Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          Lya74vzVzVIMEPWHH0GBjxTvbK2V2DQSrHuIwkDRxac=
Subject key identifier:   D0:28:F9:C2:C5:63:2F:37:4F:52:E8:07:4C:16:37:F0:C7:F8:E4:22
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       07B4BD39B91082478883764D73802223339947AF
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        186.194.214.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b4:bd:39:b9:10:82:47:88:83:76:4d:73:80:22:23:33:99:47:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=3082010A0282010100F31FC789DB1ABC8A0D65F42D16B99EEFDA47BA2E22BA964CAF74F61D0965CF532366E04D8FDA20C12E4D6F45CAD64F62D33E947F5E26FF1B28329A4191AE202E09D0B79336B1E25C3EF826E753EFE5188342B62CFB9BADE0753522862E4EAD3A357C390C944361E869E88C8298D5B85363179E092371A8FA4969C6D2140449CB85C3A94BE68E7AEB91426C24F17792C6D1FF317E1AC2DC52BBCB0145A6D357C1E096745322B3FE19A2437160E76F3C2BC8613BE1E77471351DE53537BD334863FC4EB21896950C8949FD9A63182C5BAD701F4BD3C6701766C4A5B9F8087192182D737D04AD062A1B3C9860B1A8578182A0D418E4B8081D984DADB96C873403D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1f:c7:89:db:1a:bc:8a:0d:65:f4:2d:16:b9:
                    9e:ef:da:47:ba:2e:22:ba:96:4c:af:74:f6:1d:09:
                    65:cf:53:23:66:e0:4d:8f:da:20:c1:2e:4d:6f:45:
                    ca:d6:4f:62:d3:3e:94:7f:5e:26:ff:1b:28:32:9a:
                    41:91:ae:20:2e:09:d0:b7:93:36:b1:e2:5c:3e:f8:
                    26:e7:53:ef:e5:18:83:42:b6:2c:fb:9b:ad:e0:75:
                    35:22:86:2e:4e:ad:3a:35:7c:39:0c:94:43:61:e8:
                    69:e8:8c:82:98:d5:b8:53:63:17:9e:09:23:71:a8:
                    fa:49:69:c6:d2:14:04:49:cb:85:c3:a9:4b:e6:8e:
                    7a:eb:91:42:6c:24:f1:77:92:c6:d1:ff:31:7e:1a:
                    c2:dc:52:bb:cb:01:45:a6:d3:57:c1:e0:96:74:53:
                    22:b3:fe:19:a2:43:71:60:e7:6f:3c:2b:c8:61:3b:
                    e1:e7:74:71:35:1d:e5:35:37:bd:33:48:63:fc:4e:
                    b2:18:96:95:0c:89:49:fd:9a:63:18:2c:5b:ad:70:
                    1f:4b:d3:c6:70:17:66:c4:a5:b9:f8:08:71:92:18:
                    2d:73:7d:04:ad:06:2a:1b:3c:98:60:b1:a8:57:81:
                    82:a0:d4:18:e4:b8:08:1d:98:4d:ad:b9:6c:87:34:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:28:F9:C2:C5:63:2F:37:4F:52:E8:07:4C:16:37:F0:C7:F8:E4:22
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:40:9d:31:94:b4:43:fa:77:26:89:c1:43:84:ee:49:63:19:
         c2:1e:c2:48:d8:4e:cf:47:7f:7b:fe:1f:dd:e6:7e:b3:21:9b:
         90:0f:84:5c:47:96:d3:58:7d:f4:af:77:1c:72:02:a3:eb:c9:
         2c:6f:cf:b7:8b:91:90:7d:21:20:dc:7f:f2:a0:5d:e1:df:a2:
