Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa
File:                     3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa (raw, json)
Hash identifier:          23iCBsjGwAFMna9Eiuh+p6rDaleLaiNb5ZL7mZd4o9M=
Subject key identifier:   68:0F:46:E1:51:B3:15:9D:E8:52:85:80:0B:E6:84:DB:7C:6E:04:47
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       6E97F2108B350BF639C1ED306DFA408ED2E4F255
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:15 +0000
ROA not before:           Wed 03 Apr 2024 18:25:15 +0000
ROA not after:            Wed 02 Apr 2025 18:30:15 +0000
asID:                     262691
IP address blocks:        187.94.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:f2:10:8b:35:0b:f6:39:c1:ed:30:6d:fa:40:8e:d2:e4:f2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:15 2024 GMT
            Not After : Apr  2 18:30:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:96:04:fc:bf:ad:e3:b9:1c:1a:09:5f:f4:
                    93:3e:e4:b7:a3:1f:de:5e:f9:7c:f8:dd:47:62:22:
                    78:2a:eb:0e:a4:f6:ea:02:e2:ec:35:45:91:1d:ee:
                    a7:c7:50:05:79:d3:16:f6:3c:f8:0e:f0:18:91:9d:
                    61:8f:5e:62:7c:ea:84:c8:02:bb:dd:29:dd:c4:bc:
                    68:66:5b:3b:48:7f:b5:f7:25:d9:57:3c:a7:50:4c:
                    35:7d:15:ad:36:0b:96:02:8d:9f:5c:06:b0:ac:96:
                    34:a1:49:72:6e:fe:22:f9:52:30:37:bb:8e:6d:27:
                    d1:99:79:4e:c3:a8:39:00:02:db:c6:c6:4f:59:3d:
                    4b:57:da:10:b3:72:9b:b4:8a:91:b1:c4:2e:7c:7c:
                    43:f6:a1:81:b2:92:5f:5f:8f:e0:bb:49:a2:3b:12:
                    10:2c:79:fc:d2:3e:ad:e2:32:e8:96:69:2b:a6:5e:
                    56:a3:06:38:bc:af:45:a6:23:d2:20:bf:d8:92:e0:
                    27:bb:a5:30:03:e4:ae:da:05:ac:90:18:f2:0b:1f:
                    93:a9:55:2f:56:0f:29:b3:c4:65:7e:73:6b:6a:8b:
                    bb:55:54:cc:63:83:bc:6e:01:88:05:2f:85:74:99:
                    21:84:08:fc:58:ac:3a:bc:ae:92:f3:8c:4f:df:94:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0F:46:E1:51:B3:15:9D:E8:52:85:80:0B:E6:84:DB:7C:6E:04:47
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230342e302f32322d3232203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:48:c3:35:c0:c3:84:39:1f:db:8c:21:d5:4c:c1:c9:08:33:
         18:e2:be:0c:f9:49:2b:08:d4:f6:78:6c:ce:62:c6:a4:e2:7e:
         26:a5:29:7c:ba:ed:ba:db:9a:b0:57:31:ac:06:37:62:68:a4:
         b0:4f:4d:ec:68:14:44:1f:54:f9:70:0f:b5:a7:66:5f:90:bf:
         87:26:b9:4d:22:d7:47:8e:74:c6:a4:8f:0c:4a:f7:3f:6b:d3:
