Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          0v0hns3rCj6xfSn3XhIkRVWJx9+qNxKtMQYpJA4oo6s=
Subject key identifier:   D5:82:BC:14:D6:96:3B:79:DA:69:E6:F7:BF:B1:BA:41:08:D9:D1:56
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       79A95478B99125AAE3B30B228D25A86EA6B2380B
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        187.94.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a9:54:78:b9:91:25:aa:e3:b3:0b:22:8d:25:a8:6e:a6:b2:38:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:c4:c3:8b:9e:b3:0f:fb:f0:35:a1:2e:4e:
                    0f:b7:73:33:2e:4b:ec:b8:f7:1b:af:4f:af:bd:0c:
                    cd:ea:3e:7e:df:d7:7a:f2:90:21:6e:e7:89:f5:dc:
                    07:ad:7d:d0:de:24:9f:61:0f:86:2f:13:d7:35:b8:
                    8a:d3:28:b0:b3:e4:b9:e1:c0:21:80:aa:a1:51:0d:
                    1f:4e:30:76:e1:4d:a0:de:b6:fe:90:6d:0d:ab:46:
                    20:30:d7:8e:66:e3:37:3b:c1:00:2c:11:83:28:39:
                    68:d4:24:9b:43:7e:98:1c:b1:31:be:38:08:36:55:
                    70:e5:f3:54:da:87:c4:67:e4:91:56:de:5f:72:be:
                    b8:d2:7d:e1:a5:09:e9:94:aa:a4:ae:28:b9:b4:48:
                    6f:9a:c4:cb:e4:67:37:b7:c2:8c:38:7e:d6:a4:48:
                    ca:2e:a7:2f:91:b0:25:24:a6:47:fe:7a:55:2a:bb:
                    5d:60:c1:ba:c4:d9:9f:05:a3:d6:3c:70:0b:10:47:
                    04:05:ec:e1:66:23:2e:73:fa:46:be:bd:34:f2:16:
                    ef:3c:aa:9e:ff:0f:07:53:5e:b4:38:38:92:8b:b1:
                    96:5f:19:93:f2:94:3a:97:79:d8:31:61:ae:b1:e4:
                    fe:8e:dd:04:ae:60:99:61:a6:4d:95:b1:1a:ce:d7:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:82:BC:14:D6:96:3B:79:DA:69:E6:F7:BF:B1:BA:41:08:D9:D1:56
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139362e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:d2:f6:37:80:56:4d:76:fe:18:17:ae:ec:9e:69:b0:83:
         a5:4f:0c:50:62:f1:61:26:ad:e5:3f:b6:23:28:d1:d2:ed:0b:
         60:94:58:48:56:2d:75:63:e3:c5:1a:35:81:8c:24:78:26:57:
         59:9f:0a:26:70:a8:77:02:09:4c:07:9d:31:24:d2:c2:07:14:
         c0:47:c1:e4:98:9d:18:9e:a6:68:30:11:36:f3:b0:59:9d:3e:
         a1:5f:83:6b:28:3e:e1:8d:33:50:f7:ea:7d:d1:fe:8b:ab:26:
         55:9e:4d:df:a1:8f:06:e1:6c:65:8f:5a:ca:9e:d0:43:12:b7:
         28:80:bd:cd:ee:b2:2e:b2:1c:8c:90:69:78:74:df:81:8c:76:
         30:93:c0:b9:a8:df:af:2b:2b:4a:fe:94:6c:a5:1b:68:2a:1f:
         63:1c:16:d3:f0:30:f3:0a:2b:12:be:80:c0:dd:04:49:83:88:
         e2:2c:d9:aa:ef:50:3b:b8:39:57:80:b8:ab:35:c6:56:9d:0e:
         c6:86:3c:3b:d2:af:71:c6:99:d8:ee:5d:68:d7:ee:e3:a3:72:
         e2:23:63:02:6d:34:a4:e8:e8:b1:6f:89:1f:f1:f0:96:cb:27:
         a2:be:b7:f3:50:fc:dd:09:ad:20:23:93:75:a3:a5:bd:fd:62:
         3a:1b:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org