Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          o4LzxZCF8fZAXVp6b/RaZ9F82R7GJeXMvA4qn4RVXqA=
Subject key identifier:   A3:FF:AD:53:D8:9F:D8:D8:60:7F:ED:30:B2:40:BE:74:31:FF:C0:56
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       609536CFFD1E6F59296D8BC866921B45AB5148AC
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        179.108.236.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:95:36:cf:fd:1e:6f:59:29:6d:8b:c8:66:92:1b:45:ab:51:48:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:61:2e:8d:bc:49:33:6b:a7:05:be:d6:da:
                    10:4f:56:90:65:20:25:b4:64:bc:b6:1b:86:44:60:
                    48:bd:ef:04:a1:00:9e:47:ee:b5:1b:bf:bd:8f:1d:
                    be:64:6c:df:e7:5c:36:ef:d1:9c:fe:86:c5:de:62:
                    cd:ac:78:90:35:5e:8a:b5:f5:79:7e:71:28:2f:f9:
                    5b:ec:1a:41:a6:7d:1b:5f:2b:90:df:f3:f2:30:b4:
                    17:ac:f5:c5:37:87:d2:e2:8c:80:83:62:44:e4:20:
                    75:af:3b:b3:c9:5b:f1:78:5a:68:77:1d:b0:1a:b5:
                    b7:ab:79:09:25:1e:45:92:e5:75:ab:59:82:3f:c5:
                    14:c8:71:d8:2a:e6:4f:31:17:f0:0b:0a:00:36:96:
                    a4:00:65:d0:bf:2f:ee:32:36:13:34:8c:6b:36:54:
                    76:f2:59:97:be:24:42:1e:c9:ac:2c:59:10:fb:12:
                    62:90:ad:5f:95:e1:30:cb:8e:4d:bf:b8:6e:01:b5:
                    a0:52:8b:09:16:58:0d:5a:18:9c:b5:8b:e1:bf:3c:
                    d9:18:90:41:b4:1d:c5:12:e2:5d:43:f3:03:53:e4:
                    b3:91:4e:7b:78:48:c0:1c:e0:a4:16:a8:cb:63:be:
                    00:fb:73:bc:76:f2:28:97:e7:38:ac:84:d7:a3:ee:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FF:AD:53:D8:9F:D8:D8:60:7F:ED:30:B2:40:BE:74:31:FF:C0:56
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:e1:86:a2:88:45:33:ca:9e:cd:b1:6d:55:64:4e:7e:1f:40:
         64:1f:1a:c5:d6:e2:ad:da:45:42:17:9a:2c:64:5e:8e:ed:eb:
         e1:cf:5c:25:14:23:94:50:cb:95:5f:8d:4e:94:cd:cb:c4:e0:
         49:b6:60:b9:88:a8:19:8b:7e:3b:94:20:64:e1:08:c3:f4:56:
         f3:c0:ce:9a:2f:f6:ed:16:0f:fa:79:2d:f8:e6:4d:bb:24:f2:
         06:20:d7:f8:36:45:9e:8f:08:dc:70:c0:b2:0c:e9:93:ec:bd:
         9f:3a:ff:9f:b0:85:9a:dd:85:c7:a0:93:1e:6e:95:cd:11:f3:
         c4:e3:65:15:6a:72:cb:2d:33:fe:45:18:83:28:e8:af:e3:4f:
         e6:20:17:19:2f:0e:75:10:a7:ed:5c:e3:5f:10:d9:9f:52:e4:
         84:a6:f4:1e:81:09:b8:41:0d:c7:f1:dc:c1:8a:87:90:24:32:
         41:bb:a6:7b:f5:00:ef:65:9d:a7:46:2f:18:99:13:a6:a5:f5:
         aa:02:f9:51:c1:0b:e4:c6:05:21:6f:95:c8:81:57:1a:38:49:
         56:d7:b2:48:62:2d:45:39:ca:fd:ad:b7:50:64:72:58:57:cd:
         a9:ef:38:1c:e1:96:0a:b5:45:8a:02:89:2c:1c:43:27:9d:fc:
         60:dd:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org