Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa
File:                     3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          YUp/1NgOHbQjdLrkSuaK1rQmWp21D7eDPne7nnlIRWk=
Subject key identifier:   AB:E5:98:4C:EB:24:4D:66:CE:3C:86:EB:D3:79:57:C1:5F:A4:FE:A9
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       1E23C39E04B7ACE241E1A9235A9AFB36ADC2DD00
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        186.194.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:23:c3:9e:04:b7:ac:e2:41:e1:a9:23:5a:9a:fb:36:ad:c2:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:5c:5f:9c:1b:6a:fa:d2:74:c4:06:2a:94:
                    5c:fd:08:cc:0c:e7:cf:0a:ee:f9:14:3b:82:ab:50:
                    37:82:d3:11:63:b1:80:14:d7:45:f4:c9:7c:b3:36:
                    66:07:c6:e0:c8:6c:d7:43:f5:6e:ea:ae:13:6e:79:
                    0c:03:c1:35:44:37:a1:c1:ba:e3:ad:6d:05:ab:c3:
                    42:4d:c9:1f:bf:f4:24:9c:3c:59:05:ba:d0:06:54:
                    5b:be:22:b8:03:13:9c:ba:98:e5:ff:2e:c8:cc:c1:
                    32:33:5e:ac:dc:b8:c3:a8:2c:a9:70:32:c5:a5:cf:
                    28:fd:34:46:e9:26:15:5d:d3:dc:18:6d:27:07:bf:
                    69:10:67:ff:2c:96:c5:05:ab:cf:3a:09:d7:9b:7e:
                    5f:44:45:8f:e3:92:ec:8e:f5:96:b8:84:29:b3:46:
                    ad:95:e0:2e:d6:4e:25:40:ed:37:8a:d8:4e:30:01:
                    b5:c6:66:78:04:9d:86:94:6b:8c:7a:a5:31:d7:0f:
                    1c:40:55:a1:70:8f:81:d1:bd:7c:0a:db:9d:8a:24:
                    18:65:cb:91:14:c6:cf:92:4e:58:22:e0:73:1c:d4:
                    7e:19:43:03:61:0b:83:f4:66:42:7c:b9:29:be:40:
                    9e:56:2c:35:45:d7:3a:16:b4:5a:78:92:dc:fa:2e:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:98:4C:EB:24:4D:66:CE:3C:86:EB:D3:79:57:C1:5F:A4:FE:A9
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:46:f9:81:c8:f4:f5:c1:e6:16:89:96:70:08:df:f1:2e:22:
         f5:8d:0a:c7:16:b0:e8:36:e0:6d:b5:41:26:9c:70:7c:c7:bd:
         06:d3:68:31:0a:81:eb:18:42:f9:42:99:52:b0:03:aa:27:38:
         de:3c:a9:ad:df:86:01:03:68:ef:3c:9c:f0:9f:3b:9e:34:68:
         fb:10:6a:ee:5c:0d:61:9d:c8:40:ca:ed:56:27:58:c9:31:eb:
         c0:8e:2a:0b:bf:a1:9a:d0:46:ce:23:f7:83:d2:30:34:96:10:
         69:f2:a0:72:b1:07:b9:2c:88:f2:f5:70:db:86:2d:fc:d6:a7:
         b6:32:83:1c:5a:9c:23:dd:0e:a8:4f:b9:4e:f4:ec:00:c3:d9:
         33:1a:2b:24:43:13:7f:a3:1c:cb:b5:1c:5a:df:bb:d6:01:c1:
         4f:5f:dd:c3:35:b1:ba:b9:b3:4b:2b:73:2a:b3:7f:11:bb:55:
         51:af:33:f7:ea:39:5f:29:6e:f7:a0:d0:6b:f6:39:c0:55:3d:
         2c:04:b3:9e:a4:af:12:10:dc:5b:6a:70:96:e4:46:ce:50:21:
         86:1d:50:8d:67:4f:21:0a:da:f6:1e:2d:8e:ec:22:93:95:22:
         2e:81:be:50:06:07:f8:d8:20:e7:5b:ab:14:d8:b5:8c:86:29:
         64:86:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org