Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          Ttaenc/iOzkm1PuG6EVbWttsZWZQ39mvWQsS/zSGikQ=
Subject key identifier:   DB:43:13:B8:45:DE:AB:FE:23:62:0B:01:30:29:53:3D:A0:B7:94:9F
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       2366285B5EC1519D40594B184680CFAAE54E59F2
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     262691
IP address blocks:        186.194.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:66:28:5b:5e:c1:51:9d:40:59:4b:18:46:80:cf:aa:e5:4e:59:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e6:97:66:4b:44:c4:95:e0:05:4f:3f:5f:e6:
                    e7:75:7b:04:cb:60:80:b0:d3:f7:36:9f:96:a0:a2:
                    6d:1c:05:5d:5a:7b:8f:b7:d2:75:d4:c0:a3:e5:9b:
                    c9:4c:2c:0b:bc:0b:24:7d:ff:54:07:d2:e3:28:0c:
                    23:6a:4a:87:d0:fc:5d:67:d3:fa:3a:49:40:dc:f0:
                    52:c5:b8:d2:9f:08:4e:37:23:a2:5b:38:b4:11:9a:
                    58:73:83:5e:05:cc:85:ac:56:77:23:f6:fe:52:9a:
                    38:67:94:24:6e:df:74:85:2d:85:e3:a3:0b:a4:0d:
                    37:54:53:ff:bc:ab:c9:7c:60:1f:98:60:a4:05:28:
                    d0:7f:68:34:22:7c:92:c5:d0:6d:93:dc:99:40:50:
                    27:ae:c6:db:af:e3:33:de:c7:61:e6:9a:39:34:21:
                    2a:95:02:56:ae:d8:6b:98:94:25:2b:b5:70:69:36:
                    75:f2:f2:00:61:b5:cb:24:6e:51:b4:56:6c:aa:9a:
                    da:aa:61:f3:85:2e:19:83:fb:b6:fb:2a:e2:f4:74:
                    fa:b4:3c:25:73:eb:15:ce:7f:4d:95:ba:17:9f:5f:
                    fc:2e:93:8f:fb:2c:4c:90:80:68:90:8f:23:a6:d6:
                    1f:c7:ad:2f:6e:a3:6c:12:b2:21:ce:41:ba:83:db:
                    af:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:43:13:B8:45:DE:AB:FE:23:62:0B:01:30:29:53:3D:A0:B7:94:9F
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:f4:89:ff:b2:3f:d0:9a:a7:81:53:6e:1f:6c:05:38:b5:
         67:53:04:01:f1:a8:3b:bc:52:c7:1d:0a:fc:01:6c:03:1c:4b:
         0a:14:b7:c5:a0:77:6f:fb:0f:12:c0:7c:bd:b2:cc:41:60:33:
         59:84:75:2a:f1:06:63:3e:9a:aa:34:14:12:07:24:5d:6b:62:
         31:1a:b7:80:d5:63:13:aa:e3:6c:db:f3:f4:81:14:08:c7:be:
         2b:e0:cf:d2:3a:2d:12:49:75:9d:bd:3d:a3:fd:00:0a:2a:79:
         12:3d:b5:c9:f7:40:26:16:83:38:9f:cd:c3:85:4a:df:5a:aa:
         6b:c3:56:69:58:b0:06:9e:38:e8:c1:c3:60:a3:f2:85:81:0d:
         fe:15:90:a6:63:7b:ca:c2:a9:e6:12:2e:53:3a:9a:12:1b:00:
         52:28:56:5a:8b:e3:14:f2:3f:22:bf:d9:9e:76:27:7c:cb:33:
         41:56:81:6e:26:5d:14:d8:fd:c9:c4:14:e7:65:cb:18:2e:5a:
         69:f7:fe:ec:4e:5c:ad:78:a4:24:18:98:d1:36:54:9b:89:78:
         47:6f:7e:89:7a:3c:19:92:06:e4:01:f9:a8:05:5c:00:8f:9c:
         a2:9d:87:27:65:12:a0:98:94:ab:a7:81:0a:b8:d3:8f:10:29:
         33:5e:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org