Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa
File:                     3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          oDwGZ8ZrQIGFZ4jeeXMuenMqURTcSgy3SvNw4hqdi7s=
Subject key identifier:   82:1A:D2:21:19:90:3C:D1:A1:D3:D0:83:B9:17:C0:1B:16:AE:1E:46
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       7B723BD070668821CB1F206F7EE1D619494FCCB5
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        179.108.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:72:3b:d0:70:66:88:21:cb:1f:20:6f:7e:e1:d6:19:49:4f:cc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:7a:73:5a:aa:53:8b:b2:32:8c:06:a1:26:
                    26:bc:4e:b8:90:5d:0d:30:b1:3e:9b:90:8c:39:cf:
                    54:8c:fb:9f:64:12:31:75:fa:06:60:3a:fd:2d:37:
                    4b:ac:76:d8:6a:40:0b:73:78:a9:69:f4:75:f3:41:
                    51:1a:51:1d:1d:8c:07:15:fd:6d:86:03:99:50:0d:
                    51:11:83:24:f5:7a:40:c2:da:ff:42:55:f1:70:fc:
                    54:77:ac:80:c4:32:63:60:df:69:0a:5e:82:73:0e:
                    0b:8d:42:a6:18:ed:ce:86:2f:55:08:6e:d7:99:a5:
                    7b:ff:61:33:04:f8:5c:4d:5f:76:2d:27:91:9b:8d:
                    dd:7e:1a:d2:fe:fd:a9:b4:8a:32:d5:06:44:f3:82:
                    8b:85:18:0f:16:a2:d9:b7:cf:75:2a:e8:3b:32:2f:
                    47:bd:04:77:b1:13:55:39:81:70:98:1e:2f:8f:32:
                    60:d2:8d:1a:59:07:f6:06:07:df:ce:b5:d4:5e:30:
                    a6:11:ea:62:bd:f2:eb:be:23:7f:d7:ce:11:90:4b:
                    ca:5d:a3:dd:25:1f:89:e7:27:0a:31:93:63:e7:ac:
                    61:88:1e:b1:76:4f:73:54:f9:97:ec:6c:0a:91:e6:
                    75:f3:80:60:db:a3:12:e1:d7:70:e1:ad:78:6c:dd:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:D2:21:19:90:3C:D1:A1:D3:D0:83:B9:17:C0:1B:16:AE:1E:46
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:09:29:41:66:e6:a3:89:e9:35:10:52:aa:b0:3f:48:39:
         a9:a3:36:0a:08:c7:c4:cb:75:56:cb:cd:33:99:3c:a6:00:a1:
         5a:a4:c3:7e:4f:39:46:69:53:30:38:01:88:d9:e5:43:53:bc:
         7f:5b:6f:1c:d2:0b:7b:69:1f:e4:3a:9f:07:4d:dc:e6:e5:48:
         a0:dc:ec:ac:c6:76:5c:f7:75:5d:10:9f:31:76:52:2d:8a:4f:
         96:6f:8e:76:f1:70:43:41:68:88:97:90:ab:ad:d9:3f:45:de:
         03:23:b0:7d:31:4e:42:42:5f:31:bd:2b:36:43:80:92:61:e2:
         be:50:9f:de:30:47:19:77:7a:ca:57:fd:43:da:44:4b:5a:5d:
