Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134302e302f32322d3232203d3e20323632393733.roa
File:                     3137392e3130382e3134302e302f32322d3232203d3e20323632393733.roa (raw, json)
Hash identifier:          SHytJO83yDM1PIqEdV+sfFq3flxpQlT5G4VGnAtkOcY=
Subject key identifier:   9E:AB:99:05:C9:11:D6:A1:FF:A5:69:69:7B:54:D0:67:A7:88:1A:78
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       34C83AE33AE74D1B5AA3FBD318900F6600546A6C
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134302e302f32322d3232203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:28 +0000
ROA not before:           Tue 24 Sep 2024 17:40:28 +0000
ROA not after:            Tue 23 Sep 2025 17:45:28 +0000
asID:                     262973
IP address blocks:        179.108.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c8:3a:e3:3a:e7:4d:1b:5a:a3:fb:d3:18:90:0f:66:00:54:6a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:28 2024 GMT
            Not After : Sep 23 17:45:28 2025 GMT
        Subject: CN=9EAB9905C911D6A1FFA569697B54D067A7881A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:a2:36:12:11:40:9c:fd:db:03:b5:8c:64:
                    cb:31:f4:e4:1e:4d:fe:6b:c3:56:b4:0e:68:ef:58:
                    28:e2:b3:23:72:71:bc:f8:8c:ce:4f:e6:25:c3:26:
                    14:91:20:70:7d:b7:61:a8:27:93:dc:1b:9f:de:14:
                    92:cf:0e:b0:0f:b8:34:fa:4b:c1:23:4b:ac:a0:e0:
                    0a:b7:aa:8d:03:d1:53:ea:62:d2:d2:1a:3f:3c:c1:
                    fa:d5:24:6d:19:28:aa:14:45:8f:0f:d2:76:89:24:
                    ef:cd:22:3c:4f:cd:ad:ec:97:8d:03:50:ff:33:00:
                    f6:ae:8a:1b:20:d0:bc:3f:0a:02:dd:14:57:22:d2:
                    32:af:73:7e:7b:bb:41:f7:b8:45:cd:da:a3:ac:41:
                    f0:4f:c0:d2:0a:71:b8:c0:12:b5:85:9c:c0:84:28:
                    9d:07:33:30:70:4e:b9:76:6e:aa:c3:78:84:63:5a:
                    42:9e:23:41:48:46:2e:35:7b:2f:9d:2e:b5:a3:b0:
                    23:c8:11:91:f9:8f:2d:ed:85:97:bb:f4:f1:1b:8d:
                    f2:27:0b:d1:65:0a:4b:e1:02:db:d4:aa:62:7c:99:
                    67:aa:e2:26:3b:27:4d:be:5e:a5:f5:9f:dc:bc:db:
                    16:a1:07:10:23:bc:d3:ff:30:4a:52:8d:40:6e:62:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:99:05:C9:11:D6:A1:FF:A5:69:69:7B:54:D0:67:A7:88:1A:78
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134302e302f32322d3232203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:cb:6c:ec:d7:6d:0c:36:bd:35:7f:5a:45:32:b3:dc:97:b5:
         77:bc:68:80:5b:9e:d3:4e:dc:f6:55:f4:40:94:9c:29:66:42:
         e5:05:8d:13:32:07:08:93:bd:bb:d1:d8:22:04:be:9d:61:05:
         61:db:f6:87:56:db:aa:be:26:50:cd:27:1e:d5:f8:fc:03:6f:
         9c:b6:a0:47:71:e9:3e:09:38:4b:4c:9c:76:c5:0b:bb:8a:40:
         c4:18:78:a1:a6:2f:9c:9d:dc:d9:d3:54:d5:7e:1a:fa:40:0f:
         69:a4:cf:9b:c9:2c:4c:1b:29:1b:6c:2e:ee:57:96:77:5c:24:
         28:f1:e3:22:df:c8:6f:f0:33:29:47:59:3f:62:c9:0d:68:2e:
         97:02:23:8f:10:4c:4b:c2:96:e5:0d:50:73:fb:2e:30:3c:db:
         01:26:d3:8f:0f:62:92:8e:74:98:dd:30:92:fc:7a:58:a3:66:
         d2:76:95:8a:ab:dc:88:05:6f:cf:07:66:a3:fd:84:7c:5b:8d:
         3e:65:27:a7:a9:1a:58:76:7e:06:24:aa:9b:c4:e7:3b:77:58:
         54:4e:70:c8:84:f3:b3:32:9e:b7:d6:f1:0a:e1:90:54:1b:c3:
         c2:90:64:5a:24:c6:b1:42:eb:da:d3:bd:f4:ed:ed:5b:5b:0e:
         21:01:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:19 2024 by rpki-client on console-ams.rpki-client.org