Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32322d3232203d3e20323632393733.roa
File:                     3137392e3130382e3135322e302f32322d3232203d3e20323632393733.roa (raw, json)
Hash identifier:          gup30pVWp/5Ov6N5sSfyIMdt0VcuAAws/owiH1P7iv8=
Subject key identifier:   C1:CE:EF:F9:49:09:76:62:CA:43:DC:22:D0:B5:5E:CE:F6:E7:CC:A7
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       53879ED609DF27B25927590A606A1F1D99BD4F51
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32322d3232203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:28 +0000
ROA not before:           Tue 24 Sep 2024 17:40:28 +0000
ROA not after:            Tue 23 Sep 2025 17:45:28 +0000
asID:                     262973
IP address blocks:        179.108.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:87:9e:d6:09:df:27:b2:59:27:59:0a:60:6a:1f:1d:99:bd:4f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:28 2024 GMT
            Not After : Sep 23 17:45:28 2025 GMT
        Subject: CN=C1CEEFF949097662CA43DC22D0B55ECEF6E7CCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:ed:5c:8e:23:20:63:ae:4f:fe:c3:86:85:
                    f7:ea:98:28:35:33:80:2b:c8:87:89:d5:c6:3c:48:
                    d4:be:c3:31:d8:78:8d:6d:b6:bf:88:7f:ab:30:0f:
                    71:b9:f5:1a:58:a0:8b:d5:f9:35:53:42:34:92:b1:
                    b1:3d:78:68:2d:98:f5:ec:5f:02:09:fb:8c:b7:06:
                    47:85:35:47:67:44:71:3e:09:ae:1d:72:3d:19:93:
                    28:f1:27:00:4a:50:c7:97:48:fd:a0:1b:ae:5a:9f:
                    81:2f:d8:41:66:fc:99:2c:50:7a:ad:d6:cb:d4:8c:
                    59:cb:48:3c:8f:3b:93:2c:a6:db:40:f7:fc:05:4c:
                    0c:39:28:c1:b2:27:21:c4:fc:4e:48:29:fb:43:fa:
                    ff:1d:e2:f4:ad:29:fc:74:c0:0f:24:df:0a:f2:6b:
                    78:9d:33:e5:ad:36:99:ce:0d:b4:6e:e9:6f:c7:0b:
                    da:d0:a6:c3:4e:7b:74:c6:b4:a4:1d:7e:47:a4:d2:
                    42:1d:ed:ea:86:3b:1a:e3:df:24:46:11:26:76:32:
                    3f:38:a7:33:a5:83:13:01:f5:4a:8c:20:2a:f9:57:
                    25:44:93:16:e6:5c:f9:92:c5:d6:cd:09:94:23:db:
                    11:ea:af:1e:17:26:07:60:fa:b0:f0:e2:20:dd:ff:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:EF:F9:49:09:76:62:CA:43:DC:22:D0:B5:5E:CE:F6:E7:CC:A7
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32322d3232203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:61:6b:32:d0:63:8d:cd:99:d7:42:0a:cd:f5:7f:e1:e2:
         83:86:85:c5:f6:5a:c5:38:e8:c5:2b:8f:6a:33:f8:e5:96:5a:
         a1:f2:7d:24:94:b3:81:8c:de:d4:81:2a:52:b5:4d:ec:7d:1d:
         4f:db:1a:dd:ea:4b:b3:72:56:92:76:60:38:94:08:e7:ff:f2:
         fe:30:64:42:1e:eb:82:b4:dc:c3:7e:8a:0d:8c:c9:0e:95:26:
         01:c3:76:0a:87:39:6a:83:0b:cd:b4:2c:4c:5d:49:80:43:52:
         08:3f:ff:ab:d2:05:c9:29:b6:fc:7e:6e:04:56:b6:a3:46:e8:
         d4:4a:fd:6a:42:f6:50:34:01:db:6f:bc:3f:93:f4:b0:fc:b5:
         95:35:a6:1b:e2:da:76:91:75:5c:c1:88:3a:55:d4:06:5e:e8:
         65:ea:6f:75:77:c6:43:8e:8f:b4:70:f8:a6:ba:ff:5b:02:d1:
         22:85:eb:5c:27:da:64:87:23:df:1a:68:ac:3c:80:d7:eb:e8:
         c4:3e:51:5b:45:14:9a:9e:51:0a:8b:92:50:23:3e:82:c7:fb:
         eb:b8:8a:a1:26:d9:64:d9:6d:cf:2b:a1:b7:35:d2:04:c6:0f:
         63:41:10:8c:6b:62:a9:c5:99:44:cf:59:a2:0e:61:90:98:31:
         53:9f:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:44:19 2024 by rpki-client on console-ams.rpki-client.org