Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          9jQBAm85i2+b/mlczpBbty2UZyV9DFa2H6C4p16Cpw0=
Subject key identifier:   D4:BE:D9:2E:7C:8C:9A:3F:7B:5F:28:53:37:90:B7:92:A9:C8:1C:C4
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       493E304A1E90158F61FE0AA1AB2B73B32728E3A9
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        186.194.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3e:30:4a:1e:90:15:8f:61:fe:0a:a1:ab:2b:73:b3:27:28:e3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:ba:a0:25:86:db:6f:ba:4d:cb:44:6f:c3:
                    07:bf:4f:0d:f1:fc:0c:bd:99:6b:63:76:4d:0f:cd:
                    e6:1f:b3:a9:a9:c0:44:7b:05:7b:61:1d:0d:cd:e0:
                    34:98:d8:92:7d:d4:2f:e5:c3:75:7a:c8:52:ab:a1:
                    15:f6:86:d2:77:3d:e9:55:62:e6:7a:bd:b8:d7:e0:
                    d3:8f:ec:82:51:3f:b8:52:3c:f8:50:0d:8e:16:5f:
                    44:2b:1a:9f:40:ff:53:a9:a5:41:f4:86:9b:8b:53:
                    6c:ef:47:0a:9d:e3:72:55:59:14:09:1c:70:64:4e:
                    dc:e6:bb:bf:a4:1c:d7:20:7b:6f:2d:db:2a:e7:0a:
                    30:d5:66:c1:4c:f3:88:c3:d7:b9:fb:5d:0a:df:95:
                    01:b8:5d:63:18:ae:58:2a:5d:e7:8b:2e:2d:7d:5b:
                    82:d1:1e:73:bf:15:b6:f4:bc:4b:09:5e:c6:68:09:
                    4b:29:78:06:11:59:63:cc:3c:96:75:ae:ce:21:18:
                    f6:fd:40:05:30:66:4c:3a:67:ee:3e:d3:04:97:70:
                    79:74:41:d8:c6:5f:b1:9e:48:07:37:06:ef:67:f8:
                    d9:a0:d7:ca:45:00:66:e9:9a:e8:21:cb:ff:a4:d7:
                    b3:88:0d:f8:42:53:ef:b1:20:5d:20:61:63:2e:d0:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:D9:2E:7C:8C:9A:3F:7B:5F:28:53:37:90:B7:92:A9:C8:1C:C4
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3230382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:c9:1d:53:f5:c7:ce:e5:5a:d0:c8:59:de:6d:95:17:0c:84:
         f0:29:c1:62:35:41:b6:5e:f1:3d:a2:d4:2d:44:58:ed:5f:30:
         0f:1d:71:19:62:80:c4:d6:8c:f2:60:bc:b0:20:9f:8d:d7:de:
         de:8e:74:4a:01:3a:28:71:dc:61:15:90:00:96:c5:26:92:0a:
         a5:11:27:70:d5:86:f6:be:fe:9f:fb:65:70:c1:3a:c1:17:6d:
         40:7a:77:70:09:c5:8d:44:90:65:98:ef:3c:7b:b5:80:8e:d7:
         28:19:46:0a:f8:dc:75:9a:78:42:d0:03:aa:f3:cc:68:a4:2e:
         1f:3d:8f:ef:60:b0:e2:85:de:a5:55:e5:da:50:a1:9f:69:9b:
         04:4d:61:67:9b:a8:ff:fc:1d:40:47:94:de:be:73:15:47:dd:
         b8:42:50:8f:24:b2:56:3e:42:84:36:23:c1:9b:c4:27:bf:e2:
         73:74:3b:7a:1c:34:7e:98:70:d6:5d:02:55:75:b9:77:8a:28:
         bc:8f:61:31:5a:b4:fe:84:b0:1f:7b:02:e5:05:ed:bf:83:e7:
         f1:6e:3c:7c:67:54:c8:80:eb:65:6e:a2:81:76:05:e2:43:1f:
         74:58:7d:4a:85:4a:f0:a2:14:d6:10:a8:8d:8b:af:6f:c0:d7:
         9f:43:cd:f9
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUST4wSh6QFY9h/gqhqytzsyco46kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTlaFw0yNTA0MDIxODMwMTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc5OUJBQTAyNTg2REI2RkJB
NERDQjQ0NkZDMzA3QkY0RjBERjFGQzBDQkQ5OTZCNjM3NjREMEZDREU2MUZCM0E5
QTlDMDQ0N0IwNTdCNjExRDBEQ0RFMDM0OThEODkyN0RENDJGRTVDMzc1N0FDODUy
QUJBMTE1RjY4NkQyNzczREU5NTU2MkU2N0FCREI4RDdFMEQzOEZFQzgyNTEzRkI4
NTIzQ0Y4NTAwRDhFMTY1RjQ0MkIxQTlGNDBGRjUzQTlBNTQxRjQ4NjlCOEI1MzZD
RUY0NzBBOURFMzcyNTU1OTE0MDkxQzcwNjQ0RURDRTZCQkJGQTQxQ0Q3MjA3QjZG
MkREQjJBRTcwQTMwRDU2NkMxNENGMzg4QzNEN0I5RkI1RDBBREY5NTAxQjg1RDYz
MThBRTU4MkE1REU3OEIyRTJEN0Q1QjgyRDExRTczQkYxNUI2RjRCQzRCMDk1RUM2
NjgwOTRCMjk3ODA2MTE1OTYzQ0MzQzk2NzVBRUNFMjExOEY2RkQ0MDA1MzA2NjRD
M0E2N0VFM0VEMzA0OTc3MDc5NzQ0MUQ4QzY1RkIxOUU0ODA3MzcwNkVGNjdGOEQ5
QTBEN0NBNDUwMDY2RTk5QUU4MjFDQkZGQTREN0IzODgwREY4NDI1M0VGQjEyMDVE
MjA2MTYzMkVEMDA0RDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt5m6oCWG22+6TctEb8MHv08N8fwMvZlrY3ZND83mH7OpqcBEewV7
YR0NzeA0mNiSfdQv5cN1eshSq6EV9obSdz3pVWLmer241+DTj+yCUT+4Ujz4UA2O
Fl9EKxqfQP9TqaVB9Iabi1Ns70cKneNyVVkUCRxwZE7c5ru/pBzXIHtvLdsq5wow
1WbBTPOIw9e5+10K35UBuF1jGK5YKl3niy4tfVuC0R5zvxW29LxLCV7GaAlLKXgG
EVljzDyWda7OIRj2/UAFMGZMOmfuPtMEl3B5dEHYxl+xnkgHNwbvZ/jZoNfKRQBm
6ZroIcv/pNeziA34QlPvsSBdIGFjLtAE1QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FNS+2S58jJo/e18oUzeQt5KpyBzEMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzgzNjJlMzEzOTM0MmUzMjMw
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG6wtAwDQYJKoZIhvcNAQELBQADggEBAMvJHVP1x87lWtDIWd5tlRcMhPApwWI1
QbZe8T2i1C1EWO1fMA8dcRligMTWjPJgvLAgn43X3t6OdEoBOihx3GEVkACWxSaS
CqURJ3DVhva+/p/7ZXDBOsEXbUB6d3AJxY1EkGWY7zx7tYCO1ygZRgr43HWaeELQ
A6rzzGikLh89j+9gsOKF3qVV5dpQoZ9pmwRNYWebqP/8HUBHlN6+cxVH3bhCUI8k
slY+QoQ2I8GbxCe/4nN0O3ocNH6YcNZdAlV1uXeKKLyPYTFatP6EsB97AuUF7b+D
5/FuPHxnVMiA62VuooF2BeJDH3RYfUqFSvCiFNYQqI2Lr2/A159Dzfk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org