Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa
File:                     3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa (raw, json)
Hash identifier:          EJ9SDATDtsOM/37aSuNrzrEl0dV3UBn6B2+mobEFpD0=
Subject key identifier:   F7:AE:4D:00:96:D8:B6:4C:5E:40:19:FA:A4:DB:C9:60:DD:F4:82:52
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       41BC0F9CB4498ED23A2DBD7939161F19AD74DD16
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     262691
IP address blocks:        187.94.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:0f:9c:b4:49:8e:d2:3a:2d:bd:79:39:16:1f:19:ad:74:dd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=3082010A0282010100E139826F1257CF8A5F8AC0ACCB5613DCAE4959B1E2285AA7E4A6BA07B855CF7E114EE63A5F4B22117222690E189AB1568DFF7BE19A260057111F6B6B99687E7091CB2E160CD6C55ADB69D4000D22D97168FAD299D63B29C06E9B3199F65B5AE2FB9D4F354A7566377E8CFA62C644D1372D83DA25240EA238606DEB33783FD8FAE495C91A97EB697396B3FB62B5F9E792BA70ADABF45C75906C8AF9F4D2409D187C3FE9DD7E359D1EDD46F1228949AC36EC03F76740CF83DAA2025EF57D3AFE456AB515F0A8499D9EBCDFDEFC2B1AA3D487813FAB2D7BE9A3EE2CF1DE8C0DCAB42A2BAAC52BBED2315D680E688D458911DE8F977029D67AD0B16B65BF96E1EDC10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:39:82:6f:12:57:cf:8a:5f:8a:c0:ac:cb:56:
                    13:dc:ae:49:59:b1:e2:28:5a:a7:e4:a6:ba:07:b8:
                    55:cf:7e:11:4e:e6:3a:5f:4b:22:11:72:22:69:0e:
                    18:9a:b1:56:8d:ff:7b:e1:9a:26:00:57:11:1f:6b:
                    6b:99:68:7e:70:91:cb:2e:16:0c:d6:c5:5a:db:69:
                    d4:00:0d:22:d9:71:68:fa:d2:99:d6:3b:29:c0:6e:
                    9b:31:99:f6:5b:5a:e2:fb:9d:4f:35:4a:75:66:37:
                    7e:8c:fa:62:c6:44:d1:37:2d:83:da:25:24:0e:a2:
                    38:60:6d:eb:33:78:3f:d8:fa:e4:95:c9:1a:97:eb:
                    69:73:96:b3:fb:62:b5:f9:e7:92:ba:70:ad:ab:f4:
                    5c:75:90:6c:8a:f9:f4:d2:40:9d:18:7c:3f:e9:dd:
                    7e:35:9d:1e:dd:46:f1:22:89:49:ac:36:ec:03:f7:
                    67:40:cf:83:da:a2:02:5e:f5:7d:3a:fe:45:6a:b5:
                    15:f0:a8:49:9d:9e:bc:df:de:fc:2b:1a:a3:d4:87:
                    81:3f:ab:2d:7b:e9:a3:ee:2c:f1:de:8c:0d:ca:b4:
                    2a:2b:aa:c5:2b:be:d2:31:5d:68:0e:68:8d:45:89:
                    11:de:8f:97:70:29:d6:7a:d0:b1:6b:65:bf:96:e1:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:4D:00:96:D8:B6:4C:5E:40:19:FA:A4:DB:C9:60:DD:F4:82:52
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/3138372e39342e3230362e302f32332d3233203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:e5:3a:ff:ea:8e:7b:7a:dc:6d:1e:68:fe:c9:e1:c0:2f:
         68:e1:ac:5f:aa:2d:a0:b4:5e:57:b1:43:f6:cd:a3:c5:c9:46:
         0e:5d:68:f8:5b:80:85:0b:05:49:c0:f8:d2:35:0f:ba:fd:73:
         f0:6c:2f:98:12:ea:81:5c:96:06:12:de:a1:a9:1f:3c:b4:78:
