Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa
File:                     3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          lVPrt7wYdyNoZx/EbwSLGB2Rta15FqWcHuH+c1vAG6c=
Subject key identifier:   D4:9D:0A:67:93:EF:D3:25:03:22:16:CF:72:E6:9F:28:FF:05:BB:8E
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       09394828BAD3699A108294AC364B2D723B535894
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262691
IP address blocks:        186.194.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:39:48:28:ba:d3:69:9a:10:82:94:ac:36:4b:2d:72:3b:53:58:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:c4:ba:90:45:77:cb:d2:58:e5:75:6a:55:
                    c0:f9:12:6e:f9:66:9a:83:81:b5:d1:48:92:f8:b1:
                    c5:f1:52:76:e3:a1:06:6f:4e:31:1b:28:0e:11:78:
                    11:0a:4a:4e:73:fd:5a:fa:20:93:88:fc:d3:76:47:
                    a5:21:48:78:6c:a5:00:8e:d8:3d:bc:19:0b:35:99:
                    bb:07:62:83:76:ea:25:6c:0e:60:6b:d3:fc:f0:68:
                    d3:54:5e:15:12:e6:ae:60:68:87:22:4e:60:96:5d:
                    75:46:a1:96:89:11:62:75:fe:25:5c:f3:0c:d2:f7:
                    c7:48:76:9a:bb:0c:26:e6:91:48:b4:8a:44:c2:49:
                    d6:48:b2:c6:d0:ea:24:6e:00:ba:b2:f5:cb:70:a1:
                    1e:ce:4e:cc:54:bf:29:27:d3:af:e9:7f:fa:88:b9:
                    5c:43:7f:e1:d5:5d:c1:7e:c5:bb:83:e5:fa:31:cc:
                    b5:1b:57:df:a5:88:a0:62:07:db:b2:86:66:0a:cb:
                    dd:84:a5:2e:bc:57:82:5e:ac:e8:64:1d:96:ef:77:
                    b3:5b:57:fe:0e:ca:10:10:f7:21:56:8e:3d:11:9a:
                    1c:d6:eb:cb:6b:6c:c0:b7:06:19:11:15:2a:c0:bf:
                    3b:9d:09:83:72:10:36:b1:d8:b5:7d:af:5d:c4:e7:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9D:0A:67:93:EF:D3:25:03:22:16:CF:72:E6:9F:28:FF:05:BB:8E
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138362e3139342e3232322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:5d:96:85:72:41:03:0e:39:ad:99:d1:48:09:fb:7f:3e:bd:
         87:39:84:82:78:97:d5:8b:5f:20:a0:23:be:f8:c8:1a:2a:a2:
         ae:9e:07:a9:09:55:b4:3c:1d:26:43:af:3f:98:e5:14:0b:0e:
         1a:97:cc:d7:b1:b9:ad:b9:d1:c9:44:17:07:d7:21:43:00:ec:
         62:d9:8c:8d:82:82:33:5f:4c:a1:52:7a:ec:5f:81:65:9d:34:
         94:91:13:6c:ed:b9:ca:99:38:6b:7f:74:db:c1:03:75:ec:d6:
         eb:85:d5:1c:21:61:4c:7f:91:0d:3d:bb:d4:97:d1:ec:9f:ba:
         b9:d3:d8:21:ff:83:4e:d6:ce:66:20:24:6a:1b:3e:9b:07:4a:
         4b:08:04:f3:aa:5c:34:d9:63:ce:f9:c5:6c:80:42:03:75:9d:
         e5:e6:a2:19:9e:31:48:75:45:05:11:43:09:f6:16:ef:d1:e8:
         3d:81:76:2f:37:04:9f:7b:fd:82:c1:31:59:0e:b2:5f:59:43:
         c2:2f:8e:c8:8f:34:c4:3d:99:c3:1b:b9:9f:8b:6e:35:73:c7:
         05:a0:44:c5:63:5c:42:f1:60:a9:ed:05:d8:fa:e6:a0:32:06:
         52:04:58:f0:a1:37:0c:1c:aa:d9:11:96:88:39:16:55:3e:7e:
         92:88:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org