         db:c2:83:55:fc:17:6c:b9:49:38:fe:7a:a5:c6:25:46:1a:c5:
         45:db:51:91:a9:0c:df:50:04:fc:c2:a8:9f:2c:81:4b:ea:58:
         0c:0c:87:c0:af:6a:77:07:96:db:0d:14:91:bb:3e:1c:9d:18:
         6e:c9:21:d4:d3:93:41:a3:d8:06:d3:9f:46:88:ec:25:a2:ca:
         fa:06:e5:37:cf:5c:c5:bb:86:a7:56:14:35:6e:45:fd:71:da:
         df:53:e1:d5:bb:6a:b8:53:3e:8e:b2:48:1e:5c:a7:5a:93:70:
         9e:19:58:c2:ca:89:07:d8:a5:bb:0c:cb:ae:d0:4d:ab:ce:71:
         bd:71:58:b7:d3:7a:48:87:32:5f:8d:3d:ed:fc:1f:c5:47:4b:
         ed:38:ca:2a:09:40:ec:4b:9a:bf:ee:7d:fb:4e:cd:01:1b:32:
         ce:75:59:bc
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbpfyEIs1C/Y5we0wbfpAjtLk8lUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTVaFw0yNTA0MDIxODMwMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJFQjk2MDRGQ0JGQURFM0I5
MUMxQTA5NUZGNDkzM0VFNEI3QTMxRkRFNUVGOTdDRjhERDQ3NjIyMjc4MkFFQjBF
QTRGNkVBMDJFMkVDMzU0NTkxMURFRUE3Qzc1MDA1NzlEMzE2RjYzQ0Y4MEVGMDE4
OTE5RDYxOEY1RTYyN0NFQTg0QzgwMkJCREQyOUREQzRCQzY4NjY1QjNCNDg3RkI1
RjcyNUQ5NTczQ0E3NTA0QzM1N0QxNUFEMzYwQjk2MDI4RDlGNUMwNkIwQUM5NjM0
QTE0OTcyNkVGRTIyRjk1MjMwMzdCQjhFNkQyN0QxOTk3OTRFQzNBODM5MDAwMkRC
QzZDNjRGNTkzRDRCNTdEQTEwQjM3MjlCQjQ4QTkxQjFDNDJFN0M3QzQzRjZBMTgx
QjI5MjVGNUY4RkUwQkI0OUEyM0IxMjEwMkM3OUZDRDIzRUFERTIzMkU4OTY2OTJC
QTY1RTU2QTMwNjM4QkNBRjQ1QTYyM0QyMjBCRkQ4OTJFMDI3QkJBNTMwMDNFNEFF
REEwNUFDOTAxOEYyMEIxRjkzQTk1NTJGNTYwRjI5QjNDNDY1N0U3MzZCNkE4QkJC
NTU1NENDNjM4M0JDNkUwMTg4MDUyRjg1NzQ5OTIxODQwOEZDNThBQzNBQkNBRTky
RjM4QzRGREY5NDBCNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0uuWBPy/reO5HBoJX/STPuS3ox/eXvl8+N1HYiJ4KusOpPbqAuLs
NUWRHe6nx1AFedMW9jz4DvAYkZ1hj15ifOqEyAK73SndxLxoZls7SH+19yXZVzyn
UEw1fRWtNguWAo2fXAawrJY0oUlybv4i+VIwN7uObSfRmXlOw6g5AALbxsZPWT1L
V9oQs3KbtIqRscQufHxD9qGBspJfX4/gu0miOxIQLHn80j6t4jLolmkrpl5WowY4
vK9FpiPSIL/YkuAnu6UwA+Su2gWskBjyCx+TqVUvVg8ps8RlfnNraou7VVTMY4O8
bgGIBS+FdJkhhAj8WKw6vK6S84xP35QLcQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGgPRuFRsxWd6FKFgAvmhNt8bgRHMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzgzNzJlMzkzNDJlMzIzMDM0
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzYzOTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
u17MMA0GCSqGSIb3DQEBCwUAA4IBAQAGSMM1wMOEOR/bjCHVTMHJCDMY4r4M+Ukr
CNT2eGzOYsak4n4mpSl8uu2625qwVzGsBjdiaKSwT03saBREH1T5cA+1p2ZfkL+H
JrlNItdHjnTGpI8MSvc/a9PbwoNV/BdsuUk4/nqlxiVGGsVF21GRqQzfUAT8wqif
LIFL6lgMDIfAr2p3B5bbDRSRuz4cnRhuySHU05NBo9gG059GiOwlosr6BuU3z1zF
u4anVhQ1bkX9cdrfU+HVu2q4Uz6OskgeXKdak3CeGVjCyokH2KW7DMuu0E2rznG9
cVi303pIhzJfjT3t/B/FR0vtOMoqCUDsS5q/7n37Ts0BGzLOdVm8
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org