Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa
File:                     3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          uIGEnMuLmIoIFMELXiCJaaLGv7GuVbpePrUoLW7VORs=
Subject key identifier:   07:34:E4:4D:88:20:6A:3F:67:2D:5B:B1:AA:34:EF:34:E6:36:CE:BD
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       72028DB4E13134367809690C89E26792DCCCFE1C
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262691
IP address blocks:        187.94.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:02:8d:b4:e1:31:34:36:78:09:69:0c:89:e2:67:92:dc:cc:fe:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:8c:ae:07:da:5a:a4:53:8c:ee:11:b0:50:
                    12:9b:80:53:44:e3:91:17:09:93:ff:3d:28:29:71:
                    00:a8:8b:49:a7:dc:27:d8:ed:fd:33:e1:99:7c:69:
                    8e:e5:90:1a:79:7f:67:fc:fc:ef:3a:98:a2:19:a3:
                    e2:9a:46:f1:a1:ca:49:3d:18:c8:0c:2c:45:0d:76:
                    39:b1:b3:06:ed:fe:fa:5d:4b:d4:6d:13:df:d6:6d:
                    82:7d:32:09:5b:9c:91:a8:75:84:6f:56:49:cd:21:
                    9e:42:36:b4:1b:e2:40:7d:66:c8:94:d8:82:93:23:
                    e9:ff:88:5b:d9:d0:de:24:c0:50:7d:85:e0:06:97:
                    bc:f1:2a:40:72:f2:b7:a6:0d:17:f8:c7:63:da:c7:
                    b8:40:43:3c:77:bd:5b:99:61:52:c8:b1:23:03:e9:
                    50:8f:41:32:5f:38:1e:3c:2d:4c:8f:12:9e:41:31:
                    4d:85:ae:61:73:31:64:20:d6:98:71:d2:08:10:98:
                    b8:ee:d5:f0:32:fc:c0:00:c9:19:fd:a8:98:0b:34:
                    c5:75:2c:0d:10:0b:bf:f3:a6:d6:5a:b3:10:43:ef:
                    4a:26:36:46:ad:7d:ba:00:21:5e:84:20:51:49:03:
                    37:53:5e:03:71:9e:27:c9:63:69:07:a7:e5:d8:51:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:E4:4D:88:20:6A:3F:67:2D:5B:B1:AA:34:EF:34:E6:36:CE:BD
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139322e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:99:79:bd:30:1c:28:03:8b:a9:fe:c9:39:a2:d7:7e:6a:
         b8:af:94:17:61:fc:a2:b9:27:c5:41:66:24:4b:6d:33:8a:1d:
         57:1f:8f:76:7a:30:5b:c3:50:4c:c5:c7:83:dc:30:f9:9c:c1:
         42:d1:34:3c:31:01:54:f9:21:18:f2:26:1c:9a:a0:d9:e2:ce:
         75:df:a7:58:75:75:29:e3:ac:8d:82:e5:5f:6a:75:ad:44:c9:
         4c:fc:27:eb:89:b3:20:29:2b:2e:24:7d:b2:89:a8:5c:4d:18:
         02:c3:7e:5c:7e:3e:5d:67:98:b4:67:73:4e:2e:60:ca:05:d7:
         ad:07:db:eb:f3:cf:58:59:ba:65:4f:91:19:ac:cd:1e:4f:e8:
         3f:5a:dd:95:13:5c:9f:7d:12:e6:24:c6:e8:2a:1f:f5:b8:ee:
         d3:c3:e5:3d:bb:6a:4a:4a:fc:42:4a:33:9f:66:40:4e:17:e5:
         a7:51:a2:eb:33:7c:3c:88:ca:96:0c:1a:a8:2c:fb:8e:b9:14:
         99:f2:61:ca:98:f7:87:7f:33:7a:e9:49:63:fd:fe:2c:c1:dd:
         91:65:c5:dd:b7:f3:62:22:f9:82:d2:bb:2c:a3:44:a8:c5:41:
         e1:91:2c:dc:37:8e:91:46:a4:eb:81:98:6e:cc:98:7f:fb:e1:
         b0:de:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org