Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          DsAQ+apLidqBq8aPkoaZ4i0iKwN3+unqzPRb3DmetfY=
Subject key identifier:   A1:A1:53:48:FD:C3:36:BF:6F:E1:35:D6:A8:9F:68:25:94:59:71:DE
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       679AD3F1CA2E174E52E3A0B7EF075FF36EB90E49
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:13 +0000
ROA not before:           Wed 03 Apr 2024 18:25:13 +0000
ROA not after:            Wed 02 Apr 2025 18:30:13 +0000
asID:                     262691
IP address blocks:        187.94.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9a:d3:f1:ca:2e:17:4e:52:e3:a0:b7:ef:07:5f:f3:6e:b9:0e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:13 2024 GMT
            Not After : Apr  2 18:30:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d8:47:3a:99:d3:7f:48:5b:3a:c1:90:15:d2:
                    f7:53:37:c2:16:56:e2:7a:42:62:72:2e:8b:01:6e:
                    3d:b6:f4:cc:83:a5:f0:05:f5:fb:96:7c:2a:56:00:
                    8f:07:a4:6b:d8:19:85:0e:ce:47:33:80:6c:a9:e8:
                    9c:3f:b7:d3:e8:77:4a:5f:15:ac:bb:fc:09:e2:45:
                    91:76:9a:06:61:d7:34:e9:fe:75:7a:07:97:b7:43:
                    f7:be:9f:ca:11:ee:0b:4c:42:b2:dc:d4:58:f4:95:
                    6a:d9:10:91:d8:a5:ae:7b:88:75:d4:de:ad:ac:24:
                    ea:dd:dc:57:b2:f5:40:1b:4c:04:e0:35:5c:fc:53:
                    7d:3f:8a:8d:20:21:29:db:a9:bf:8a:03:6e:a9:80:
                    c1:cb:97:bd:51:38:76:87:2c:6f:cb:9b:e5:1e:7b:
                    85:aa:a7:2e:a3:4b:fe:e4:61:3f:b6:92:2a:3b:53:
                    1e:64:bc:12:43:fd:cd:c5:1e:70:a7:ef:88:f6:41:
                    ad:d4:bf:94:a2:39:20:26:86:ee:7f:b6:92:f3:8a:
                    f0:43:99:60:0a:eb:82:6e:23:94:18:0e:54:f9:2b:
                    3f:73:c8:3c:cf:5a:5a:d7:97:c6:2a:18:2e:8e:d0:
                    f1:5a:a1:ac:c8:cf:08:56:19:8e:7b:d2:a0:2b:3f:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A1:53:48:FD:C3:36:BF:6F:E1:35:D6:A8:9F:68:25:94:59:71:DE
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:41:06:59:1b:e0:a2:72:fd:56:46:f5:36:88:99:ef:10:c7:
         9b:a7:75:dc:6e:a7:3b:8e:39:4e:68:72:da:1d:3a:ff:0a:46:
         25:2b:8a:bc:8b:23:c2:93:74:75:c0:20:83:14:ab:e7:fc:60:
         30:b0:2c:41:29:9f:80:d9:54:67:c8:ba:40:e2:2d:b7:c4:79:
         84:22:95:85:ef:38:7c:55:d3:0b:22:0f:ae:78:25:39:48:5e:
         78:e7:f8:cc:80:da:33:1a:2e:ef:e5:c9:ec:50:41:e8:8f:8c:
         4c:a4:69:46:30:ce:29:e6:bf:95:5a:fe:fc:37:1c:1c:d6:22:
         df:c3:24:71:16:f0:41:c5:a3:cd:62:92:e6:f3:f9:9c:f7:40:
         ee:2f:2b:7a:80:c9:56:e4:d6:eb:be:0e:00:a4:a7:a3:25:02:
         36:0d:02:de:16:4f:a4:51:98:66:84:fb:d7:57:ba:a8:69:40:
         2d:8c:74:17:3a:b7:0e:e2:bd:86:db:87:81:74:7a:b9:d2:82:
         fc:8f:64:67:a6:75:55:e3:9e:61:dc:09:3d:c1:86:29:a9:73:
         82:89:e6:ee:ca:6d:70:a9:1c:d7:ac:17:6a:36:35:25:8e:50:
         ac:29:30:09:fa:38:e1:42:1e:05:17:e4:e0:90:b4:15:75:38:
         67:21:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org