Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          HAyejDtLdj2wowp4JYZEXgltkCux2Zg6Htr6iY+CwhE=
Subject key identifier:   C7:BE:7C:F3:FF:ED:DC:89:88:FE:D9:77:8E:88:68:F6:B9:C4:41:6E
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       7EA242FE7F35BC3ECB7F1AD1953B6BF253508D07
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     262691
IP address blocks:        187.94.200.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a2:42:fe:7f:35:bc:3e:cb:7f:1a:d1:95:3b:6b:f2:53:50:8d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:f0:91:b1:1f:1c:85:92:56:e3:f6:6e:a0:
                    72:34:9e:5a:4e:4f:68:4e:80:e2:88:72:c1:20:09:
                    03:d5:b6:a1:ff:0e:20:f1:5f:c2:d6:89:a9:8e:33:
                    99:79:54:2a:5a:59:ec:46:de:f7:00:c8:97:30:e1:
                    85:ac:88:86:59:dd:df:9d:c6:79:b4:6a:45:6d:45:
                    1b:41:62:bd:cb:9b:60:cb:70:f7:d9:e7:cb:ff:37:
                    24:fd:25:4c:99:b0:0c:26:eb:e2:19:55:24:95:5e:
                    40:6e:57:09:5d:aa:11:4d:47:17:49:b4:09:14:17:
                    7a:b5:99:87:79:30:72:c8:03:95:18:a3:f8:43:cb:
                    8f:78:c2:c1:8f:06:89:7a:f1:73:12:bd:54:7a:00:
                    72:6b:d4:43:98:1b:8d:ed:21:af:32:7d:55:1d:d1:
                    7c:92:02:b7:12:4e:f7:c8:c4:d4:6c:73:54:84:4a:
                    46:86:fb:af:b6:1b:41:75:ad:2b:2b:b3:ac:f3:64:
                    5c:25:5b:08:9f:b8:4a:21:9f:77:27:fe:7a:5e:cd:
                    bf:67:90:b9:43:46:39:d2:27:bd:78:5d:04:3b:f1:
                    b9:51:02:82:73:8d:9d:e5:04:b9:e9:49:73:53:10:
                    63:c9:20:2b:eb:4d:11:1e:5e:9e:4b:51:23:9c:4d:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BE:7C:F3:FF:ED:DC:89:88:FE:D9:77:8E:88:68:F6:B9:C4:41:6E
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:50:11:77:5c:32:72:04:7c:11:6a:e3:33:72:b9:68:d5:
         d0:de:db:24:6d:f6:b0:79:16:3f:2f:c3:50:4e:fa:fe:8a:a1:
         a3:e1:a3:1d:45:d6:f6:f6:98:2d:39:d7:b7:f6:23:f7:19:60:
         fe:73:a4:d7:6f:8b:d9:6d:aa:ec:c6:92:ac:74:cc:9e:b8:52:
         2c:f4:e8:fd:ea:e3:5a:96:55:50:96:16:f9:f4:df:b0:9f:61:
         d7:23:8a:f1:00:49:06:01:15:c0:e9:08:12:d1:4d:ac:5d:8a:
         4d:31:92:b5:12:34:c3:d1:0d:af:a4:25:df:a3:5c:bc:2a:4f:
         c7:9b:37:81:65:27:62:7e:99:41:ca:49:a5:8a:de:d0:8e:aa:
         e5:c7:ad:11:8c:61:1e:6e:2e:9c:69:6e:5d:47:3d:6c:1b:9f:
