Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134342e302f32322d3232203d3e20323632393733.roa
File:                     3137392e3130382e3134342e302f32322d3232203d3e20323632393733.roa (raw, json)
Hash identifier:          vAlYRt1+W+GuredVfmdPd8ANwvuzf5iht+FGdJfXl4o=
Subject key identifier:   96:D1:36:B7:13:7B:B9:80:0D:31:E9:3F:91:11:96:7D:35:16:13:D3
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       336D49CFE784170183C71916572DC57BBFC07304
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134342e302f32322d3232203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:30 +0000
ROA not before:           Tue 24 Sep 2024 17:40:30 +0000
ROA not after:            Tue 23 Sep 2025 17:45:30 +0000
asID:                     262973
IP address blocks:        179.108.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6d:49:cf:e7:84:17:01:83:c7:19:16:57:2d:c5:7b:bf:c0:73:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:30 2024 GMT
            Not After : Sep 23 17:45:30 2025 GMT
        Subject: CN=96D136B7137BB9800D31E93F9111967D351613D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:1e:2d:7e:67:b5:df:53:b3:d1:9b:ff:cd:
                    25:15:db:a8:ae:ea:e7:9f:79:34:11:85:20:a5:e6:
                    21:6a:d1:78:5f:cc:29:be:ef:93:44:22:f5:9f:ba:
                    ff:f8:23:1c:03:ab:29:3f:41:51:cb:1a:6d:54:13:
                    3d:f8:cf:14:80:43:ee:37:c7:7e:a7:15:2a:2a:01:
                    f2:ae:db:dd:ce:66:d6:2f:fd:69:39:eb:a8:5b:62:
                    3d:1e:c2:9b:bc:5f:07:30:85:81:bd:94:c5:e9:df:
                    50:14:6a:59:fc:e7:44:0e:76:d1:3e:94:01:80:e5:
                    73:e8:e5:ae:5e:6f:b8:0b:40:1a:63:ba:f3:d6:49:
                    57:6b:2f:f0:6b:23:e1:97:9c:dd:9c:27:4b:d6:f6:
                    81:9d:12:3f:45:d9:ed:63:1e:4e:52:d4:1e:af:ba:
                    bb:d0:ed:71:9c:f1:9f:55:72:a8:47:1f:e5:37:69:
                    1f:5b:90:99:93:12:94:73:05:b6:d4:6d:5c:c6:9e:
                    42:d7:27:a5:cf:aa:ed:d7:db:1f:17:ac:d3:64:61:
                    11:4c:80:36:9f:0c:61:e2:f8:28:96:03:4e:50:01:
                    9e:f3:8a:8d:e6:aa:9a:98:83:c5:12:6b:09:3a:a5:
                    be:f2:18:70:96:ee:fa:ee:09:de:4e:8a:e4:54:98:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D1:36:B7:13:7B:B9:80:0D:31:E9:3F:91:11:96:7D:35:16:13:D3
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134342e302f32322d3232203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:c4:3c:3d:f3:ca:d6:7b:6a:7f:e0:35:c6:d7:cb:27:b0:32:
         b5:7f:39:71:c4:08:c1:da:5e:a8:a4:33:d5:a6:d9:d3:a8:7f:
         d0:08:08:65:75:fa:8d:d7:b2:19:d4:7a:d7:fd:1b:98:c3:42:
         75:6f:26:41:a8:da:cd:1d:06:12:49:34:e8:c2:d9:11:63:a9:
         6f:72:99:dc:c0:6d:14:b5:81:4c:a9:1f:79:2a:86:95:d8:50:
         f0:27:83:eb:b6:5c:07:0b:87:25:d9:21:eb:85:5a:32:34:eb:
         3c:41:80:aa:de:ff:e7:69:e4:ec:9e:d6:c5:6e:87:5a:f7:da:
         38:93:99:65:28:63:3b:40:46:f3:41:38:09:e1:1f:46:bf:2d:
         b2:71:61:4a:00:db:17:d1:75:fd:06:c4:05:1a:56:59:a8:ae:
         83:32:a8:fe:99:40:92:5f:ec:0d:0f:47:b9:9a:08:53:8c:e6:
         cd:c5:6f:28:58:7e:19:1e:a6:22:25:03:32:b4:0b:81:ad:7a:
         40:0a:43:7b:30:f7:fd:10:0a:5e:ca:74:ba:d2:99:68:fa:75:
         ff:a1:28:26:ed:b2:ba:2c:1f:d5:da:ed:ef:88:58:8b:4c:87:
         22:cd:e8:e6:b5:00:9b:88:01:36:28:6c:01:3f:38:fd:d6:a3:
         d1:c2:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:19 2024 by rpki-client on console-ams.rpki-client.org