Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135362e302f32322d3232203d3e20323632393733.roa
File:                     3137392e3130382e3135362e302f32322d3232203d3e20323632393733.roa (raw, json)
Hash identifier:          MtfoDQn1FEnCfUKyj/uhCsfOMKfREgRe9RLTinnwak0=
Subject key identifier:   A9:56:A7:E8:1A:87:ED:D2:37:57:A8:03:4A:BA:65:FD:4C:C9:79:73
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       113AAB58E28E987FF30812FB295D1AFFF7841A4A
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135362e302f32322d3232203d3e20323632393733.roa
Signing time:             Tue 24 Sep 2024 17:45:30 +0000
ROA not before:           Tue 24 Sep 2024 17:40:30 +0000
ROA not after:            Tue 23 Sep 2025 17:45:30 +0000
asID:                     262973
IP address blocks:        179.108.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3a:ab:58:e2:8e:98:7f:f3:08:12:fb:29:5d:1a:ff:f7:84:1a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Sep 24 17:40:30 2024 GMT
            Not After : Sep 23 17:45:30 2025 GMT
        Subject: CN=A956A7E81A87EDD23757A8034ABA65FD4CC97973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:01:44:69:a7:08:b7:fa:20:09:c1:2f:df:
                    74:5e:f3:d5:a9:76:83:6a:41:bd:d8:32:84:9c:91:
                    d0:12:76:cf:50:9a:9e:38:cc:6c:bb:ec:17:f0:f9:
                    8a:fb:5f:1c:13:ca:aa:8e:b9:7e:62:a2:4a:c2:1c:
                    e8:9e:7c:29:e5:da:09:c5:cc:75:47:90:2e:52:11:
                    65:2f:0d:d8:2c:68:6f:fb:21:5b:89:27:14:21:3b:
                    db:4f:1d:c0:4d:de:07:58:38:a5:dd:48:65:5f:77:
                    4b:eb:ab:07:6c:21:91:a1:b4:f1:81:c8:73:29:f7:
                    92:be:08:e8:14:71:0c:bf:1b:88:cf:ea:fc:37:dc:
                    16:f6:e1:52:2e:d4:fa:a6:90:0c:9a:c5:50:75:14:
                    4f:3f:91:5a:97:21:a1:7e:32:64:49:19:b2:07:31:
                    95:40:e2:ed:5b:27:cb:58:19:2e:b8:40:de:f9:0a:
                    7a:db:71:d4:35:2e:8c:54:3d:e8:60:31:db:eb:7b:
                    32:cf:a8:46:fd:6f:fa:fa:eb:07:86:38:5b:6e:1e:
                    bc:82:66:30:24:97:d4:c3:73:98:31:7c:22:cb:fd:
                    74:4b:10:ac:54:42:49:08:b2:39:cc:23:5f:eb:ab:
                    13:ee:8b:b4:8d:32:22:d6:8c:63:79:68:5d:82:6f:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:56:A7:E8:1A:87:ED:D2:37:57:A8:03:4A:BA:65:FD:4C:C9:79:73
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135362e302f32322d3232203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:41:3e:31:dd:f8:8a:b3:8b:71:e2:f1:60:eb:b6:a1:a3:1f:
         e6:4f:21:be:21:de:40:c6:11:63:2f:a5:0c:48:82:a1:86:b2:
         44:93:ad:a3:b4:8d:d9:ab:85:7d:55:e7:06:51:48:74:6f:a8:
         23:5a:39:a5:c2:44:40:46:21:dd:6b:58:e0:19:98:41:69:48:
         38:a2:d1:d2:2b:de:7f:ff:d4:8a:49:c3:eb:c8:3c:5d:5b:fe:
         5f:09:f4:1a:f6:64:7b:a0:7f:2a:f2:74:f0:22:6e:23:44:5d:
         9b:78:de:4e:65:74:18:ca:54:16:2b:81:b2:7b:ba:97:cc:9a:
         c2:e6:09:10:2a:9a:b5:3d:28:63:eb:48:1a:a7:9c:7d:88:ef:
         73:cf:7a:da:4d:d5:0b:31:4d:73:24:21:7e:9d:18:43:92:8c:
         f0:e5:be:37:16:80:ca:74:34:2d:0a:48:90:65:ca:78:39:26:
         ba:f2:81:b7:8c:12:d2:6a:0a:59:b1:f5:b6:43:23:4c:c2:db:
         dc:00:3f:0e:62:c2:eb:e3:a8:7d:a7:c4:75:12:5f:02:8f:89:
         d3:5b:2d:ca:87:0b:a2:2e:33:a8:f4:60:d1:87:a2:99:84:0e:
         3b:6c:53:41:58:e0:ac:57:da:46:21:2a:c1:2b:5b:1b:af:b9:
         33:65:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:15:45 2024 by rpki-client on console-fra.rpki-client.org