Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          ivXnBOMyWBykeQCTHm34zg3NC/mTJNv3vUaCXFA/Z6o=
Subject key identifier:   5D:14:2D:48:6E:13:54:AC:EB:10:6C:15:E3:E9:8D:47:CA:7D:F4:17
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       4659F6A32A9AB063EABB7BD4606EB8BFC91CAF0A
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     262691
IP address blocks:        187.94.194.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:f6:a3:2a:9a:b0:63:ea:bb:7b:d4:60:6e:b8:bf:c9:1c:af:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:4c:2f:59:3c:a9:1b:1b:a7:91:23:ca:d1:
                    9d:3e:03:ee:52:46:aa:92:38:26:d3:f3:6c:cb:8e:
                    91:52:32:a8:dc:d9:d2:39:07:f9:f1:f4:09:fb:82:
                    31:fd:42:64:04:8f:88:24:4e:28:0f:37:a2:52:10:
                    c3:50:3b:a0:a2:45:6d:c1:7a:6b:63:43:4a:55:4f:
                    40:b6:b0:8d:19:30:b2:2d:a0:d3:84:ef:4f:30:19:
                    b2:6e:0a:1f:2e:b1:b2:80:d3:41:7a:46:da:ef:61:
                    bc:c7:c9:52:6b:57:c4:3b:fd:28:03:b6:b0:32:8d:
                    18:56:fa:97:13:19:aa:be:e8:23:31:11:a2:21:f9:
                    3b:09:a5:68:b9:83:f4:b0:14:d7:9c:a2:85:68:5e:
                    b9:cb:96:57:a0:09:49:74:33:2d:94:ff:48:02:65:
                    40:08:c9:b4:87:fa:ce:d4:11:66:ff:f1:a8:91:90:
                    01:46:09:c0:7c:75:15:2e:94:7e:35:87:13:bb:4a:
                    4a:ec:55:79:56:7e:cd:3e:0f:13:a9:4a:a2:ff:b1:
                    7d:81:52:56:f9:7d:45:2c:61:3f:9b:32:77:dc:68:
                    29:15:fe:f1:7f:2d:8d:e4:55:78:2d:e5:2c:78:a1:
                    09:e3:98:cc:fe:75:3f:5a:62:47:14:e0:a5:d7:db:
                    af:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:14:2D:48:6E:13:54:AC:EB:10:6C:15:E3:E9:8D:47:CA:7D:F4:17
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:84:3b:cb:23:be:21:f0:09:a3:55:56:9c:55:83:87:53:10:
         8a:51:8e:75:18:43:d5:e9:15:a4:04:ad:c8:2f:b8:aa:d5:26:
         c5:b4:56:4a:b7:76:33:86:21:b9:e3:e2:ab:60:63:a5:6a:72:
         b3:1f:eb:b2:29:88:48:ae:54:90:ef:e3:6b:1a:4f:c1:05:c4:
         d4:fe:eb:df:3f:64:d4:ef:7b:58:71:89:4a:7e:cb:4f:3a:75:
         37:ce:8f:82:2e:4d:f1:0a:52:56:fe:48:31:77:31:ec:1a:a9:
         cb:7f:d9:e0:3d:95:ec:60:79:79:78:46:5e:90:94:61:70:a2:
         93:91:50:e9:97:56:0b:95:90:60:9a:91:07:c4:32:1c:23:29:
         ef:e8:eb:88:64:06:cd:89:15:6e:dc:bc:fb:f1:37:d7:0d:c1:
         6b:bc:16:fa:5c:f7:9a:48:72:4b:75:36:49:65:22:17:af:56:
         7a:2b:d8:8e:b3:5a:74:04:d3:0a:ee:0a:41:f9:48:d0:24:cd:
         85:c1:6e:54:a2:3c:b8:9f:7a:7e:a3:4a:59:f8:59:87:0e:59:
         2f:11:ed:27:76:0f:73:fe:4e:d6:09:5c:27:cf:e4:18:0d:06:
         de:79:3c:ef:9f:ae:07:92:23:51:80:7a:a9:ca:f6:6e:2b:22:
         b4:11:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org