Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134382e302f32322d3232203d3e20323632393733.roa
File:                     3137392e3130382e3134382e302f32322d3232203d3e20323632393733.roa (raw, json)
Hash identifier:          VXk9zdcEKpLANzupI8LycSYCHoRjcjsH+MAImggHUPM=
Subject key identifier:   36:18:52:6E:FB:02:6A:8F:D8:BC:31:47:FB:76:63:F1:F7:65:EA:5E
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       1508A2627DDB5B0C10F894E58F0B63CF844371A8
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134382e302f32322d3232203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:29 +0000
ROA not before:           Tue 24 Sep 2024 17:40:29 +0000
ROA not after:            Tue 23 Sep 2025 17:45:29 +0000
asID:                     262973
IP address blocks:        179.108.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:08:a2:62:7d:db:5b:0c:10:f8:94:e5:8f:0b:63:cf:84:43:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:29 2024 GMT
            Not After : Sep 23 17:45:29 2025 GMT
        Subject: CN=3618526EFB026A8FD8BC3147FB7663F1F765EA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:73:66:ea:f6:07:fc:9e:f7:97:fc:ba:4a:
                    6e:32:38:35:6a:57:06:41:7c:cd:ec:c6:21:5a:cd:
                    90:7e:fb:dc:75:27:a4:ea:28:16:12:20:08:40:24:
                    cc:5e:e4:09:28:ab:e7:17:ef:58:89:af:d5:43:ca:
                    c5:91:f9:03:70:3e:c4:f4:f6:3b:7b:77:a0:0d:0c:
                    a4:44:9f:c9:4b:cc:13:e5:03:d9:af:5e:c0:58:33:
                    f5:5b:5b:5c:f5:8e:7f:76:12:9e:3d:88:1e:e8:7f:
                    b0:be:f1:82:b3:87:0a:6e:c9:97:4a:77:a4:7d:98:
                    a2:30:fd:06:36:30:23:9c:0c:40:d5:c6:aa:62:e1:
                    41:f8:0c:bf:81:f6:7e:52:36:4a:f5:8a:19:1f:bd:
                    3d:07:f3:ea:9c:d2:4d:ed:63:ed:d9:11:3f:6b:e3:
                    39:57:de:97:78:3f:0b:fc:7e:29:3b:dc:d5:4d:7e:
                    f8:1f:ab:8b:e2:82:a2:b7:f3:c9:14:e3:1b:a2:cf:
                    f6:dd:a0:00:5f:18:76:cd:dc:ca:46:9d:06:35:d0:
                    38:e7:63:91:4f:32:75:ca:8d:4c:9e:9f:15:81:3d:
                    3d:b7:2d:1c:b5:1e:33:25:0b:1b:ab:f9:9c:52:a7:
                    0f:48:fd:75:fe:a8:0c:7c:00:e4:4b:06:ec:20:40:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:18:52:6E:FB:02:6A:8F:D8:BC:31:47:FB:76:63:F1:F7:65:EA:5E
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3134382e302f32322d3232203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:c9:fd:b1:cd:ea:8d:6b:75:3f:ee:31:73:a0:88:4d:09:
         ef:71:84:54:da:1d:1c:f8:ff:52:48:2d:8e:d0:33:90:12:4f:
