Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32322d3232203d3e20323632393733.roa
File:                     3137392e3130382e3132382e302f32322d3232203d3e20323632393733.roa (raw, json)
Hash identifier:          FrQPq0MvJl7eOmqHNKBiwJpBfrUrMc4y2hA3V+ew7mI=
Subject key identifier:   0F:00:25:D8:A9:03:9C:79:D1:62:78:62:79:E7:59:34:58:19:83:E0
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       245CBD0F9322E12AB2A5B9645C4D0BABE25CB6B6
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32322d3232203d3e20323632393733.roa
Signing time:             Wed 02 Oct 2024 16:30:48 +0000
ROA not before:           Wed 02 Oct 2024 16:25:48 +0000
ROA not after:            Wed 01 Oct 2025 16:30:48 +0000
asID:                     262973
IP address blocks:        179.108.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 13:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5c:bd:0f:93:22:e1:2a:b2:a5:b9:64:5c:4d:0b:ab:e2:5c:b6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Oct  2 16:25:48 2024 GMT
            Not After : Oct  1 16:30:48 2025 GMT
        Subject: CN=0F0025D8A9039C79D162786279E75934581983E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:83:e0:e0:8a:3e:8a:09:f9:fd:d6:db:68:10:
                    48:08:62:fc:19:06:35:dc:d8:80:93:4b:55:e5:bd:
                    ff:11:cb:6f:8b:5e:09:6c:f8:6b:2d:a3:64:cd:cd:
                    ab:3b:e7:06:9b:aa:41:e1:57:8d:2a:10:32:67:c3:
                    9e:ca:86:aa:2b:38:2a:8c:c4:d2:99:26:46:5e:fe:
                    e2:fb:bb:72:eb:87:7d:df:20:1d:44:06:85:30:4f:
                    5c:ae:55:56:36:1b:fa:b1:09:d7:70:66:66:fc:99:
                    66:f2:6c:dc:a5:72:78:9d:54:6b:73:14:c1:d5:63:
                    30:19:7c:05:38:72:e5:c0:8e:f2:b0:ce:42:17:e4:
                    df:3b:92:aa:46:8d:42:ab:2c:82:54:a0:64:41:2c:
                    54:9f:79:cc:50:32:2c:1c:8c:a9:f0:a8:e0:b4:a5:
                    fc:76:45:80:82:01:47:ea:f7:01:88:a0:9f:0d:15:
                    8b:79:8f:95:9a:8f:46:d5:b8:3d:a1:c0:6a:bb:57:
                    91:6f:80:33:14:3b:31:4d:27:6b:91:37:e1:a7:e1:
                    93:7f:26:26:6f:12:c5:4a:10:01:74:fb:80:d0:86:
                    c4:95:8b:43:1f:9f:84:ff:56:77:1b:eb:55:f2:b9:
                    2a:00:bd:70:d2:9f:bc:64:1e:a7:46:ec:a1:5e:19:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:25:D8:A9:03:9C:79:D1:62:78:62:79:E7:59:34:58:19:83:E0
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3132382e302f32322d3232203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:2b:f5:9d:30:7d:0d:9e:ca:52:3e:92:33:8f:7a:89:4f:76:
         38:d7:63:0b:a9:e3:d3:98:95:2d:57:cb:29:15:bf:8b:2b:ef:
         c1:13:7d:98:bb:23:0a:69:45:ca:89:9a:1e:84:10:12:6e:01:
         fd:33:91:d0:27:10:0b:fa:29:66:04:a0:1f:0b:c1:aa:72:fe:
         28:53:12:a1:b9:ca:6c:bc:f3:9f:e1:f2:e3:20:c8:e6:0a:79:
         9d:c5:3b:76:72:2b:cd:9f:a7:27:a5:ee:3b:f6:3d:f4:84:b1:
         56:08:df:c6:84:09:e8:f2:e1:38:94:70:43:0c:ea:28:1b:d4:
         af:a9:9a:96:f0:0c:7f:a2:5f:cc:3a:28:41:92:90:9c:be:82:
         43:50:82:8f:5f:08:57:6a:fa:28:c6:2e:bf:b0:a3:5e:b3:98:
         69:6f:b3:68:32:05:e7:02:75:d1:cd:b0:9f:2b:dd:bb:3f:e4:
         a9:77:34:94:6a:7e:16:a1:51:96:ee:ca:3a:03:39:cb:36:54:
         62:a5:1b:2a:cd:05:90:82:78:e3:e4:77:d7:b4:05:bb:e0:88:
         9c:95:a5:87:e2:af:ed:d2:a4:93:16:0f:76:5a:ac:ae:c8:3f:
         69:51:42:4b:a1:43:64:d1:d0:19:62:a5:89:43:35:3d:27:9c:
         d4:91:38:4d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJFy9D5Mi4SqypblkXE0Lq+JctrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDEwMDIxNjI1NDhaFw0yNTEwMDExNjMwNDhaMDMxMTAvBgNV
BAMTKDBGMDAyNUQ4QTkwMzlDNzlEMTYyNzg2Mjc5RTc1OTM0NTgxOTgzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2g+Dgij6KCfn91ttoEEgIYvwZ
BjXc2ICTS1Xlvf8Ry2+LXgls+Gsto2TNzas75wabqkHhV40qEDJnw57KhqorOCqM
xNKZJkZe/uL7u3Lrh33fIB1EBoUwT1yuVVY2G/qxCddwZmb8mWbybNylcnidVGtz
FMHVYzAZfAU4cuXAjvKwzkIX5N87kqpGjUKrLIJUoGRBLFSfecxQMiwcjKnwqOC0
pfx2RYCCAUfq9wGIoJ8NFYt5j5Waj0bVuD2hwGq7V5FvgDMUOzFNJ2uRN+Gn4ZN/
JiZvEsVKEAF0+4DQhsSVi0Mfn4T/Vncb61XyuSoAvXDSn7xkHqdG7KFeGZCNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDwAl2KkDnHnRYnhieedZNFgZg+AwHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArNsgDANBgkqhkiG9w0BAQsFAAOCAQEAOiv1
nTB9DZ7KUj6SM496iU92ONdjC6nj05iVLVfLKRW/iyvvwRN9mLsjCmlFyomaHoQQ
Em4B/TOR0CcQC/opZgSgHwvBqnL+KFMSobnKbLzzn+Hy4yDI5gp5ncU7dnIrzZ+n
J6XuO/Y99ISxVgjfxoQJ6PLhOJRwQwzqKBvUr6malvAMf6JfzDooQZKQnL6CQ1CC
j18IV2r6KMYuv7CjXrOYaW+zaDIF5wJ10c2wnyvduz/kqXc0lGp+FqFRlu7KOgM5
yzZUYqUbKs0FkIJ44+R317QFu+CInJWlh+Kv7dKkkxYPdlqsrsg/aVFCS6FDZNHQ
GWKliUM1PSec1JE4TQ==
-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:25 2024 by rpki-client on console-fra.rpki-client.org