Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa
File:                     3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          VtvLw7l+2DNiZrVXdPvG3E17yfvYwtVeO47Wu44Hok0=
Subject key identifier:   34:F0:F6:6A:20:23:F8:AB:15:60:8F:6B:20:67:5E:1B:7A:27:47:4F
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       5C8A01757616395ABEE996D3FCCEEAE33A55BC97
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     262691
IP address blocks:        179.108.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8a:01:75:76:16:39:5a:be:e9:96:d3:fc:ce:ea:e3:3a:55:bc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:00:a6:55:1f:1f:d2:da:5d:c9:2d:92:c1:
                    13:09:9c:63:f1:91:a5:ec:bb:97:a2:99:b6:24:b5:
                    b5:8e:b6:dd:9e:0f:bf:31:3c:33:a8:1a:79:f2:b4:
                    5d:01:06:a3:0b:c5:ee:c8:2a:98:98:5d:22:70:d7:
                    d1:3c:b1:19:fa:3c:22:16:6d:73:9c:10:de:a6:a2:
                    93:c9:7e:bd:60:f5:40:65:76:3a:e3:64:ce:f1:e5:
                    1d:6c:c0:a3:15:ff:3b:ab:c8:6d:75:44:27:66:46:
                    26:91:4d:5f:b9:2c:a0:4f:3c:bf:45:e2:dc:c5:4c:
                    da:71:e3:a5:71:6b:00:6c:04:37:63:e9:59:c6:14:
                    ab:76:c6:de:84:76:4c:f9:ea:c7:35:eb:4e:0f:20:
                    8e:df:b4:20:c9:5f:f9:5a:84:d7:1b:13:fc:6d:7f:
                    d5:57:b9:6e:76:f2:eb:90:ae:c4:c8:89:95:ee:fa:
                    f3:b2:d5:40:a5:c1:6b:2d:76:c2:cf:02:c7:e7:fe:
                    38:1f:0e:c0:9b:27:18:ef:59:69:b1:8e:99:61:d3:
                    a8:14:76:b4:5b:9b:22:f5:32:40:e2:e3:c2:24:05:
                    40:1e:33:5d:5d:93:eb:d0:5f:4f:de:fe:ab:d6:f8:
                    e7:ee:ad:d5:c3:02:24:95:54:da:89:a2:b0:ea:f4:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F0:F6:6A:20:23:F8:AB:15:60:8F:6B:20:67:5E:1B:7A:27:47:4F
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3137392e3130382e3233382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:b6:da:1d:02:be:00:d1:60:94:c4:45:14:33:5b:d3:7f:
         45:c9:ec:e9:09:76:e0:28:e1:3b:0a:96:78:84:23:b6:0a:4c:
         90:6e:79:ac:c1:bd:69:66:d7:18:52:a5:96:70:41:d1:7e:a0:
         ea:8b:9f:59:6e:ae:38:8c:96:ca:5b:24:85:85:f2:96:60:26:
         9e:73:6c:8e:03:52:47:17:73:f6:78:5e:34:6b:9b:fe:ec:e7:
         20:d9:80:9a:05:90:fb:83:01:a4:48:fa:a5:39:b1:83:f6:b1:
         de:b5:a6:9d:d3:41:ba:8d:e3:14:07:2b:29:6c:ba:88:42:e4:
         34:9f:2f:b3:9f:8e:e2:a1:1f:66:7f:30:73:c2:83:81:76:5f:
         a8:0a:d4:c9:ef:ee:68:4f:fe:ce:e8:7c:84:85:ec:f0:b0:32:
         26:bf:a9:e0:4c:aa:9e:94:13:53:70:d3:64:7d:c3:24:54:56:
         f6:6d:94:06:02:03:41:06:e2:c5:8b:a2:4d:be:e2:cd:c7:9d:
         39:c1:65:6b:80:08:fd:e3:60:25:07:19:a9:c5:13:3a:52:a0:
         71:db:fb:ac:2d:c8:73:1c:8c:0b:a9:74:83:a8:52:fd:1f:5b:
         b9:80:3a:e5:ec:b7:14:78:68:e2:d2:9f:54:b6:3c:1a:9f:3f:
         10:6e:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org