Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          +QkOGgd70zZBPsxWSVqoLM2ROC3d9ERwFI6Sre5DjOw=
Subject key identifier:   2F:72:1F:3D:B5:00:AF:A8:65:51:88:39:90:F6:86:97:1E:3A:9D:72
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       7DB1D7C7B1A1B865354384F45F92D9C8ABE600AA
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        187.94.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b1:d7:c7:b1:a1:b8:65:35:43:84:f4:5f:92:d9:c8:ab:e6:00:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=3082010A0282010100AC2A972D305CED46A895C415198FB7864FC104A56A3F2A21DDECAB737A72DA4EBEA34BCEBF08CF1FA1620CFA11B8D9FEAA935446FF37CE8984FB644204055D0773895C323816DA06D18F631A161A867A6090EB58107E70591C6968B50B217725146F3554D0EE2FF83E84A1D5D73F573C4434C71E19EF515A7C965F3C13C228518C13D1E3DB10CF702426807DA3604F7F683197CDF87A7FF1081E00EB7280790C10B6A922403CC1535253D15CD1AAE521630FC0EFB2C74E4C58B919D9289E6D9EADCD6AEBDFC01B89651D7179CF6738E8C10C196103ADD67A0372CCCED9298DC70CEFEB49FC20278335707C12E466348254BC22397418CBEC601BF459C636DA230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:97:2d:30:5c:ed:46:a8:95:c4:15:19:8f:
                    b7:86:4f:c1:04:a5:6a:3f:2a:21:dd:ec:ab:73:7a:
                    72:da:4e:be:a3:4b:ce:bf:08:cf:1f:a1:62:0c:fa:
                    11:b8:d9:fe:aa:93:54:46:ff:37:ce:89:84:fb:64:
                    42:04:05:5d:07:73:89:5c:32:38:16:da:06:d1:8f:
                    63:1a:16:1a:86:7a:60:90:eb:58:10:7e:70:59:1c:
                    69:68:b5:0b:21:77:25:14:6f:35:54:d0:ee:2f:f8:
                    3e:84:a1:d5:d7:3f:57:3c:44:34:c7:1e:19:ef:51:
                    5a:7c:96:5f:3c:13:c2:28:51:8c:13:d1:e3:db:10:
                    cf:70:24:26:80:7d:a3:60:4f:7f:68:31:97:cd:f8:
                    7a:7f:f1:08:1e:00:eb:72:80:79:0c:10:b6:a9:22:
                    40:3c:c1:53:52:53:d1:5c:d1:aa:e5:21:63:0f:c0:
                    ef:b2:c7:4e:4c:58:b9:19:d9:28:9e:6d:9e:ad:cd:
                    6a:eb:df:c0:1b:89:65:1d:71:79:cf:67:38:e8:c1:
                    0c:19:61:03:ad:d6:7a:03:72:cc:ce:d9:29:8d:c7:
                    0c:ef:eb:49:fc:20:27:83:35:70:7c:12:e4:66:34:
                    82:54:bc:22:39:74:18:cb:ec:60:1b:f4:59:c6:36:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:1F:3D:B5:00:AF:A8:65:51:88:39:90:F6:86:97:1E:3A:9D:72
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230302e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:6f:b2:e8:37:74:c9:e8:2a:d2:26:fb:18:a0:22:dd:3c:
         eb:4f:f5:d9:99:61:50:2a:48:65:e0:a8:47:e0:a2:f4:e8:d2:
         99:56:a5:ce:76:2b:3d:06:c6:27:e3:c9:f4:05:ae:89:7d:f4:
         e4:8d:ee:66:00:27:b2:ce:df:b9:98:87:a1:f3:6f:d0:96:69:
         b5:e7:2f:bd:47:e1:31:fe:c3:6b:08:d3:c6:2d:90:2c:9e:fe:
         6a:f9:8d:21:2b:0b:2b:0c:f0:09:90:91:c7:a4:7e:82:9a:4e:
         dd:66:61:af:64:9f:b6:7a:03:33:c3:63:78:a8:56:5a:bf:c0:
         93:98:43:96:82:cf:b7:53:e3:ed:8e:2e:f5:4e:fe:c1:90:44:
         80:9a:68:7c:83:6e:62:1f:ce:61:00:c7:15:8e:b7:b6:4f:4a:
         51:2a:ee:00:e4:c5:b2:a1:08:93:26:96:48:24:3a:11:73:4a:
         5f:d2:07:ae:5a:9e:ef:41:9a:d6:79:eb:f2:3b:11:be:cc:07:
         3e:1e:a9:37:a7:0e:59:0f:36:b2:bb:98:26:62:e3:72:43:e0:
         0e:b6:67:22:90:26:a3:80:9b:49:90:23:22:9b:82:06:60:15:
         95:79:29:12:74:b7:f0:3a:ac:b3:d7:09:90:1d:b9:16:b5:1f:
         2c:a7:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org