Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          z8ZLC9t+c4V0NKfMAxUabzWqo8Lrz7ovLocSSfSdyPs=
Subject key identifier:   84:1B:E4:02:88:78:8A:AE:71:3E:B5:AC:FA:40:C2:83:04:50:FA:1F
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       42724111F4FE3B04470A12F6743055A64DC8CBE0
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     262691
IP address blocks:        186.194.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:41:11:f4:fe:3b:04:47:0a:12:f6:74:30:55:a6:4d:c8:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:bd:68:5c:95:16:64:03:6b:5a:77:05:ee:
                    a7:6a:7b:b2:fb:60:e6:58:fa:8c:80:20:b1:cf:43:
                    f8:3c:96:bb:68:1d:05:3a:a3:d2:1f:a7:fb:23:cd:
                    1c:d2:6a:07:bc:fb:06:41:07:5c:fe:0b:e0:3d:42:
                    cd:61:a4:b6:44:1a:e5:85:d1:57:49:d3:f6:24:51:
                    fa:ab:3d:05:a7:6b:ae:f3:42:1b:84:1f:2b:9e:4e:
                    35:cc:65:2d:86:d0:d7:91:2d:75:99:d2:7b:f1:fb:
                    11:ed:e4:18:b1:c1:3a:88:93:d7:15:b0:c0:65:5b:
                    f1:13:3c:2e:c9:2d:a8:eb:99:6e:d2:0d:55:8b:ab:
                    84:2b:62:97:09:d5:2d:2e:a3:e6:18:78:67:22:8f:
                    c2:94:95:2e:ad:9d:16:7e:c0:66:44:4b:a1:9f:ea:
                    56:8a:e3:b6:07:9d:75:af:18:26:46:dc:cb:18:15:
                    b1:a6:c5:06:a8:f9:f4:30:d4:37:0c:5d:46:92:39:
                    7e:a8:36:6b:e8:73:90:0c:dd:d4:25:8d:bd:5c:0d:
                    a3:e7:db:af:a7:c2:fa:fd:1f:53:50:63:6d:3f:b2:
                    d2:8c:c6:3e:25:32:b6:6c:f0:0c:65:2b:30:02:dd:
                    05:82:96:ac:ea:cf:bf:69:e2:03:50:5a:90:ae:6e:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1B:E4:02:88:78:8A:AE:71:3E:B5:AC:FA:40:C2:83:04:50:FA:1F
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:98:2f:df:1b:41:42:0b:88:57:96:70:79:12:f3:bc:6b:31:
         8a:fd:d4:c4:c6:4b:ed:fa:92:53:f7:f7:cf:61:34:4d:46:0a:
         2a:02:bf:b8:5f:94:5e:6b:ac:3d:05:5c:a4:ca:77:3e:8b:6e:
         46:35:7d:c8:d5:db:a1:94:84:8c:cc:f1:04:fc:cb:66:fe:14:
         c7:fb:60:18:22:14:e1:50:4b:a8:5b:57:b9:47:d8:1a:6b:56:
         6f:cf:9d:96:a0:73:14:cc:f4:f4:d8:60:9d:15:88:25:61:76:
         69:ce:f2:bf:b1:fe:76:a2:d7:34:a5:a1:dd:9f:9c:85:c8:57:
         19:84:7d:ab:80:d5:69:5b:7e:a8:87:51:85:6b:44:46:b7:06:
         5a:d8:dd:9e:09:c9:17:40:d1:fb:55:78:d6:79:b6:2c:ee:57:
         e5:1f:37:9a:60:17:fd:b5:57:b7:8f:35:e1:c7:12:99:03:9e:
         a0:bf:5f:9e:29:c7:dd:5f:0b:28:9a:58:e0:17:66:82:45:fa:
         02:f7:fc:5b:36:77:fd:51:1e:b7:32:55:31:a0:23:87:ba:2b:
         60:76:fb:9e:a4:ba:ed:39:36:93:df:a3:8c:98:ca:4a:68:47:
         cc:24:f8:49:17:55:2b:97:3b:32:59:2e:c9:8d:ea:18:db:88:
         25:37:ac:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org