Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          IUNgswQoxz6K1mt3H0nlkbjb2gkVPreQiyQtF7Q21IQ=
Subject key identifier:   E0:8A:BB:BD:2B:95:22:80:8B:4D:25:AF:35:3C:1F:F0:C4:3B:74:BF
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       41302DC40D3FF8A034CB8B6C460EE0284AF825E2
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     262691
IP address blocks:        187.94.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:30:2d:c4:0d:3f:f8:a0:34:cb:8b:6c:46:0e:e0:28:4a:f8:25:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:75:04:8f:53:74:6d:f5:5f:51:07:d3:77:
                    4d:59:3d:94:c4:8d:43:99:19:2a:d9:39:25:91:4a:
                    66:fd:6d:89:4a:04:b1:19:12:51:cf:5f:f2:b8:6b:
                    da:8c:03:a3:b4:7a:d3:69:3e:36:bc:55:f3:02:bc:
                    43:5b:ea:24:77:24:b7:f9:1a:51:6b:3e:b9:b8:a9:
                    cc:3e:a8:6a:24:ad:4a:2f:9c:49:d1:67:b9:1e:08:
                    1a:96:10:79:57:92:af:85:4f:4b:13:43:4e:d0:b7:
                    74:c7:38:3e:d9:89:12:56:b7:7b:6a:8e:6c:d6:2c:
                    6b:f6:c6:ad:07:95:61:ee:5c:02:78:72:a4:95:b3:
                    25:08:34:b6:41:2b:14:f0:43:da:3a:fa:ed:54:aa:
                    8d:61:a5:3a:ec:9e:c5:55:5f:0b:d7:ff:c4:23:06:
                    f5:e3:62:e6:d9:ea:2e:06:f6:c9:64:06:be:f8:96:
                    f5:cc:04:e8:1b:eb:f3:2f:c0:d2:c6:7c:83:81:25:
                    4a:3d:f0:bd:13:e6:f2:22:57:53:da:05:f1:7e:55:
                    af:ad:45:1c:2d:88:dd:67:84:4d:86:4a:75:23:a7:
                    58:16:05:bd:0c:f7:32:55:8c:69:fa:c5:9e:d0:78:
                    ee:a3:d0:91:e9:70:0b:5e:57:67:7a:91:6b:37:48:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8A:BB:BD:2B:95:22:80:8B:4D:25:AF:35:3C:1F:F0:C4:3B:74:BF
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:a0:a7:87:0e:41:ed:72:e9:e3:49:d4:46:ad:36:16:fc:
         90:ff:b8:3d:dd:ad:fb:da:0a:16:05:a2:c5:e0:1b:cb:fa:e2:
         95:1e:1c:1a:39:11:73:e0:57:a2:c7:dd:10:9c:c5:15:86:5c:
         9f:86:9d:fe:2c:9a:26:dc:31:47:d0:cc:7c:b3:72:08:70:ad:
         32:86:30:f6:ee:c7:ef:6c:88:f7:62:04:76:f9:26:0a:2f:ba:
         e6:df:83:94:ff:ed:67:15:e4:49:f6:53:13:5e:9e:38:1c:5d:
         22:3b:07:3a:e4:19:43:91:14:16:8d:58:a9:55:9c:e9:9e:7c:
         dc:fd:44:fe:9e:d6:d5:84:aa:48:92:9f:fc:7f:9b:39:77:b8:
         96:e6:8f:c2:08:a2:89:eb:f8:fb:4b:40:9c:20:b3:77:5f:cc:
         ee:4a:c9:a1:95:1b:06:01:13:e3:88:be:ae:ec:c2:ab:02:4d:
         03:88:b6:37:5c:b7:80:38:5c:22:e2:ae:be:ca:d5:4f:96:d1:
         0e:d4:46:6d:82:eb:d0:97:a7:33:86:e9:10:5a:97:bf:de:fc:
         42:19:84:35:18:cc:e8:a9:5b:1c:67:ab:f6:dd:d8:e7:20:e1:
         e3:36:b6:28:9e:76:3c:c1:33:9c:b4:e4:35:ed:7d:20:fe:be:
         63:e7:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org