Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133322e302f32322d3232203d3e20323632393733.roa
File:                     3137392e3130382e3133322e302f32322d3232203d3e20323632393733.roa (raw, json)
Hash identifier:          oHMMOPHKD4Qq67FLb7ps/rvtr2cTCWdWUEQ7rw4+/gA=
Subject key identifier:   8E:C7:6E:5E:86:F2:46:0C:4B:07:64:C2:F4:EB:57:CE:F6:12:6E:43
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       4EF8B22E6AAD67AF65726B824E968B8447BF313D
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133322e302f32322d3232203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:28 +0000
ROA not before:           Tue 24 Sep 2024 17:40:28 +0000
ROA not after:            Tue 23 Sep 2025 17:45:28 +0000
asID:                     262973
IP address blocks:        179.108.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f8:b2:2e:6a:ad:67:af:65:72:6b:82:4e:96:8b:84:47:bf:31:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:28 2024 GMT
            Not After : Sep 23 17:45:28 2025 GMT
        Subject: CN=8EC76E5E86F2460C4B0764C2F4EB57CEF6126E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:63:41:14:b8:c9:7a:d1:42:be:7e:5d:08:
                    60:d3:c6:04:f8:e1:6c:63:cb:30:da:2a:ba:fa:11:
                    1a:be:bb:21:cb:40:dc:6f:25:ca:8c:4c:60:93:f8:
                    f8:c8:e9:8d:d2:cd:48:cf:b0:19:75:0d:77:73:0d:
                    bd:1f:39:3b:cb:3d:08:3e:c4:d8:11:a5:43:6d:18:
                    de:06:6c:6d:9f:51:6c:fb:23:cf:a3:99:5f:4d:52:
                    fb:21:68:00:ed:5a:d5:f0:36:e9:fd:2a:14:cf:44:
                    3d:9e:ae:95:8a:e2:20:93:bb:0a:47:b3:54:50:11:
                    98:d0:e1:5f:07:40:64:17:b0:d3:cb:94:0c:50:4e:
                    4a:81:4d:d2:aa:75:dc:67:ba:93:67:f5:cc:f9:f5:
                    f9:f1:88:98:70:13:08:15:57:05:5f:2e:f5:96:13:
                    70:ce:4b:44:b8:72:29:8e:da:e5:60:23:5d:18:69:
                    50:8c:ca:90:0a:15:17:a9:f9:18:2a:d9:2a:dc:55:
                    6e:d1:50:05:84:ef:dd:7a:d9:0e:bb:88:4e:75:c4:
                    9a:cf:4f:d9:16:0d:17:d1:d7:c0:94:f7:c9:0b:49:
                    6c:f1:f5:cd:51:18:98:18:3d:95:cf:d0:23:37:d5:
                    a9:64:5f:50:6c:c9:30:3f:fd:b6:72:36:4a:da:64:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:6E:5E:86:F2:46:0C:4B:07:64:C2:F4:EB:57:CE:F6:12:6E:43
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3133322e302f32322d3232203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:a3:a2:5f:8c:8a:02:43:16:92:3d:de:d6:27:e6:16:f7:
         99:2a:7d:31:48:59:2b:4f:eb:d7:9f:f8:52:55:45:cb:0a:40:
         4c:78:52:79:8a:82:d1:87:44:d6:0a:34:ee:60:db:d5:44:15:
         69:06:8b:b5:1a:e4:de:b3:49:cb:cd:62:41:38:a8:a6:ea:0e:
         9e:00:db:df:1e:8d:1d:45:83:7a:f3:cb:7f:aa:22:24:fe:59:
         71:10:45:d2:3c:e0:1c:76:fd:97:24:19:2b:e6:41:8d:96:38:
         bc:78:fa:5d:2d:79:6e:02:fc:f3:9a:ec:a7:40:05:04:95:57:
         7c:9d:06:f3:f9:fb:1c:36:94:7a:bd:8f:e9:32:6a:d2:4a:5b:
         be:91:d4:99:dc:40:5b:57:19:08:72:03:f5:ca:83:1d:15:0b:
         44:9c:e3:ec:9a:16:c0:11:9d:47:2e:b2:5a:fb:df:92:2f:98:
         74:74:7b:c1:d6:f9:18:56:5e:d9:d7:9b:f1:b4:39:c4:17:01:
         7b:17:48:6a:2f:03:a0:f7:30:f5:c8:45:f9:61:f2:be:ba:03:
         ca:0f:b1:41:69:46:20:f9:22:85:82:0b:79:4e:4d:f6:ce:6e:
         66:39:36:61:8c:18:f7:79:c3:05:e3:86:b6:aa:f1:30:4d:dd:
         4c:c2:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:19 2024 by rpki-client on console-ams.rpki-client.org