Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa (raw, json)
Hash identifier:          zbV16dIJ9B2gFCOmlbgSlwggky4T0qmsp//sDTYnGw8=
Subject key identifier:   56:D5:09:0F:A6:BD:88:69:60:92:66:14:66:91:5D:96:41:9D:32:7F
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       6A73E54E06A45D4F6B2DC26BB03AE014EF0F40C1
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:18 +0000
ROA not before:           Wed 03 Apr 2024 18:25:18 +0000
ROA not after:            Wed 02 Apr 2025 18:30:18 +0000
asID:                     262691
IP address blocks:        187.94.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:e5:4e:06:a4:5d:4f:6b:2d:c2:6b:b0:3a:e0:14:ef:0f:40:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:18 2024 GMT
            Not After : Apr  2 18:30:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:65:9e:9f:29:89:25:69:f9:1b:ad:be:9f:
                    b2:db:81:79:5d:28:a6:e2:5b:c2:95:4c:1a:58:5c:
                    ad:c8:47:6a:03:68:bf:a0:11:76:07:a6:75:6c:50:
                    df:0b:5d:96:45:26:4e:fb:55:76:ad:94:08:84:f3:
                    5f:71:22:a0:49:d1:83:fb:f9:53:4f:68:d0:48:fd:
                    03:35:85:ac:dc:8d:c0:31:3b:cc:f3:c1:e1:05:f4:
                    d9:49:8c:fa:6c:2a:c7:30:07:48:6a:f6:8c:99:97:
                    0f:81:8f:5a:63:c4:1a:64:1f:73:e3:46:2a:50:b9:
                    89:1b:28:5a:5f:c2:dd:88:1d:b6:65:dd:5d:ec:9f:
                    13:d8:0b:1f:44:df:c5:cf:dc:6e:e1:15:a5:2b:b4:
                    a4:af:b5:cc:df:88:46:72:d2:a9:c6:e4:dc:44:34:
                    61:ac:fd:b4:75:55:0a:67:32:77:4d:1b:3c:23:1b:
                    64:8f:6e:4c:61:b3:fd:8d:f4:7f:06:c7:f6:1b:20:
                    7e:e3:73:15:7a:34:1c:8f:65:8e:de:eb:28:08:cc:
                    f0:ff:2b:ac:c5:68:58:4f:bd:0f:9f:50:da:55:c8:
                    fe:d5:c1:55:ac:9b:e9:88:b4:23:99:db:6a:67:18:
                    ff:90:12:40:8c:2f:7b:6d:3f:a2:db:9f:69:7e:e0:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D5:09:0F:A6:BD:88:69:60:92:66:14:66:91:5D:96:41:9D:32:7F
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32302d3230203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:f0:d5:0e:20:69:b7:94:46:51:9d:ce:47:0c:c1:e9:44:
         b2:8a:df:91:8a:58:22:a9:f6:ed:62:b9:9e:f9:3f:a3:7c:1b:
         f9:f7:bd:05:bb:bd:09:dd:fe:4d:44:d9:35:11:de:03:96:ad:
         e1:4a:21:70:45:d9:8d:d3:69:3d:b1:db:b3:86:cf:39:e5:ff:
         4e:57:91:ee:c6:68:58:81:63:b1:fc:a4:9d:33:a0:08:f3:96:
         62:0f:e7:b3:09:1a:cb:08:c1:b7:a1:26:2c:c4:04:1f:b5:67:
         b0:62:83:f0:20:a6:f0:02:54:14:cf:a8:c4:db:09:83:ab:be:
         35:be:c2:00:9d:d4:bd:11:08:4f:be:7e:8b:9c:78:5f:c4:a3:
         f8:98:ec:db:76:0e:53:c0:0f:86:f3:7c:41:a2:c4:bd:c8:34:
         8e:1b:1d:59:57:94:fb:b7:d1:6e:4e:f1:86:06:bb:d5:70:98:
         bb:67:7c:05:12:2c:19:f0:05:bf:ae:83:26:13:ae:85:56:2f:
         57:98:37:5f:26:a1:3c:aa:36:ab:5d:e4:01:94:f6:a5:42:38:
         b2:5c:7f:f6:36:3d:2e:aa:a0:36:fa:0b:3f:2e:58:57:14:f6:
         1d:03:32:9a:87:35:3d:36:e9:af:49:b9:06:aa:d7:57:77:45:
         67:16:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org