Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          PBbp/ysUhpqixMLpDN2IN71nyuHg1c8HsQ2Hni0Wjzo=
Subject key identifier:   A9:9C:86:33:9C:9D:D5:61:97:22:35:FE:1C:1B:BB:98:26:24:1C:18
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       250B9D6AA09F6CD1DD0EBBC8D302A402D70030B8
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:17 +0000
ROA not before:           Wed 03 Apr 2024 18:25:17 +0000
ROA not after:            Wed 02 Apr 2025 18:30:17 +0000
asID:                     262691
IP address blocks:        187.94.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0b:9d:6a:a0:9f:6c:d1:dd:0e:bb:c8:d3:02:a4:02:d7:00:30:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:17 2024 GMT
            Not After : Apr  2 18:30:17 2025 GMT
        Subject: CN=3082010A0282010100B7897EAC75A641EF11290513D981170D06280B7E3BB9CB548FC390E27921CAB7745432DCBD149DF8AD47D435C411F2C6226691DB94AA878A04FEE496EF9633C775454FFA8595B49C3B993D10293743CA03548E8FD442C236946F051C2157E1A4AF17888A1DD92AA76BBC4ACF308CBC1FB28258DF06545CF197C3B08FA2F50B9FA1C9A81DF6CA996B822CAFE5752021132F300AAE03A0C850053C6323ADB4BFCBC2B7F026D2C779B901C444C8030A68033BB75EBC34A5B1691102D0AA0CF5CD46AB49202C661284F5B76665E044A3685761F1B2038834E9BD71965772F7CE558FBD3A0D800E8149492C5E6AAA47B4E5CFCA0551A898DB67DE40D3716D4E08E1D10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:7e:ac:75:a6:41:ef:11:29:05:13:d9:81:
                    17:0d:06:28:0b:7e:3b:b9:cb:54:8f:c3:90:e2:79:
                    21:ca:b7:74:54:32:dc:bd:14:9d:f8:ad:47:d4:35:
                    c4:11:f2:c6:22:66:91:db:94:aa:87:8a:04:fe:e4:
                    96:ef:96:33:c7:75:45:4f:fa:85:95:b4:9c:3b:99:
                    3d:10:29:37:43:ca:03:54:8e:8f:d4:42:c2:36:94:
                    6f:05:1c:21:57:e1:a4:af:17:88:8a:1d:d9:2a:a7:
                    6b:bc:4a:cf:30:8c:bc:1f:b2:82:58:df:06:54:5c:
                    f1:97:c3:b0:8f:a2:f5:0b:9f:a1:c9:a8:1d:f6:ca:
                    99:6b:82:2c:af:e5:75:20:21:13:2f:30:0a:ae:03:
                    a0:c8:50:05:3c:63:23:ad:b4:bf:cb:c2:b7:f0:26:
                    d2:c7:79:b9:01:c4:44:c8:03:0a:68:03:3b:b7:5e:
                    bc:34:a5:b1:69:11:02:d0:aa:0c:f5:cd:46:ab:49:
                    20:2c:66:12:84:f5:b7:66:65:e0:44:a3:68:57:61:
                    f1:b2:03:88:34:e9:bd:71:96:57:72:f7:ce:55:8f:
                    bd:3a:0d:80:0e:81:49:49:2c:5e:6a:aa:47:b4:e5:
                    cf:ca:05:51:a8:98:db:67:de:40:d3:71:6d:4e:08:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9C:86:33:9C:9D:D5:61:97:22:35:FE:1C:1B:BB:98:26:24:1C:18
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230342e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:10:45:64:c3:3d:f4:43:a9:8e:c3:de:9b:86:9d:83:7f:e1:
         fe:41:0b:76:cc:6e:74:68:6e:73:7c:52:b4:c3:27:f8:1f:38:
         68:98:ba:2a:1d:fd:bf:07:69:ff:66:6c:70:d1:da:5b:ce:26:
         f3:f6:83:7c:0b:96:46:f9:34:0c:3a:37:70:8b:71:a2:4a:75:
         d3:1e:8e:28:eb:8f:45:67:0d:cb:e8:56:a4:d3:c4:b7:46:61:
         0d:f6:98:0a:a6:a4:cf:6d:be:02:69:0c:cf:b4:79:60:7e:fe:
         40:95:b7:8b:17:ca:b6:72:cf:65:92:39:7c:7e:c0:ef:cc:97:
         37:c7:5e:bf:f8:97:65:fb:07:6a:3d:d9:8d:ba:6e:e4:fe:97:
         d4:de:64:a4:0b:fa:44:20:50:af:bb:fe:04:4c:05:de:58:83:
         bb:07:f4:5a:4b:db:cb:fa:6c:d2:6d:c1:cd:7b:22:08:d7:d4:
         88:96:cc:a4:22:de:14:52:02:c9:5a:a3:6d:97:4c:47:b7:a9:
         30:f2:9e:89:a0:3f:99:b3:87:4e:37:0b:c9:80:88:84:a8:c9:
         4e:92:9b:bd:e9:7d:50:31:56:a6:84:4f:ce:8e:af:81:b8:7c:
         22:87:f2:aa:9a:30:c6:59:97:22:8d:d0:cd:52:8a:59:03:54:
         2a:c1:72:3c
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJQudaqCfbNHdDrvI0wKkAtcAMLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MTdaFw0yNTA0MDIxODMwMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjc4OTdFQUM3NUE2NDFFRjEx
MjkwNTEzRDk4MTE3MEQwNjI4MEI3RTNCQjlDQjU0OEZDMzkwRTI3OTIxQ0FCNzc0
NTQzMkRDQkQxNDlERjhBRDQ3RDQzNUM0MTFGMkM2MjI2NjkxREI5NEFBODc4QTA0
RkVFNDk2RUY5NjMzQzc3NTQ1NEZGQTg1OTVCNDlDM0I5OTNEMTAyOTM3NDNDQTAz
NTQ4RThGRDQ0MkMyMzY5NDZGMDUxQzIxNTdFMUE0QUYxNzg4OEExREQ5MkFBNzZC
QkM0QUNGMzA4Q0JDMUZCMjgyNThERjA2NTQ1Q0YxOTdDM0IwOEZBMkY1MEI5RkEx
QzlBODFERjZDQTk5NkI4MjJDQUZFNTc1MjAyMTEzMkYzMDBBQUUwM0EwQzg1MDA1
M0M2MzIzQURCNEJGQ0JDMkI3RjAyNkQyQzc3OUI5MDFDNDQ0QzgwMzBBNjgwMzNC
Qjc1RUJDMzRBNUIxNjkxMTAyRDBBQTBDRjVDRDQ2QUI0OTIwMkM2NjEyODRGNUI3
NjY2NUUwNDRBMzY4NTc2MUYxQjIwMzg4MzRFOUJENzE5NjU3NzJGN0NFNTU4RkJE
M0EwRDgwMEU4MTQ5NDkyQzVFNkFBQTQ3QjRFNUNGQ0EwNTUxQTg5OERCNjdERTQw
RDM3MTZENEUwOEUxRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt4l+rHWmQe8RKQUT2YEXDQYoC347uctUj8OQ4nkhyrd0VDLcvRSd
+K1H1DXEEfLGImaR25Sqh4oE/uSW75Yzx3VFT/qFlbScO5k9ECk3Q8oDVI6P1ELC
NpRvBRwhV+GkrxeIih3ZKqdrvErPMIy8H7KCWN8GVFzxl8Owj6L1C5+hyagd9sqZ
a4Isr+V1ICETLzAKrgOgyFAFPGMjrbS/y8K38CbSx3m5AcREyAMKaAM7t168NKWx
aREC0KoM9c1Gq0kgLGYShPW3ZmXgRKNoV2HxsgOINOm9cZZXcvfOVY+9Og2ADoFJ
SSxeaqpHtOXPygVRqJjbZ95A03FtTgjh0QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKmchjOcndVhlyI1/hwbu5gmJBwYMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzgzNzJlMzkzNDJlMzIzMDM0
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzYzOTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
u17MMA0GCSqGSIb3DQEBCwUAA4IBAQBWEEVkwz30Q6mOw96bhp2Df+H+QQt2zG50
aG5zfFK0wyf4HzhomLoqHf2/B2n/Zmxw0dpbzibz9oN8C5ZG+TQMOjdwi3GiSnXT
Ho4o649FZw3L6Fak08S3RmEN9pgKpqTPbb4CaQzPtHlgfv5AlbeLF8q2cs9lkjl8
fsDvzJc3x16/+Jdl+wdqPdmNum7k/pfU3mSkC/pEIFCvu/4ETAXeWIO7B/RaS9vL
+mzSbcHNeyII19SIlsykIt4UUgLJWqNtl0xHt6kw8p6JoD+Zs4dONwvJgIiEqMlO
kpu96X1QMVamhE/Ojq+BuHwih/KqmjDGWZcijdDNUopZA1QqwXI8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org