Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231322e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          jJohJcELuDVBis86PZ7F40lrcJG9v+4WQwn27SCjouo=
Subject key identifier:   41:A2:49:86:A2:F9:C6:3D:C3:D1:40:69:E6:8A:02:6E:15:49:94:8E
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       2183C591AAD9F819EF2A2430A4A7268AE85CD849
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     262691
IP address blocks:        186.194.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:83:c5:91:aa:d9:f8:19:ef:2a:24:30:a4:a7:26:8a:e8:5c:d8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:3e:3a:2e:db:13:5b:cf:a1:aa:8e:f9:dd:
                    33:94:88:26:77:0e:0c:ca:3e:24:47:9f:c4:ce:2f:
                    ad:8b:f3:4b:e6:2c:82:b4:7c:33:4c:07:54:12:69:
                    ac:8f:9c:61:ea:2b:5f:8d:71:46:55:61:03:b0:a3:
                    5d:63:07:94:e7:30:bf:c7:a2:80:89:6f:e0:76:ad:
                    00:36:83:ab:04:3e:b5:8b:26:bd:6c:96:07:fe:a1:
                    73:38:98:b3:a3:9d:ae:71:3a:66:42:08:dd:62:28:
                    9d:7c:d8:88:b3:5f:dd:64:4d:0f:bd:6d:de:25:89:
                    69:ce:0c:fd:f7:2f:0f:98:1b:e6:e7:d3:88:05:9d:
                    7e:69:54:b5:4e:f3:e8:7a:d9:f3:7b:32:03:02:4a:
                    f1:76:cb:ad:a9:78:8e:b9:15:44:2e:e8:17:31:64:
                    1a:78:1d:d5:d8:35:ba:87:33:3b:cf:fd:76:bf:22:
                    2f:ae:79:87:a1:93:64:f0:e6:c5:a1:25:ee:13:b5:
                    c5:56:95:51:f2:15:e4:8d:23:51:0c:2b:78:78:b8:
                    1c:d2:ef:a6:91:a2:44:18:63:61:cc:7b:e0:32:55:
                    d3:3c:88:a5:2e:32:dc:23:18:4f:a2:ad:36:f7:7b:
                    f3:be:ef:58:0f:6d:d2:3a:cc:96:86:1c:cf:83:5b:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A2:49:86:A2:F9:C6:3D:C3:D1:40:69:E6:8A:02:6E:15:49:94:8E
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:10:4a:9f:0f:c3:31:50:13:a6:69:91:db:18:bf:78:e2:45:
         75:04:04:d1:c6:8a:90:e1:d1:09:24:f3:11:7a:45:91:3e:a5:
         38:5b:cb:bc:75:64:92:ad:c7:0c:a1:53:5d:96:d9:bc:02:bc:
         3c:5c:b5:8a:dd:65:0f:e5:78:c5:25:50:45:f4:84:0d:a3:a8:
         27:1a:71:24:91:83:32:e5:33:50:40:ad:65:ef:41:e5:ca:af:
         19:4f:b8:17:b0:7d:ec:c8:22:7b:aa:02:8b:e1:9a:4f:50:2f:
         d1:b8:54:a5:c5:9a:d8:35:77:5b:ec:3d:72:db:c6:0c:ca:67:
         89:c3:4f:32:8f:bb:18:36:3a:eb:8b:1b:ee:d2:3d:09:08:f3:
