Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230332e302f32342d3234203d3e20323632363931.roa
File:                     3138372e39342e3230332e302f32342d3234203d3e20323632363931.roa (raw, json)
Hash identifier:          a1Vj35pGR1nXRZddZptWnox8HIppJDhxnkWl1nerddM=
Subject key identifier:   0F:05:39:E7:D5:05:98:96:E8:59:15:44:01:2A:EE:E9:9F:29:68:58
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       0D327C1F71D48AD3083BD85A7FEFEE4CC517A3F3
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230332e302f32342d3234203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:16 +0000
ROA not before:           Wed 03 Apr 2024 18:25:16 +0000
ROA not after:            Wed 02 Apr 2025 18:30:16 +0000
asID:                     262691
IP address blocks:        187.94.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:32:7c:1f:71:d4:8a:d3:08:3b:d8:5a:7f:ef:ee:4c:c5:17:a3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:16 2024 GMT
            Not After : Apr  2 18:30:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:54:94:e8:35:68:1f:40:e1:e5:67:bb:a9:
                    e8:14:63:fc:2d:96:b7:da:44:6c:c8:e3:3e:a3:6d:
                    12:5c:c4:00:27:c0:c0:99:c7:dd:97:f1:36:a4:d9:
                    2f:49:60:bb:99:01:0c:d2:f8:2b:37:21:57:92:1b:
                    a1:51:6a:bf:55:2c:d4:aa:3f:cd:72:e2:a4:09:5a:
                    e3:88:82:86:b0:eb:ae:a0:ce:d6:f9:7b:8a:37:c3:
                    9d:16:23:4f:09:d1:a1:38:79:5c:46:8a:cc:fe:67:
                    da:87:bd:77:2f:58:32:7a:80:c9:66:e4:d6:6d:fe:
                    e3:f2:6e:39:2e:a3:a0:a2:06:d0:7d:7c:1b:7b:4b:
                    fc:72:94:32:6a:77:4a:ee:cd:fd:8b:99:bd:2a:27:
                    7c:9a:76:4b:41:e2:23:9e:7f:f8:31:35:f1:c3:b8:
                    20:b3:12:fe:a0:7d:59:ee:b4:b7:9b:9e:a4:33:26:
                    ba:0e:b3:3a:85:7c:be:8c:f4:cb:29:be:5e:b3:03:
                    cc:38:45:51:8a:79:2f:fd:d4:0e:22:bf:b5:71:8c:
                    f2:7e:7d:65:09:e4:e2:20:35:95:fb:db:02:6e:4e:
                    0c:63:a9:25:ec:ec:eb:66:89:d9:1b:34:53:5e:ce:
                    01:32:28:a5:fb:a9:0b:11:5c:35:0d:71:7b:3b:e1:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:39:E7:D5:05:98:96:E8:59:15:44:01:2A:EE:E9:9F:29:68:58
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230332e302f32342d3234203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:12:33:da:79:31:78:aa:eb:2b:07:78:16:63:89:e7:6e:
         12:01:34:b3:df:a6:bf:7b:bc:c2:27:ee:74:74:30:83:36:e1:
         3e:32:86:23:54:cb:3a:8a:c6:33:b0:36:65:d2:fa:35:33:ec:
         03:6b:55:e5:e3:46:be:4a:6a:fd:ee:58:99:c2:49:1b:16:f0:
         88:05:fa:f8:9c:2e:15:5b:21:fe:4c:5d:54:e7:44:d6:9a:ba:
         fc:cb:18:51:07:0b:9e:b2:ba:34:90:66:f7:19:50:26:0c:18:
         6f:1e:45:3f:9a:f6:ae:33:e0:65:92:90:46:e6:41:0f:11:94:
         a5:47:6f:ec:72:32:46:d4:d8:51:f1:d7:69:f5:60:f8:eb:bf:
         30:e0:cb:ad:e6:e7:6b:e2:2c:0f:cb:93:bc:d8:76:9f:77:09:
         4f:43:b9:f4:1b:a5:fc:31:08:52:6c:fc:1b:4e:53:3b:f1:27:
         bd:d3:b1:a3:03:03:6e:f1:5f:e3:fa:dc:b1:03:2a:db:8f:74:
         ec:11:4f:a0:b0:9b:e3:89:a6:20:7b:41:8b:a1:88:a8:27:d7:
         81:2b:12:1b:c5:a5:5f:a8:80:31:25:31:a4:8c:92:c0:dd:7d:
         b0:b8:02:b4:00:40:2b:2c:79:fc:38:76:a9:15:9d:3f:bb:47:
         04:3f:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org