Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa
File:                     3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          J6aKGceL5atwwiqJ7MfO5TVuGhZQKsaGtYgnAoyahbs=
Subject key identifier:   63:C6:68:DE:9D:0D:73:15:57:9F:97:19:FA:FB:EB:68:34:65:C8:0B
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       6E1883FD8691C283F06BC103C8EAB333DDB5B567
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:19 +0000
ROA not before:           Wed 03 Apr 2024 18:25:19 +0000
ROA not after:            Wed 02 Apr 2025 18:30:19 +0000
asID:                     262691
IP address blocks:        186.194.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:18:83:fd:86:91:c2:83:f0:6b:c1:03:c8:ea:b3:33:dd:b5:b5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:19 2024 GMT
            Not After : Apr  2 18:30:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:e0:7d:86:89:9c:36:b4:dc:c1:1e:e1:3d:
                    08:e7:62:b9:7d:39:ce:fc:07:c3:1e:f3:70:a9:1d:
                    88:54:9a:b6:f5:5c:f8:0f:d5:8a:01:f2:db:0e:c3:
                    f6:2e:86:db:97:ba:68:a6:82:70:d2:40:a6:29:43:
                    28:f4:da:f1:d8:73:2b:b6:a3:e1:48:e4:ed:e0:82:
                    c2:85:e8:fb:07:e6:a8:c4:3c:d4:1a:ac:73:44:fd:
                    31:36:2d:0c:95:51:50:8e:f4:e7:98:07:95:b4:14:
                    7f:3a:11:96:88:c1:33:4e:0d:01:fb:30:b9:a7:f4:
                    c4:cc:3f:b5:f3:8f:0c:51:91:88:42:10:37:b5:95:
                    bf:10:fe:e4:87:8f:59:80:ba:c8:5b:e0:78:54:ed:
                    d4:0b:52:5b:b1:97:fb:db:6f:49:48:87:bd:68:18:
                    97:c8:a0:75:9a:fc:81:fa:c1:fe:69:b1:5b:5b:2a:
                    4a:19:ea:26:52:50:44:76:fe:4c:a3:5b:a4:3e:50:
                    bf:e1:e7:c0:1f:9d:2c:dd:17:70:85:c4:15:67:17:
                    99:04:82:25:41:b6:e4:e0:02:19:67:62:f7:74:46:
                    05:5c:d6:c0:3d:e7:23:f9:ae:ed:c4:27:69:70:91:
                    3f:8f:83:d5:57:47:a3:a8:44:72:d9:fc:fc:7f:c2:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C6:68:DE:9D:0D:73:15:57:9F:97:19:FA:FB:EB:68:34:65:C8:0B
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3232302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:16:e5:8f:9f:e0:06:91:7c:8c:c3:af:ec:8a:c5:88:ec:64:
         11:bd:15:69:b1:c4:57:0a:89:3e:d0:07:4d:3b:18:78:51:c3:
         46:88:a3:91:f1:ae:0c:93:d1:90:08:7b:86:98:da:9f:0c:d5:
         63:e9:0b:8b:ae:af:f9:cf:d9:a8:b1:d7:79:8d:f7:d6:b6:14:
         31:e1:eb:37:31:e9:7b:17:b9:34:78:16:a0:77:11:46:ee:9a:
         eb:60:05:a3:ad:c2:80:87:81:b7:6b:0e:75:9f:64:bb:4c:45:
         bd:5e:75:73:d0:71:e5:f5:4c:92:09:e3:f3:c1:ff:20:ea:38:
         c8:2f:fd:a6:03:27:00:59:4f:fb:6b:e3:59:29:1f:72:ea:6e:
         7f:a2:ab:7c:be:6f:77:3a:13:c8:42:8e:11:4f:07:bc:9d:a5:
         9d:df:4e:34:28:59:db:94:4e:03:9d:87:08:4b:a6:30:87:2c:
         d7:33:0e:c3:2a:d3:a0:28:96:b0:c0:14:3f:0b:ef:2c:e7:6e:
         84:53:c2:e2:33:e1:53:87:34:46:9b:15:3e:b5:b7:37:5a:36:
         de:e7:d5:e6:d1:1b:52:c4:18:38:f8:6a:37:c2:4e:b8:51:ac:
         c8:62:24:1d:e3:c9:06:52:6d:6a:46:b7:bd:b3:21:0f:6c:45:
         da:5f:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org