         6b:e9:85:01:59:ee:0a:0e:54:98:d9:b4:a9:7a:08:2d:ff:68:
         34:b2:00:19:31:3a:39:5e:16:0b:b8:6c:a5:7d:34:ef:15:9e:
         66:a6:85:dd:10:20:8a:62:9f:b2:b5:61:c3:35:bb:29:98:71:
         da:3f:2d:71:04:c8:fa:5c:b9:59:a3:74:cd:9e:f2:b5:2f:9b:
         19:e4:46:d8:05:1e:fc:36:80:b1:94:95:3c:58:ae:65:6d:1b:
         ad:34:2a:e5:1a:c1:0d:68:c1:10:fa:5c:3d:dc:af:8d:f1:e7:
         83:c8:41:b8
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUe3I70HBmiCHLHyBvfuHWGUlPzLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MDlaFw0yNTA0MDIxODMwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc1MTdBNzM1QUFBNTM4QkIy
MzI4QzA2QTEyNjI2QkM0RUI4OTA1RDBEMzBCMTNFOUI5MDhDMzlDRjU0OENGQjlG
NjQxMjMxNzVGQTA2NjAzQUZEMkQzNzRCQUM3NkQ4NkE0MDBCNzM3OEE5NjlGNDc1
RjM0MTUxMUE1MTFEMUQ4QzA3MTVGRDZEODYwMzk5NTAwRDUxMTE4MzI0RjU3QTQw
QzJEQUZGNDI1NUYxNzBGQzU0NzdBQzgwQzQzMjYzNjBERjY5MEE1RTgyNzMwRTBC
OEQ0MkE2MThFRENFODYyRjU1MDg2RUQ3OTlBNTdCRkY2MTMzMDRGODVDNEQ1Rjc2
MkQyNzkxOUI4REREN0UxQUQyRkVGREE5QjQ4QTMyRDUwNjQ0RjM4MjhCODUxODBG
MTZBMkQ5QjdDRjc1MkFFODNCMzIyRjQ3QkQwNDc3QjExMzU1Mzk4MTcwOTgxRTJG
OEYzMjYwRDI4RDFBNTkwN0Y2MDYwN0RGQ0VCNUQ0NUUzMEE2MTFFQTYyQkRGMkVC
QkUyMzdGRDdDRTExOTA0QkNBNURBM0REMjUxRjg5RTcyNzBBMzE5MzYzRTdBQzYx
ODgxRUIxNzY0RjczNTRGOTk3RUM2QzBBOTFFNjc1RjM4MDYwREJBMzEyRTFENzcw
RTFBRDc4NkNERDk2NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA11F6c1qqU4uyMowGoSYmvE64kF0NMLE+m5CMOc9UjPufZBIxdfoG
YDr9LTdLrHbYakALc3ipafR180FRGlEdHYwHFf1thgOZUA1REYMk9XpAwtr/QlXx
cPxUd6yAxDJjYN9pCl6Ccw4LjUKmGO3Ohi9VCG7XmaV7/2EzBPhcTV92LSeRm43d
fhrS/v2ptIoy1QZE84KLhRgPFqLZt891Kug7Mi9HvQR3sRNVOYFwmB4vjzJg0o0a
WQf2BgffzrXUXjCmEepivfLrviN/184RkEvKXaPdJR+J5ycKMZNj56xhiB6xdk9z
VPmX7GwKkeZ184Bg26MS4ddw4a14bN2WYwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FIIa0iEZkDzRodPQg7kXwBsWrh5GMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzczOTJlMzEzMDM4MmUzMjMz
MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKzbOwwDQYJKoZIhvcNAQELBQADggEBAI0eCSlBZuajiek1EFKqsD9IOamjNgoI
x8TLdVbLzTOZPKYAoVqkw35POUZpUzA4AYjZ5UNTvH9bbxzSC3tpH+Q6nwdN3Obl
SKDc7KzGdlz3dV0QnzF2Ui2KT5ZvjnbxcENBaIiXkKut2T9F3gMjsH0xTkJCXzG9
KzZDgJJh4r5Qn94wRxl3espX/UPaREtaXWvphQFZ7goOVJjZtKl6CC3/aDSyABkx
OjleFgu4bKV9NO8Vnmamhd0QIIpin7K1YcM1uymYcdo/LXEEyPpcuVmjdM2e8rUv
mxnkRtgFHvw2gLGUlTxYrmVtG600KuUawQ1owRD6XD3cr43x54PIQbg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org