRUIwQkM5MDBENUE0QkJFM0JF
NkY4QTEwMEEyNENCRUE5RjNGNzFGODVFMTlBMDMzNkRCQkU4RUNGRDY1NTE0QTM3
Qzg2QjUyODM4QTA4MUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApSgUGjU/Zj8P0mFWHjB/lLI8UUW7PKCiSI6Fu2BHebnEXZTweXDV
KW9sdiE9sx0DABDI7vVU2xg4HC0taaisHwMDSuYJ13lWPzYdY073UMIcszbtkSW6
aUrmC6IToDx+19fC6ogsEhpvzqtCej60GbgzMFBI5QXZoMj/TzLF7iyxMrPrlU7H
gHkD17pSZ5g94DPu1/A6VWD6nOt3jfFbaAIENMwau4OW6nCef+N6AijS1qcyE1ND
ccaXjrhz8YTpcA0ewsXY2JnbyWeMx/XOd+NYb2tTOnfj6wvJANWku+O+b4oQCiTL
6p8/cfheGaAzbbvo7P1lUUo3yGtSg4oIHwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FILSNCMf/UeOo5HHg3seIpSP9IUeMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMz
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGzbOowDQYJKoZIhvcNAQELBQADggEBABjpic7VzakTQ0bYJO+yVKoVyeTwEdgt
B/iUhpRRaMHBRdqxGIfTbdHMybQQiKKjwO5j7HqBEAiQnE6htKfOoA5Mh2IKdFEA
KwYFHAWl3pW4rkhrWWC7VSxYPVrkYYBBz1wq6ueBiJ7TlChguEuFnPLKwF9FG//u
Gzvh+YxSLxq6LbPMrowjtJh7eDxrb9VmNzTY1WxumdmFfJ1gISRxM17Fx4lLoCX+
77T/+Ird32QY6Cp6flk2qY8sDenNrkA+PCrDFA2eQHK2eLgPTH0GuBk2XItb+dnP
OpofyoNN2KBlc3pG1hZF8dUAKR4yHZh9HiB8ijMKrASfaP2PVrlDlcw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org