Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          9OfI5f+xIAu1o3uNW+LicmM85yNt7ptOHdVGsvepK7Y=
Subject key identifier:   16:C1:67:6E:82:8D:98:CF:22:95:09:5D:E1:EE:FE:4B:45:05:05:87
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       40B1FD0815EAE786F529F7C587AD83066ED38840
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        186.194.216.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b1:fd:08:15:ea:e7:86:f5:29:f7:c5:87:ad:83:06:6e:d3:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:c0:8c:25:9b:1a:bd:1c:db:7b:33:39:cc:
                    ef:69:4b:1f:0e:c7:cf:5b:31:53:9b:dd:f5:5f:eb:
                    87:64:91:0c:02:71:43:74:53:a2:d4:6f:0f:8e:57:
                    c1:04:6c:24:87:23:76:71:61:78:d4:18:0a:6d:af:
                    0f:76:35:e3:2d:b2:55:ea:46:79:18:57:cb:7d:9f:
                    37:a4:f4:99:da:c8:33:12:d2:e3:cf:cb:e2:0e:cb:
                    00:e2:f0:d6:62:05:11:38:41:90:08:db:8c:dc:00:
                    86:55:9d:3e:ba:05:94:d5:1a:b6:89:d8:44:22:ab:
                    4a:71:cc:22:97:0d:ea:7a:9a:81:b0:47:ac:6d:09:
                    80:fa:c0:07:ef:ba:2f:b8:e9:d9:cd:bb:cd:d7:d4:
                    8e:41:b3:a1:85:6f:5c:7b:76:76:5a:9f:3c:e4:72:
                    95:5e:89:5e:cb:09:b3:88:12:d3:80:04:82:c1:d1:
                    04:a4:d0:9a:98:10:e7:c1:42:66:cf:70:49:a8:30:
                    25:c3:a8:e5:0d:71:e5:77:c0:cc:f7:1a:f3:bf:a8:
                    07:2e:1f:69:01:54:c9:c8:e1:41:d6:db:8c:59:e3:
                    66:32:2c:1d:f0:59:fa:48:ee:d5:7c:c5:75:dd:1b:
                    6d:73:0b:e6:27:e6:d8:e6:84:f3:19:01:b7:ef:74:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:67:6E:82:8D:98:CF:22:95:09:5D:E1:EE:FE:4B:45:05:05:87
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:90:f0:40:5f:b1:4b:c2:3b:09:18:79:2f:f3:51:5e:eb:01:
         82:54:c0:c7:ce:2e:d0:f1:c6:ec:94:4d:8e:06:fe:6a:e7:d1:
         d4:df:3b:4c:61:45:0d:9b:cb:b0:b7:06:d0:29:1b:ad:cf:6a:
         77:c8:21:a2:41:dc:59:d6:e7:55:d0:e9:e3:f7:99:cb:20:8a:
         49:d4:11:44:f4:8c:bc:26:61:c7:6e:c2:1b:1d:63:f9:eb:ef:
         29:4c:b4:be:1a:5e:0e:80:06:2a:89:fa:80:07:fd:cd:ca:83:
         90:fa:75:87:fa:ce:99:93:e3:e7:d2:e2:4b:27:9d:5c:67:d6:
         f1:b1:a1:e3:30:6a:39:e4:1a:8f:cd:9b:74:ec:c0:9e:b6:ea:
         9f:0b:3b:5c:e5:08:82:02:76:d4:c4:b1:db:13:bc:f6:69:30:
         70:c6:05:23:5b:9d:3a:3b:54:74:06:64:bb:2a:cc:c1:26:86:
         55:4b:45:7a:c3:01:f9:dc:6d:31:57:8e:72:5c:fe:13:dd:79:
         93:d3:51:7a:1b:b7:83:f7:4a:e4:69:d9:1e:cb:71:43:5a:a1:
         dd:97:69:33:06:1c:2a:ae:cb:f8:38:0e:d6:a2:b0:e5:e7:4f:
         ea:16:40:84:f9:8b:0b:dd:30:46:ba:0b:e4:a0:4c:35:60:24:
         5e:52:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org