         4b:b0:fa:97:3b:c7:49:6e:96:4b:fc:89:6f:c7:3e:d4:59:cc:
         a5:88:58:66:8f:59:f7:fc:93:28:f0:51:c5:00:ca:66:e7:49:
         b1:2d:c6:77:d5:4b:33:76:0a:1e:52:c8:3e:94:1a:87:5b:e2:
         e7:54:c7:a8:24:92:47:43:b7:ee:fe:d3:69:db:22:6f:06:ca:
         b5:f7:98:72:78:7f:4c:93:6f:a3:3b:2a:ec:0a:83:51:22:15:
         25:e4:cc:46:0d:7b:c5:2f:25:4c:8e:03:9e:8a:58:fd:ca:e2:
         7d:b4:1a:98:5b:4e:a1:56:d0:2b:ca:25:07:d9:57:cf:23:ac:
         81:f4:57:b9:d7:81:08:c8:09:b8:a0:6e:5e:6c:cd:08:5f:15:
         c1:72:d3:88:09:97:7e:86:40:2d:1f:cf:53:b9:d6:66:cc:96:
         57:4f:7e:52:22:84:86:f6:b3:77:49:25:1d:44:a7:51:b9:b6:
         5e:23:88:7a:77:ef:12:47:dd:6c:f5:41:aa:aa:15:9f:06:58:
         e8:dd:c6:23:1a:27:60:05:59:dc:ea:c5:ce:1a:8e:87:22:5e:
         2d:3e:5c:d1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFQiiYn3bWwwQ+JTljwtjz4RDcagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBOUUwNkUxMkQyRUMyMEVBQkEyMDBBNTZFQzZDNzI1
QUQ3NjQzODAeFw0yNDA5MjQxNzQwMjlaFw0yNTA5MjMxNzQ1MjlaMDMxMTAvBgNV
BAMTKDM2MTg1MjZFRkIwMjZBOEZEOEJDMzE0N0ZCNzY2M0YxRjc2NUVBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX/3Nm6vYH/J73l/y6Sm4yODVq
VwZBfM3sxiFazZB++9x1J6TqKBYSIAhAJMxe5Akoq+cX71iJr9VDysWR+QNwPsT0
9jt7d6ANDKREn8lLzBPlA9mvXsBYM/VbW1z1jn92Ep49iB7of7C+8YKzhwpuyZdK
d6R9mKIw/QY2MCOcDEDVxqpi4UH4DL+B9n5SNkr1ihkfvT0H8+qc0k3tY+3ZET9r
4zlX3pd4Pwv8fik73NVNfvgfq4vigqK388kU4xuiz/bdoABfGHbN3MpGnQY10Djn
Y5FPMnXKjUyenxWBPT23LRy1HjMlCxur+ZxSpw9I/XX+qAx8AORLBuwgQLFTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNhhSbvsCao/YvDFH+3Zj8fdl6l4wHwYDVR0j
BBgwFoAUA6ngbhLS7CDquiAKVuxsclrXZDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNwcDVUZlNUSHN2SGh6Nm90dkg1WnZZMXlpTk1qWGZQd3F4aXFURFlD
Tm0vMC8wM0E5RTA2RTEyRDJFQzIwRUFCQTIwMEE1NkVDNkM3MjVBRDc2NDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQTlFMDZFMTJEMkVDMjBF
QUJBMjAwQTU2RUM2QzcyNUFENzY0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTcHA1VGZTVEhzdkhoejZvdHZINVp2WTF5aU5NalhmUHdxeGlxVERZQ05tLzAv
MzEzNzM5MmUzMTMwMzgyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArNslDANBgkqhkiG9w0BAQsFAAOCAQEAe9zJ
/bHN6o1rdT/uMXOgiE0J73GEVNodHPj/UkgtjtAzkBJPS7D6lzvHSW6WS/yJb8c+
1FnMpYhYZo9Z9/yTKPBRxQDKZudJsS3Gd9VLM3YKHlLIPpQah1vi51THqCSSR0O3
7v7TadsibwbKtfeYcnh/TJNvozsq7AqDUSIVJeTMRg17xS8lTI4DnopY/crifbQa
mFtOoVbQK8olB9lXzyOsgfRXudeBCMgJuKBuXmzNCF8VwXLTiAmXfoZALR/PU7nW
ZsyWV09+UiKEhvazd0klHUSnUbm2XiOIenfvEkfdbPVBqqoVnwZY6N3GIxonYAVZ
3OrFzhqOhyJeLT5c0Q==
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:19 2024 by rpki-client on console-ams.rpki-client.org