Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          WpEE6wCxkP+w4AQl4yoljVAh1mjBt/Hcm48/vIZ4I+U=
Subject key identifier:   09:1B:40:B4:40:C5:7B:EE:C9:61:9A:4C:44:A2:F9:AF:5F:07:B6:4E
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       16A2BB2A09CCB51C3F84A15533B7969FDB2F3166
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        186.194.218.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a2:bb:2a:09:cc:b5:1c:3f:84:a1:55:33:b7:96:9f:db:2f:31:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:de:0a:0c:2f:06:6f:3d:9b:61:78:44:98:
                    71:53:3c:1e:78:40:67:bc:fe:42:ea:73:2e:48:7f:
                    17:5e:76:d0:1b:fa:72:cd:66:a8:bf:e4:ac:ac:91:
                    d7:10:1a:44:b5:c4:32:89:98:b5:8a:56:e7:ba:71:
                    8d:2b:87:a1:2b:65:5a:c1:db:e9:51:34:c3:e7:af:
                    d1:17:f7:ef:25:19:7a:54:df:41:af:6c:6e:2d:22:
                    17:6e:e9:ae:dd:97:88:6c:15:3f:9b:fb:32:41:b3:
                    82:cc:03:6b:e0:e3:a1:de:ba:b8:23:0b:01:79:f1:
                    17:17:96:8f:b9:54:c0:a9:16:6b:e7:c8:fb:3b:48:
                    28:3e:2c:f6:81:2c:6b:cc:5a:8f:93:d5:d0:12:5d:
                    63:04:02:d8:4e:4f:cc:00:15:f1:c3:07:f2:1d:0d:
                    c3:98:88:43:5f:72:06:8d:8a:84:1c:c8:3c:61:9a:
                    11:ce:01:86:f1:b0:7e:fc:b6:e6:88:23:b5:7b:c3:
                    20:49:b4:7c:0e:18:7f:04:9f:16:d9:4a:be:7f:ac:
                    5a:b1:fe:fc:52:73:6d:9c:cf:de:46:87:a9:ab:21:
                    f8:66:6d:84:ec:9a:e8:9f:21:37:80:c6:e8:6b:cf:
                    a8:06:f9:ba:db:32:ed:bb:88:8b:ca:b5:54:a2:30:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1B:40:B4:40:C5:7B:EE:C9:61:9A:4C:44:A2:F9:AF:5F:07:B6:4E
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3231382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:89:69:06:a1:fe:f7:cd:96:14:19:da:ee:03:31:36:2b:a2:
         22:d1:e9:4a:3e:97:e7:95:b1:04:7f:2d:00:21:35:f6:85:83:
         e0:47:f7:b7:11:3e:51:46:f2:8b:b1:f8:8e:f6:d2:a8:76:a3:
         d1:a1:cc:d2:47:89:23:13:5a:06:4f:a2:a8:ae:a5:f6:0a:9a:
         77:68:80:a7:0a:7d:d9:8c:cf:5c:29:0b:0f:3f:7d:09:e5:c6:
         cd:9e:56:63:65:76:c0:d3:9d:28:8f:fd:fa:94:1f:99:dc:dd:
         70:ae:da:73:4b:f6:cf:8b:ba:53:09:33:df:8c:3a:35:24:6b:
         38:01:cd:f7:db:66:9d:70:c5:84:a8:e2:ac:dd:8f:2e:5a:52:
         90:09:74:b0:65:6f:b1:94:6f:53:9f:aa:89:1e:7e:20:86:77:
         a7:93:e6:b7:71:3f:5a:d9:2c:ab:be:52:28:79:d8:a8:d4:d7:
         24:c3:a1:73:c5:62:f1:2d:a2:31:b1:e8:a5:b4:b3:4d:b5:23:
         05:23:58:1c:e6:34:55:6d:20:cc:a7:75:85:75:87:75:13:46:
         cb:fa:12:12:e7:7e:26:74:a1:78:05:51:69:63:70:45:78:72:
         45:df:c4:cb:e2:0a:14:39:0f:ea:15:d4:9c:2e:5f:ab:90:12:
         d5:27:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org