Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          hSEkV2dLxsMHRSGVyANaYJljBWICr2O1+5AAJxtvD1g=
Subject key identifier:   6D:14:7D:ED:C6:A2:9B:0D:A2:B9:8D:20:20:16:DD:50:23:F7:02:3B
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       31A9751A8CFB5C07EBD69A2D2F82DC51A7D41702
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        187.94.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a9:75:1a:8c:fb:5c:07:eb:d6:9a:2d:2f:82:dc:51:a7:d4:17:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject: CN=3082010A0282010100B172B97C5D443981881421C19BA51330EAF572378D602DAAAE77C99587D58FFB58D84085F984B5CFA7840E4356054326ECFA6112943CD1EA8C06EEF0DF35085DEF91A403674BFF27B4D5D528F92056D005529135F8C696294A5576C218C5571722F265E62DD5448530834E1AC10F43BF5859C99E0A778B57BA78AE5C2BDF9510FCF5DC3F92FC3AB99E7C1FEA52CA101432CEB0095E1B1451B36B91ED71FBEC110B022A790870AADDD8D1F67FD42030871AF00C2247D526192D5CB5146AD1C75721056C5786C3CAF81DD771B39E539D184D6D637DEACC505D45C12E99891846DB237107C624D964E227F8EA935C43A98D186E1F9507385DD6CB6EE78F1F66EC310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:b9:7c:5d:44:39:81:88:14:21:c1:9b:a5:
                    13:30:ea:f5:72:37:8d:60:2d:aa:ae:77:c9:95:87:
                    d5:8f:fb:58:d8:40:85:f9:84:b5:cf:a7:84:0e:43:
                    56:05:43:26:ec:fa:61:12:94:3c:d1:ea:8c:06:ee:
                    f0:df:35:08:5d:ef:91:a4:03:67:4b:ff:27:b4:d5:
                    d5:28:f9:20:56:d0:05:52:91:35:f8:c6:96:29:4a:
                    55:76:c2:18:c5:57:17:22:f2:65:e6:2d:d5:44:85:
                    30:83:4e:1a:c1:0f:43:bf:58:59:c9:9e:0a:77:8b:
                    57:ba:78:ae:5c:2b:df:95:10:fc:f5:dc:3f:92:fc:
                    3a:b9:9e:7c:1f:ea:52:ca:10:14:32:ce:b0:09:5e:
                    1b:14:51:b3:6b:91:ed:71:fb:ec:11:0b:02:2a:79:
                    08:70:aa:dd:d8:d1:f6:7f:d4:20:30:87:1a:f0:0c:
                    22:47:d5:26:19:2d:5c:b5:14:6a:d1:c7:57:21:05:
                    6c:57:86:c3:ca:f8:1d:d7:71:b3:9e:53:9d:18:4d:
                    6d:63:7d:ea:cc:50:5d:45:c1:2e:99:89:18:46:db:
                    23:71:07:c6:24:d9:64:e2:27:f8:ea:93:5c:43:a9:
                    8d:18:6e:1f:95:07:38:5d:d6:cb:6e:e7:8f:1f:66:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:7D:ED:C6:A2:9B:0D:A2:B9:8D:20:20:16:DD:50:23:F7:02:3B
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:e3:45:62:2f:2d:c1:fd:f3:37:a9:8e:e5:c8:e0:db:ad:5e:
         ca:c0:00:ee:97:b5:00:bd:77:30:18:60:0a:2b:81:ce:a5:e9:
         f1:6e:e2:99:46:dc:70:fa:8e:3b:61:ee:c3:a3:9a:d2:9c:0d:
         68:32:6d:19:2d:9e:22:83:de:af:e8:ea:aa:91:06:b6:da:cc:
         bd:5e:bd:48:6e:09:bb:f9:f7:ab:33:e6:06:e5:97:50:d2:6c:
         6a:90:22:8a:e6:40:fd:ca:dd:4f:05:31:7e:9e:45:98:03:76:
         76:8b:3c:68:20:10:84:4d:2f:32:c3:61:c2:ce:f6:54:87:b0:
         fc:eb:26:be:3d:9c:1d:90:3f:ef:45:05:92:c8:90:55:28:4a:
         b1:39:af:9e:26:f3:01:aa:e0:ff:ef:9c:9f:ec:da:bd:21:d7:
         18:76:db:3e:aa:b8:9d:aa:ad:d9:6b:44:77:41:99:b7:af:3b:
         c1:48:01:1b:79:3e:21:fd:3a:5f:58:c9:aa:9c:de:eb:5d:79:
         d8:97:26:1b:80:9f:07:ec:c8:25:3f:53:c4:91:4c:82:e7:a2:
         75:05:c1:33:0c:8d:aa:00:c4:3f:d1:33:ab:71:6d:1c:c6:cf:
         c5:66:18:84:0a:e6:13:28:5d:53:78:79:03:d5:0f:54:97:b9:
         17:78:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org