         7e:2c:4a:be:99:bc:ef:aa:51:2e:cd:c9:5c:23:7e:1f:1e:e1:
         67:bd:aa:53:6a:ef:a0:7e:bc:d8:ae:01:de:e2:85:fd:21:cd:
         dd:35:b5:39:c1:5f:ad:c9:06:6b:fb:76:76:33:ff:a4:72:cd:
         5a:6e:6f:45:27:da:8d:9b:d3:7f:98:93:8e:e0:4a:5c:01:35:
         da:71:dd:24:ad:80:d3:5d:c1:51:f5:71:4c:a0:48:76:60:28:
         9b:3c:52:fe:7b:27:f7:81:54:99:3b:0d:70:a9:48:e2:78:51:
         4f:d0:3b:d9
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUIYPFkarZ+BnvKiQwpKcmiuhc2EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTJaFw0yNTA0MDIxODMwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgxRjNFM0EyRURCMTM1QkNG
QTFBQThFRjlERDMzOTQ4ODI2NzcwRTBDQ0EzRTI0NDc5RkM0Q0UyRkFEOEJGMzRC
RTYyQzgyQjQ3QzMzNEMwNzU0MTI2OUFDOEY5QzYxRUEyQjVGOEQ3MTQ2NTU2MTAz
QjBBMzVENjMwNzk0RTczMEJGQzdBMjgwODk2RkUwNzZBRDAwMzY4M0FCMDQzRUI1
OEIyNkJENkM5NjA3RkVBMTczMzg5OEIzQTM5REFFNzEzQTY2NDIwOERENjIyODlE
N0NEODg4QjM1RkRENjQ0RDBGQkQ2RERFMjU4OTY5Q0UwQ0ZERjcyRjBGOTgxQkU2
RTdEMzg4MDU5RDdFNjk1NEI1NEVGM0U4N0FEOUYzN0IzMjAzMDI0QUYxNzZDQkFE
QTk3ODhFQjkxNTQ0MkVFODE3MzE2NDFBNzgxREQ1RDgzNUJBODczMzNCQ0ZGRDc2
QkYyMjJGQUU3OTg3QTE5MzY0RjBFNkM1QTEyNUVFMTNCNUM1NTY5NTUxRjIxNUU0
OEQyMzUxMEMyQjc4NzhCODFDRDJFRkE2OTFBMjQ0MTg2MzYxQ0M3QkUwMzI1NUQz
M0M4OEE1MkUzMkRDMjMxODRGQTJBRDM2Rjc3QkYzQkVFRjU4MEY2REQyM0FDQzk2
ODYxQ0NGODM1QjAyNzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyB8+Oi7bE1vPoaqO+d0zlIgmdw4Myj4kR5/Ezi+ti/NL5iyCtHwz
TAdUEmmsj5xh6itfjXFGVWEDsKNdYweU5zC/x6KAiW/gdq0ANoOrBD61iya9bJYH
/qFzOJizo52ucTpmQgjdYiidfNiIs1/dZE0PvW3eJYlpzgz99y8PmBvm59OIBZ1+
aVS1TvPoetnzezIDAkrxdsutqXiOuRVELugXMWQaeB3V2DW6hzM7z/12vyIvrnmH
oZNk8ObFoSXuE7XFVpVR8hXkjSNRDCt4eLgc0u+mkaJEGGNhzHvgMlXTPIilLjLc
IxhPoq0293vzvu9YD23SOsyWhhzPg1sCcwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FEGiSYai+cY9w9FAaeaKAm4VSZSOMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzgzNjJlMzEzOTM0MmUzMjMx
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG6wtQwDQYJKoZIhvcNAQELBQADggEBAJIQSp8PwzFQE6ZpkdsYv3jiRXUEBNHG
ipDh0Qkk8xF6RZE+pThby7x1ZJKtxwyhU12W2bwCvDxctYrdZQ/leMUlUEX0hA2j
qCcacSSRgzLlM1BArWXvQeXKrxlPuBewfezIInuqAovhmk9QL9G4VKXFmtg1d1vs
PXLbxgzKZ4nDTzKPuxg2OuuLG+7SPQkI834sSr6ZvO+qUS7NyVwjfh8e4We9qlNq
76B+vNiuAd7ihf0hzd01tTnBX63JBmv7dnYz/6RyzVpub0Un2o2b03+Yk47gSlwB
Ndpx3SStgNNdwVH1cUygSHZgKJs8Uv57J/eBVJk7DXCpSOJ4UU/QO9k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org