         04:8b:88:75:3b:da:f5:d3:c7:7a:22:88:06:23:fb:75:03:f5:
         d8:09:ce:b7:64:8b:67:12:ea:e0:b6:ed:f4:cf:61:b3:cf:60:
         10:43:ea:c5:f5:c5:0b:e1:44:b4:09:32:ed:4f:20:75:4c:49:
         65:19:b9:0e:15:35:e0:1e:40:34:c6:66:78:1d:0e:44:78:c4:
         66:81:98:0b:bf:b3:9d:ba:48:70:27:fd:e7:59:ae:13:38:53:
         6e:45:eb:2e:23:af:1b:3f:f1:f2:f4:ed:6f:1e:6e:a2:f2:4c:
         29:65:27:3e:32:cc:11:62:cb:fe:66:00:38:86:77:be:93:00:
         8e:71:01:a3:e9:66:23:8e:47:0b:b2:4c:ea:1d:d9:bc:c2:dd:
         37:36:e0:cf:6c:44:3d:de:c1:ca:e8:52:a9:e6:ad:75:2a:29:
         91:76:5e:23:a9:38:b2:4d:17:cb:9d:45:d5:18:50:ac:26:60:
         37:a0:02:fa
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQbwPnLRJjtI6Lb15ORYfGa103RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz
Q0E2MEI0QTAeFw0yNDA0MDMxODI1MDlaFw0yNTA0MDIxODMwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTEzOTgyNkYxMjU3Q0Y4QTVG
OEFDMEFDQ0I1NjEzRENBRTQ5NTlCMUUyMjg1QUE3RTRBNkJBMDdCODU1Q0Y3RTEx
NEVFNjNBNUY0QjIyMTE3MjIyNjkwRTE4OUFCMTU2OERGRjdCRTE5QTI2MDA1NzEx
MUY2QjZCOTk2ODdFNzA5MUNCMkUxNjBDRDZDNTVBREI2OUQ0MDAwRDIyRDk3MTY4
RkFEMjk5RDYzQjI5QzA2RTlCMzE5OUY2NUI1QUUyRkI5RDRGMzU0QTc1NjYzNzdF
OENGQTYyQzY0NEQxMzcyRDgzREEyNTI0MEVBMjM4NjA2REVCMzM3ODNGRDhGQUU0
OTVDOTFBOTdFQjY5NzM5NkIzRkI2MkI1RjlFNzkyQkE3MEFEQUJGNDVDNzU5MDZD
OEFGOUY0RDI0MDlEMTg3QzNGRTlERDdFMzU5RDFFREQ0NkYxMjI4OTQ5QUMzNkVD
MDNGNzY3NDBDRjgzREFBMjAyNUVGNTdEM0FGRTQ1NkFCNTE1RjBBODQ5OUQ5RUJD
REZERUZDMkIxQUEzRDQ4NzgxM0ZBQjJEN0JFOUEzRUUyQ0YxREU4QzBEQ0FCNDJB
MkJBQUM1MkJCRUQyMzE1RDY4MEU2ODhENDU4OTExREU4Rjk3NzAyOUQ2N0FEMEIx
NkI2NUJGOTZFMUVEQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4TmCbxJXz4pfisCsy1YT3K5JWbHiKFqn5Ka6B7hVz34RTuY6X0si
EXIiaQ4YmrFWjf974ZomAFcRH2trmWh+cJHLLhYM1sVa22nUAA0i2XFo+tKZ1jsp
wG6bMZn2W1ri+51PNUp1Zjd+jPpixkTRNy2D2iUkDqI4YG3rM3g/2Prklckal+tp
c5az+2K1+eeSunCtq/RcdZBsivn00kCdGHw/6d1+NZ0e3UbxIolJrDbsA/dnQM+D
2qICXvV9Ov5FarUV8KhJnZ683978Kxqj1IeBP6ste+mj7izx3owNyrQqK6rFK77S
MV1oDmiNRYkR3o+XcCnWetCxa2W/luHtwQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPeuTQCW2LZMXkAZ+qTbyWDd9IJSMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h
tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1
OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw
QjRBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8xLzMxMzgzNzJlMzkzNDJlMzIzMDM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzYzOTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
u17OMA0GCSqGSIb3DQEBCwUAA4IBAQCqLOU6/+qOe3rcbR5o/snhwC9o4axfqi2g
tF5XsUP2zaPFyUYOXWj4W4CFCwVJwPjSNQ+6/XPwbC+YEuqBXJYGEt6hqR88tHgE
i4h1O9r108d6IogGI/t1A/XYCc63ZItnEurgtu30z2Gzz2AQQ+rF9cUL4US0CTLt
TyB1TEllGbkOFTXgHkA0xmZ4HQ5EeMRmgZgLv7OdukhwJ/3nWa4TOFNuResuI68b
P/Hy9O1vHm6i8kwpZSc+MswRYsv+ZgA4hne+kwCOcQGj6WYjjkcLskzqHdm8wt03
NuDPbEQ93sHK6FKp5q11KimRdl4jqTiyTRfLnUXVGFCsJmA3oAL6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org