Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa
File:                     3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          hf8w/UsWFTsmK5LyQoKHtfZI/npTbnwOw5q2HcMIB6E=
Subject key identifier:   F3:5E:45:3C:ED:17:6D:46:7C:0E:57:57:9B:AA:BD:63:96:17:4A:D9
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       491D4FD363492C9F8A99AC0CEBC091C5CE73A0FD
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:10 +0000
ROA not before:           Wed 03 Apr 2024 18:25:10 +0000
ROA not after:            Wed 02 Apr 2025 18:30:10 +0000
asID:                     262691
IP address blocks:        186.194.208.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1d:4f:d3:63:49:2c:9f:8a:99:ac:0c:eb:c0:91:c5:ce:73:a0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:10 2024 GMT
            Not After : Apr  2 18:30:10 2025 GMT
        Subject: CN=3082010A0282010100C02F89890DB44F56F3E0B2C3D5A4EBEFE3D54AC7BBB2817A367DC7FD8F478C51BB85BBC4F3DB9415DE7E298F8A21B65B191060BE3CECA42F4E8F1A0DA25B5D8DC37C1168A841CE640F550869562A1743A9BF34027F71D74AAE8BD014AA403F84ED4BDAE0DCEB82487EB484B4DA6CCA62761B457DB3AA181611B2128CA15580E9DD63D04626A028BBC5CEC4D7272D2B0FBA5C06BC427F16D5DD253F699D97EBEF1E996EF78DA174946B403AF3201A778E9EF0A2EE03C4693A0ABA4098F353D2797FA2FB9AA9BC5035F65175C17DEE4C20040D593D3297DA36C38B546A575B0A8C6B2DE175A94DE922B935607A9CF1109A1FD5DB5597E05C8D5853A60693F89D850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:89:89:0d:b4:4f:56:f3:e0:b2:c3:d5:a4:
                    eb:ef:e3:d5:4a:c7:bb:b2:81:7a:36:7d:c7:fd:8f:
                    47:8c:51:bb:85:bb:c4:f3:db:94:15:de:7e:29:8f:
                    8a:21:b6:5b:19:10:60:be:3c:ec:a4:2f:4e:8f:1a:
                    0d:a2:5b:5d:8d:c3:7c:11:68:a8:41:ce:64:0f:55:
                    08:69:56:2a:17:43:a9:bf:34:02:7f:71:d7:4a:ae:
                    8b:d0:14:aa:40:3f:84:ed:4b:da:e0:dc:eb:82:48:
                    7e:b4:84:b4:da:6c:ca:62:76:1b:45:7d:b3:aa:18:
                    16:11:b2:12:8c:a1:55:80:e9:dd:63:d0:46:26:a0:
                    28:bb:c5:ce:c4:d7:27:2d:2b:0f:ba:5c:06:bc:42:
                    7f:16:d5:dd:25:3f:69:9d:97:eb:ef:1e:99:6e:f7:
                    8d:a1:74:94:6b:40:3a:f3:20:1a:77:8e:9e:f0:a2:
                    ee:03:c4:69:3a:0a:ba:40:98:f3:53:d2:79:7f:a2:
                    fb:9a:a9:bc:50:35:f6:51:75:c1:7d:ee:4c:20:04:
                    0d:59:3d:32:97:da:36:c3:8b:54:6a:57:5b:0a:8c:
                    6b:2d:e1:75:a9:4d:e9:22:b9:35:60:7a:9c:f1:10:
                    9a:1f:d5:db:55:97:e0:5c:8d:58:53:a6:06:93:f8:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:45:3C:ED:17:6D:46:7C:0E:57:57:9B:AA:BD:63:96:17:4A:D9
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:47:e7:79:98:2d:d6:8d:9d:37:a2:58:93:40:13:d7:f2:
         67:44:d6:b5:7d:08:a0:58:43:c7:0c:16:3e:0f:8a:7b:36:3d:
         da:08:9a:4d:54:15:1e:fb:bf:1d:d3:45:f7:01:c0:94:7e:b1:
         51:2c:4e:44:58:45:18:61:c5:1f:43:be:19:4e:8e:ec:86:0f:
         45:3e:ca:b7:f1:f5:e2:4d:3c:04:f5:0c:e0:83:30:5d:16:c6:
         45:af:0c:54:93:82:9f:28:97:33:cb:a2:46:7f:62:75:5d:9d:
         6d:e2:69:70:ee:c4:0f:76:58:d1:1d:6c:a8:fe:ce:01:54:f7:
         31:b9:4a:85:ce:50:64:d5:27:05:73:7d:28:97:13:93:df:c4:
         97:35:ad:a1:e6:d4:75:4e:a7:b9:1a:6f:61:69:73:0f:a8:9e:
         01:32:10:2c:67:c9:98:70:54:be:b4:44:cf:27:d2:e3:ab:46:
         9c:2b:d1:47:78:e5:22:df:d1:13:1b:99:56:05:2d:82:45:6b:
         20:38:cc:87:67:24:9c:93:d6:8f:bb:87:af:6f:4b:5a:22:fa:
         a9:9d:56:a2:55:61:05:66:09:22:d1:b2:9e:87:9a:31:cc:b2:
         e3:72:52:0d:13:d7:ee:e0:b1:48:e3:7a:5f:92:56:58:c0:6f:
         fd:9d:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org