Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          yoH5uRTBVTPmdlTMljNWiRkLXK8XljJOLmGLdBvHFYk=
Subject key identifier:   F7:57:66:F0:7A:FA:9F:2B:A6:69:35:93:65:FB:E9:F5:B5:5A:57:32
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       201B5CE048F68784CCCC1CBB348FFAD8B5FA0B26
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        186.194.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1b:5c:e0:48:f6:87:84:cc:cc:1c:bb:34:8f:fa:d8:b5:fa:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:4c:15:cb:24:b3:13:a9:57:2e:4a:bd:12:
                    8b:b6:a0:ea:a9:d0:40:09:e8:6e:ea:6f:f9:c0:24:
                    ec:8d:5c:88:c8:86:18:f8:bf:3d:a3:f0:d2:d1:44:
                    c7:21:f8:c2:1d:ec:1c:80:bf:da:43:8f:3a:c8:c6:
                    10:28:38:c4:3c:21:97:6d:58:0d:a7:97:35:24:ab:
                    d3:0f:b9:cc:30:0e:a9:cf:dd:0f:0d:46:5b:f5:0b:
                    d6:aa:9c:96:48:58:3a:64:9f:50:c9:c4:38:a0:2b:
                    02:10:7c:1b:a2:87:22:53:7b:28:92:3f:92:be:23:
                    73:e0:0c:11:d1:30:b5:89:78:76:41:12:7f:9f:28:
                    e7:f5:b8:b8:12:29:c7:81:05:07:40:f6:d3:8a:b4:
                    13:d2:e1:68:c3:51:50:b2:f2:e2:40:78:ad:87:5d:
                    6f:d4:f1:f6:1a:48:a4:6b:ed:71:8c:54:11:cd:6c:
                    3e:32:47:f8:3f:2a:78:82:09:75:70:55:22:fd:e2:
                    c7:a6:9e:85:c3:61:3b:76:ea:9f:91:12:eb:b5:a7:
                    0e:24:5c:47:28:6f:66:aa:a1:92:bc:4d:98:7a:11:
                    b4:eb:2d:54:cf:12:c7:65:27:02:22:46:a1:8c:da:
                    67:98:72:e4:52:61:77:18:15:ee:38:3d:92:5e:c4:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:66:F0:7A:FA:9F:2B:A6:69:35:93:65:FB:E9:F5:B5:5A:57:32
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:1d:ba:84:c3:4b:07:b3:b3:02:1f:53:fd:e6:ec:aa:f9:
         1f:19:03:3a:bd:4e:47:75:3c:48:9f:b5:cf:f7:a9:1d:da:61:
         66:89:52:b5:7d:66:7f:ed:97:76:06:7d:79:34:62:76:ca:67:
         29:df:4e:b2:bf:9c:88:ec:74:6b:70:e0:95:e0:e4:a3:31:25:
         81:44:5e:b4:08:48:3c:5b:ed:ce:c1:91:43:02:86:1b:72:ce:
         67:ec:92:00:07:14:b7:08:a7:83:dc:f7:57:e2:34:d1:9a:1b:
         9e:78:3c:dd:39:6b:e3:b9:34:87:34:fe:8b:91:32:e0:1a:8f:
         8f:c8:74:5e:22:77:98:53:fd:c1:10:94:c6:ac:88:23:4c:24:
         e0:94:19:f9:0e:55:46:7d:f9:0c:6c:fa:df:d3:2b:24:e8:e2:
         88:9f:41:8d:c9:d3:bb:05:4f:22:a1:e2:23:8e:bc:06:c0:d2:
         de:55:98:db:9e:01:3a:da:70:9c:02:d8:c9:6d:a3:fd:68:3a:
         e0:da:4c:23:d4:bc:5d:bb:74:65:95:83:ad:0e:ba:a9:22:7d:
         6f:79:8b:e7:b4:e3:b6:80:82:4d:8e:b5:a7:20:9a:ab:0a:9b:
         18:b5:eb:97:cd:e6:14:6c:90:b9:3a:7d:5c:81:d4:8e:59:5c:
         f6:3a:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org