         19:9f:4f:e9:c0:2d:88:a4:39:92:4e:20:6e:32:77:1b:5c:87:
         d3:35:a1:54:f7:10:64:9e:1f:31:7d:53:d6:09:b6:2a:af:e9:
         80:df:3e:93:95:84:24:eb:a1:f6:e2:36:7b:bc:21:ad:99:89:
         3e:f1:33:38:bf:81:42:10:5a:b3:81:02:1a:aa:0b:fd:1b:83:
         f5:0d:5a:60:f6:32:3c:8b:e5:c1:5a:73:ce:73:ea:09:bb:4b:
         f9:2e:8f:9b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfqJC/n81vD7LfxrRlTtr8lNQjQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTJaFw0yNTA0MDIxODMwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTg5REYwOTFCMTFGMUM4NTky
NTZFM0Y2NkVBMDcyMzQ5RTVBNEU0RjY4NEU4MEUyODg3MkMxMjAwOTAzRDVCNkEx
RkYwRTIwRjE1RkMyRDY4OUE5OEUzMzk5Nzk1NDJBNUE1OUVDNDZERUY3MDBDODk3
MzBFMTg1QUM4ODg2NTlERERGOURDNjc5QjQ2QTQ1NkQ0NTFCNDE2MkJEQ0I5QjYw
Q0I3MEY3RDlFN0NCRkYzNzI0RkQyNTRDOTlCMDBDMjZFQkUyMTk1NTI0OTU1RTQw
NkU1NzA5NURBQTExNEQ0NzE3NDlCNDA5MTQxNzdBQjU5OTg3NzkzMDcyQzgwMzk1
MThBM0Y4NDNDQjhGNzhDMkMxOEYwNjg5N0FGMTczMTJCRDU0N0EwMDcyNkJENDQz
OTgxQjhERUQyMUFGMzI3RDU1MUREMTdDOTIwMkI3MTI0RUY3QzhDNEQ0NkM3MzU0
ODQ0QTQ2ODZGQkFGQjYxQjQxNzVBRDJCMkJCM0FDRjM2NDVDMjU1QjA4OUZCODRB
MjE5Rjc3MjdGRTdBNUVDREJGNjc5MEI5NDM0NjM5RDIyN0JENzg1RDA0M0JGMUI5
NTEwMjgyNzM4RDlERTUwNEI5RTk0OTczNTMxMDYzQzkyMDJCRUI0RDExMUU1RTlF
NEI1MTIzOUM0RDk1OTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmJ3wkbEfHIWSVuP2bqByNJ5aTk9oToDiiHLBIAkD1bah/w4g8V/C
1ompjjOZeVQqWlnsRt73AMiXMOGFrIiGWd3fncZ5tGpFbUUbQWK9y5tgy3D32efL
/zck/SVMmbAMJuviGVUklV5AblcJXaoRTUcXSbQJFBd6tZmHeTByyAOVGKP4Q8uP
eMLBjwaJevFzEr1UegBya9RDmBuN7SGvMn1VHdF8kgK3Ek73yMTUbHNUhEpGhvuv
thtBda0rK7Os82RcJVsIn7hKIZ93J/56Xs2/Z5C5Q0Y50ie9eF0EO/G5UQKCc42d
5QS56UlzUxBjySAr600RHl6eS1EjnE2VmQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMe+fPP/7dyJiP7Zd46IaPa5xEFuMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzgzNzJlMzkzNDJlMzIzMDMw
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzYzOTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
u17IMA0GCSqGSIb3DQEBCwUAA4IBAQBchlARd1wycgR8EWrjM3K5aNXQ3tskbfaw
eRY/L8NQTvr+iqGj4aMdRdb29pgtOde39iP3GWD+c6TXb4vZbarsxpKsdMyeuFIs
9Oj96uNallVQlhb59N+wn2HXI4rxAEkGARXA6QgS0U2sXYpNMZK1EjTD0Q2vpCXf
o1y8Kk/HmzeBZSdifplBykmlit7Qjqrlx60RjGEebi6caW5dRz1sG58Zn0/pwC2I
pDmSTiBuMncbXIfTNaFU9xBknh8xfVPWCbYqr+mA3z6TlYQk66H24jZ7vCGtmYk+
8TM4v4FCEFqzgQIaqgv9G4P1DVpg9jI8i+XBWnPOc+oJu0v5Lo+b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org