Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          OSwyMI/mB4Y3EB9cc1HqYv7L27GZDdg4p3ek8BqRPfM=
Subject key identifier:   4B:A0:A5:46:E6:68:C5:10:D8:F0:28:E7:2C:7B:DF:0C:2A:8F:B9:EA
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       13EB87456AAB27AA30313F1C82C33B692B780D1A
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        186.194.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:eb:87:45:6a:ab:27:aa:30:31:3f:1c:82:c3:3b:69:2b:78:0d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:db:76:35:e3:cb:e7:7a:f9:cf:df:bb:52:
                    a3:3b:5d:f6:7f:60:fd:e0:d4:a1:8a:6c:24:34:d0:
                    49:a3:1e:2e:16:f3:a1:1d:7f:91:e9:b5:78:3a:ff:
                    33:c0:17:c4:8f:bb:79:84:eb:19:4b:15:ed:05:a3:
                    24:8b:7d:d3:59:08:22:b0:5f:39:47:4b:e6:59:d5:
                    11:09:7b:8c:70:78:57:b5:3c:e0:9e:e9:7b:43:66:
                    c3:13:c5:73:ef:43:fc:c0:c0:6a:58:75:a4:10:c4:
                    83:fc:44:1d:07:03:b5:ad:be:94:89:9c:c2:08:cb:
                    ec:a9:2b:cc:30:6d:1e:5d:e5:b2:5f:ae:ba:17:2f:
                    77:bf:83:6f:f3:de:5a:15:bb:20:22:23:49:62:0f:
                    50:3b:5a:c6:f8:16:71:0b:12:4a:0a:2c:d5:cb:f3:
                    ec:26:44:27:1a:46:0f:89:13:d4:84:97:0a:92:38:
                    35:a2:60:66:50:c9:dd:ff:1c:51:4d:77:ee:cc:3e:
                    b9:bc:92:7d:81:67:20:8f:49:9d:1d:44:ba:fd:c1:
                    ed:cd:94:6f:cb:f8:fa:2c:30:ca:60:4b:a6:b7:21:
                    80:a3:b7:0e:e4:58:97:e0:28:8f:a9:ad:67:17:a0:
                    3b:c5:c3:2a:54:35:ae:2c:0a:05:59:e9:23:04:7b:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:A5:46:E6:68:C5:10:D8:F0:28:E7:2C:7B:DF:0C:2A:8F:B9:EA
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:1e:75:6b:5e:1f:79:91:3c:17:5a:ce:1c:db:71:f1:36:
         e4:23:f8:d6:e3:d7:fe:4a:dd:ec:c4:8c:84:34:e8:f7:a6:41:
         07:f3:6c:04:95:b1:51:b1:44:22:48:5d:90:6c:8e:f7:42:6f:
         96:f3:c8:5f:19:31:e4:1e:ba:5c:87:53:0b:0d:79:1e:e5:f0:
         0b:9c:7e:30:c2:8f:00:8d:17:4a:09:b5:f4:80:3a:92:34:a8:
         5b:b1:b7:e2:90:8e:2f:69:e2:58:52:f2:07:bb:12:57:a9:b6:
         2e:07:9a:d9:63:a6:9c:e4:51:b0:49:83:54:43:6e:60:30:6d:
         af:49:af:02:13:30:7a:db:80:f8:91:9a:fd:43:04:20:bf:e4:
         97:f0:bd:7c:e6:2a:40:dd:08:17:d5:8f:57:1c:47:63:c3:35:
         bd:22:ad:ff:7a:83:43:fb:b8:da:f1:62:e2:f6:a9:21:5a:ed:
         93:9e:f0:fe:11:91:c7:42:45:dc:ed:f4:0d:15:df:32:39:db:
         6c:25:97:e9:e3:03:62:6c:e8:33:f9:00:fd:eb:c5:79:84:78:
         b6:21:d9:9e:49:ec:84:b1:02:db:de:36:84:fd:34:78:2c:b4:
         d4:c9:44:ef:65:6d:63:b3:7f:86:ee:e3:2b:89:2d:7c:4a:c4:
         fe:c7:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org