Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32312d3231203d3e20323632363931.roa
File:                     3138372e39342e3230302e302f32312d3231203d3e20323632363931.roa (raw, json)
Hash identifier:          P8zkeJXFK0hE+Nwco7ZFjtdfQRs+yvyOdRldj96zLgo=
Subject key identifier:   B0:72:A2:4B:F2:AF:05:EA:DD:CC:DA:7B:F8:17:42:0A:E3:6F:3F:32
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       0D32D2B913A5C3BFA68ACFF0B34C28CDA87AD19D
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32312d3231203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:11 +0000
ROA not before:           Wed 03 Apr 2024 18:25:11 +0000
ROA not after:            Wed 02 Apr 2025 18:30:11 +0000
asID:                     262691
IP address blocks:        187.94.200.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:32:d2:b9:13:a5:c3:bf:a6:8a:cf:f0:b3:4c:28:cd:a8:7a:d1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:11 2024 GMT
            Not After : Apr  2 18:30:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:b8:65:d3:59:e4:c8:41:7b:ee:e8:ca:70:
                    22:6a:35:00:d5:f7:65:b9:f7:60:6c:2e:85:50:32:
                    30:aa:28:16:c2:13:51:5c:2c:6b:07:b5:5d:1f:b7:
                    8c:ed:84:7a:e2:cc:ef:fe:46:08:27:b5:8f:a9:1a:
                    88:e4:b1:a7:d4:e7:84:79:46:5c:eb:0d:0e:57:ef:
                    d2:34:04:56:89:d3:c9:f7:03:05:f0:9e:2b:aa:5f:
                    d5:67:83:ee:30:91:e9:5c:b5:18:68:81:41:86:12:
                    0b:ce:dc:67:17:48:d4:84:03:dd:04:d4:c3:be:70:
                    ec:4e:18:99:9f:07:19:85:2c:c4:b7:10:b2:f8:9c:
                    66:86:9d:e9:57:cc:ac:d9:b1:c1:87:b5:62:5f:e8:
                    58:0a:20:0f:41:9d:95:ff:dd:64:f2:9c:fa:fa:8f:
                    1a:12:a0:60:3e:6c:93:2d:f8:58:4b:e8:1a:59:9e:
                    5f:a2:d4:b0:c8:d9:03:e4:c2:63:a7:e5:77:85:16:
                    39:f0:ab:23:e4:c8:10:08:11:7d:27:11:b1:c9:a6:
                    a4:01:fc:9d:18:1f:d8:b9:bb:7a:6f:7c:a2:88:b0:
                    38:3f:ac:bc:b0:60:c3:10:0a:f8:39:e2:dc:3e:cc:
                    30:23:67:fa:43:bd:8f:2e:e0:dc:1d:50:52:09:49:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:A2:4B:F2:AF:05:EA:DD:CC:DA:7B:F8:17:42:0A:E3:6F:3F:32
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32312d3231203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:9c:36:4d:b3:b0:50:5a:c7:88:90:8f:5a:8c:c4:0d:34:
         c8:ed:ec:2c:fc:3d:7c:40:b3:1d:fb:87:fe:8a:12:3b:2b:b9:
         9b:92:ef:28:98:f0:10:a0:f2:3d:c2:dc:88:f1:73:15:47:d5:
         2e:05:5b:4d:69:d8:95:97:02:b1:4c:61:dc:b5:d4:62:fa:05:
         d3:01:00:f1:fa:40:d3:a7:1f:09:e5:a1:cd:e6:a7:03:65:d0:
         f0:6c:70:34:15:64:54:36:73:e2:96:3b:de:9c:d5:24:56:a6:
         ae:49:7b:c4:df:8e:1d:1d:ed:ac:d6:79:b7:74:1c:a6:56:00:
         f8:f7:20:0a:b9:bb:df:ad:6f:3c:42:6e:55:20:1a:09:9d:7e:
         bf:bd:f4:e7:a7:96:b5:d2:cd:b9:8b:62:8d:c5:68:00:ac:3a:
         f9:0a:de:f9:e5:96:a7:6b:a8:71:fc:74:46:d6:5d:e1:c8:f0:
         4e:cf:82:13:32:57:a2:ac:af:59:e5:55:5a:c4:32:88:18:de:
         f1:37:0b:8c:21:9b:af:78:2b:37:33:c9:11:ed:01:09:02:e4:
         91:47:e5:f2:59:40:24:03:d6:6a:f3:27:36:1e:fc:50:77:57:
         9a:78:ad:48:71:6c:23:25:30:bb:a2:de:7d:93:a6:64:16:25:
         1b:e6:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org