         28:27:f0:28:6c:97:4d:c3:92:bf:28:ac:31:c5:67:83:01:30:
         55:cf:98:71:ed:55:1e:e5:7c:f5:9f:e8:60:65:d0:76:57:ce:
         b4:23:61:5a:2f:20:00:8e:a9:27:d1:c7:c2:75:7f:ef:3c:b3:
         2a:8a:1c:1e:7c:85:74:0c:e5:e4:16:ce:8b:72:c9:9d:a9:9b:
         4e:2b:01:cd:45:81:b9:c6:d3:ce:0a:c6:cd:99:b6:dc:63:8d:
         47:f6:cf:0a:94:87:5b:8f:5e:81:b4:f4:af:27:0a:0f:3b:07:
         be:a5:bb:b1:1f:5f:c5:ae:7b:87:19:82:1c:61:bb:ef:e6:81:
         2b:ca:6b:5f:59:10:19:ef:0b:be:6e:49:88:57:ed:ed:c4:86:
         ab:bb:38:64:80:bb:38:41:3e:2d:e0:69:2c:fe:f7:09:93:a1:
         08:b1:ac:7a:a7:c1:b1:74:42:66:8a:0e:27:f1:67:8e:fa:7e:
         4e:b1:58:ae
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUB7S9ObkQgkeIg3ZNc4AiIzOZR68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MDlaFw0yNTA0MDIxODMwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjMxRkM3ODlEQjFBQkM4QTBE
NjVGNDJEMTZCOTlFRUZEQTQ3QkEyRTIyQkE5NjRDQUY3NEY2MUQwOTY1Q0Y1MzIz
NjZFMDREOEZEQTIwQzEyRTRENkY0NUNBRDY0RjYyRDMzRTk0N0Y1RTI2RkYxQjI4
MzI5QTQxOTFBRTIwMkUwOUQwQjc5MzM2QjFFMjVDM0VGODI2RTc1M0VGRTUxODgz
NDJCNjJDRkI5QkFERTA3NTM1MjI4NjJFNEVBRDNBMzU3QzM5MEM5NDQzNjFFODY5
RTg4QzgyOThENUI4NTM2MzE3OUUwOTIzNzFBOEZBNDk2OUM2RDIxNDA0NDlDQjg1
QzNBOTRCRTY4RTdBRUI5MTQyNkMyNEYxNzc5MkM2RDFGRjMxN0UxQUMyREM1MkJC
Q0IwMTQ1QTZEMzU3QzFFMDk2NzQ1MzIyQjNGRTE5QTI0MzcxNjBFNzZGM0MyQkM4
NjEzQkUxRTc3NDcxMzUxREU1MzUzN0JEMzM0ODYzRkM0RUIyMTg5Njk1MEM4OTQ5
RkQ5QTYzMTgyQzVCQUQ3MDFGNEJEM0M2NzAxNzY2QzRBNUI5RjgwODcxOTIxODJE
NzM3RDA0QUQwNjJBMUIzQzk4NjBCMUE4NTc4MTgyQTBENDE4RTRCODA4MUQ5ODRE
QURCOTZDODczNDAzRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8x/HidsavIoNZfQtFrme79pHui4iupZMr3T2HQllz1MjZuBNj9og
wS5Nb0XK1k9i0z6Uf14m/xsoMppBka4gLgnQt5M2seJcPvgm51Pv5RiDQrYs+5ut
4HU1IoYuTq06NXw5DJRDYehp6IyCmNW4U2MXngkjcaj6SWnG0hQEScuFw6lL5o56
65FCbCTxd5LG0f8xfhrC3FK7ywFFptNXweCWdFMis/4ZokNxYOdvPCvIYTvh53Rx
NR3lNTe9M0hj/E6yGJaVDIlJ/ZpjGCxbrXAfS9PGcBdmxKW5+Ahxkhgtc30ErQYq
GzyYYLGoV4GCoNQY5LgIHZhNrblshzQD1QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FNAo+cLFYy83T1LoB0wWN/DH+OQiMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzgzNjJlMzEzOTM0MmUzMjMx
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNjM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG6wtYwDQYJKoZIhvcNAQELBQADggEBAJNAnTGUtEP6dyaJwUOE7kljGcIewkjY
Ts9Hf3v+H93mfrMhm5APhFxHltNYffSvdxxyAqPrySxvz7eLkZB9ISDcf/KgXeHf
oign8Chsl03Dkr8orDHFZ4MBMFXPmHHtVR7lfPWf6GBl0HZXzrQjYVovIACOqSfR
x8J1f+88syqKHB58hXQM5eQWzotyyZ2pm04rAc1FgbnG084Kxs2ZttxjjUf2zwqU
h1uPXoG09K8nCg87B76lu7EfX8Wue4cZghxhu+/mgSvKa19ZEBnvC75uSYhX7e3E
hqu7OGSAuzhBPi3gaSz+9wmToQixrHqnwbF0QmaKDifxZ476fk6xWK4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org