Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          +0OYVox+ewOMglUJIZq19spg01QCv+nH4RLVpxjWQ+A=
Subject key identifier:   F9:B7:AA:FE:4B:6E:93:E9:EF:65:92:D5:F5:0F:CA:03:CD:CB:9D:99
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       5DA4A6F9E5E50223408D690570F8F995F2FCCC0A
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262691
IP address blocks:        187.94.198.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a4:a6:f9:e5:e5:02:23:40:8d:69:05:70:f8:f9:95:f2:fc:cc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:88:88:d3:e6:49:53:a3:39:a4:b8:7d:01:d5:
                    c3:1b:22:b3:a2:4f:52:43:30:df:ac:c6:e5:07:7b:
                    ea:80:8d:a0:87:ac:31:7d:0d:a2:9f:94:30:fa:b5:
                    44:73:f9:10:52:94:8f:b7:fa:fe:4b:66:a6:7a:c6:
                    0b:51:9f:05:01:e7:28:1d:31:08:fb:bd:5c:3e:f7:
                    43:f2:8e:7f:24:75:42:28:37:5a:65:a4:f3:e5:a5:
                    a9:ef:2b:9c:0f:31:42:f4:21:da:35:f9:1f:11:33:
                    14:b2:67:ae:ca:a7:27:10:80:5f:b8:d9:07:d0:ba:
                    a5:db:92:72:1d:84:8d:de:b0:bd:a7:2f:3f:86:c4:
                    c4:1d:db:f9:0d:b2:1f:c9:77:71:74:f9:f6:df:e0:
                    86:25:f9:38:0a:ce:ee:41:61:55:e2:a3:bb:f0:40:
                    c9:46:fa:a7:a2:a9:39:ac:2e:8a:16:d1:5e:31:fc:
                    94:09:5d:7a:a3:8a:0a:31:b1:44:d1:5a:ca:14:b1:
                    66:e1:dc:c0:40:e1:d9:26:bb:ae:b6:1f:ba:c8:1b:
                    5a:3f:79:d6:a3:60:53:10:a3:fa:6a:0c:6a:fe:67:
                    ff:90:2d:d9:a4:bf:b7:9b:04:c6:69:f2:a4:af:2c:
                    6e:1f:72:ea:dc:1b:8e:c7:2f:02:71:47:e4:bb:70:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:AA:FE:4B:6E:93:E9:EF:65:92:D5:F5:0F:CA:03:CD:CB:9D:99
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3139382e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:43:06:e2:9e:ef:be:aa:d0:ef:63:a1:a9:04:f7:db:ac:
         5c:8a:bd:dc:4a:dc:87:af:67:86:34:af:e4:cd:86:f1:6a:cc:
         97:41:a4:59:d3:8a:6f:b8:56:91:f4:9d:84:e3:a4:52:92:0e:
         dc:86:e4:04:75:a5:dc:47:b9:90:41:4f:54:e5:ba:ad:65:6a:
         74:e0:99:0b:d7:6f:a7:50:b5:38:c8:f1:8c:c2:31:39:66:52:
         ce:0a:46:6f:52:f9:8e:76:01:6b:bc:71:dc:e3:53:14:c5:60:
         c7:ac:ef:0d:75:16:9b:a7:86:a2:ce:ce:b4:f4:79:ba:b9:c8:
         85:01:55:32:2b:e6:d6:3b:6b:b5:f8:c3:f7:9c:fc:be:a7:01:
         73:fd:1a:58:39:b4:d9:aa:98:9b:30:ce:10:5b:1e:28:b3:9d:
         67:f7:46:3b:ca:b1:41:f5:e4:e4:e9:40:e3:be:eb:e0:96:3c:
         6a:78:2e:25:bd:de:1b:d7:73:6c:15:07:d6:3c:6f:f5:44:4c:
         7c:f2:14:88:31:28:ff:1e:78:58:2c:38:f1:14:d4:a3:36:4e:
         9c:7a:db:25:aa:a8:4f:42:ad:7e:d0:bb:f3:88:a7:eb:c9:56:
         ea:43:71:9e:10:46:a9:dd:e7:2b:6a:dd:7e:bd:2e:50:e4:19:
         1f:a4:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org