Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139362e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3139362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          IYzeOP1hSE98/nbizBeD9z+xro4DkTCjoNYQgnFXvYw=
Subject key identifier:   4F:72:C1:EA:62:10:32:7B:A5:C0:CC:51:F0:40:75:7D:D4:FE:C5:05
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       2396E3BA1ED1AC6D1B9BB2D4B5D1759882DA311B
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:14 +0000
ROA not before:           Wed 03 Apr 2024 18:25:14 +0000
ROA not after:            Wed 02 Apr 2025 18:30:14 +0000
asID:                     262691
IP address blocks:        187.94.196.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:96:e3:ba:1e:d1:ac:6d:1b:9b:b2:d4:b5:d1:75:98:82:da:31:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:14 2024 GMT
            Not After : Apr  2 18:30:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:99:cd:c2:cb:c2:66:d0:c3:3c:d9:98:64:
                    ff:04:71:82:30:e6:29:ec:ce:75:28:e0:46:ef:d5:
                    dc:43:c5:bf:9a:05:d9:33:ee:0d:df:70:90:1e:7a:
                    77:45:8a:30:7f:eb:8e:c7:ed:ed:3c:40:7e:a2:ad:
                    46:0c:25:a4:f4:97:69:3e:58:f0:6d:05:9d:fe:85:
                    9f:b8:53:d8:d4:88:70:1e:45:66:c5:3b:09:d4:16:
                    1c:13:73:13:6e:e2:23:20:0c:21:04:d8:b2:3b:7c:
                    7c:ec:eb:39:ed:fc:0f:d6:35:ea:dc:4b:17:cf:25:
                    8e:7c:64:42:b0:5e:33:b4:9e:38:4a:4d:86:c9:58:
                    ed:f6:07:37:fb:94:ef:f5:ef:9d:85:d9:0e:aa:40:
                    bd:8d:0f:25:5e:5b:d5:d4:83:78:47:a2:4c:ce:5b:
                    cd:95:d0:57:db:e2:a2:ba:a5:1a:2f:e4:c5:aa:1b:
                    7c:43:fe:1f:a8:3b:d6:88:d4:1f:5a:ba:79:e1:92:
                    2f:c6:ee:ec:0b:13:f5:d5:d8:c3:39:f7:77:1b:af:
                    10:6d:2e:53:24:f3:f1:e5:e5:76:26:1e:14:83:63:
                    3a:0e:8b:c2:a1:dd:93:3a:ce:b9:a8:90:85:4b:fd:
                    43:e1:c7:25:d8:d3:02:97:dd:98:b1:1c:c3:d3:d0:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:72:C1:EA:62:10:32:7B:A5:C0:CC:51:F0:40:75:7D:D4:FE:C5:05
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:f1:01:c8:0b:27:e4:b2:b1:25:32:cd:46:d7:4b:97:2d:
         88:5d:97:b6:85:cb:ea:3b:bd:4a:e6:68:20:2b:48:c6:26:1b:
         77:76:d6:84:9d:77:71:8a:f5:ad:a4:4b:64:68:79:7a:e9:b2:
         9c:7e:9b:7f:91:c1:0f:bd:4b:77:80:cd:ce:49:6f:c5:0e:2b:
         b1:4c:a6:fc:70:1c:e6:35:67:49:81:fa:ed:89:3c:08:fe:f6:
         71:44:50:f5:0a:62:6e:29:f6:85:6e:cf:f2:e1:b4:fe:a8:99:
         b2:1c:f1:97:83:cb:78:34:4e:d7:58:97:af:7a:ed:bf:6d:b2:
         98:dc:88:92:0e:2f:3c:ab:03:50:2e:3a:a4:49:1f:8b:e3:20:
         2e:fb:23:d9:73:5a:06:de:9c:01:4a:c4:e7:33:24:16:21:eb:
         0b:00:64:40:2a:a9:1c:37:c5:dd:3d:95:08:5b:ff:3a:7c:34:
         a6:c9:c1:8c:d3:4b:51:45:42:02:9f:c5:5e:f6:6b:ab:f5:8b:
         c4:03:a3:d8:95:7f:97:67:f0:59:49:82:34:4e:fe:33:9b:80:
         d9:7a:78:af:d1:4d:4f:15:93:86:7d:9a:77:39:95:7e:06:aa:
         3e:f5:ca:02:83:92:bf:8d:51:92:7e:da:9b:a5:8c:4d:9e:39:
         a3:01:7d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org