Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          NAMbXDkXiC6nyV0wmZt3aTdN+B9xHNu0kVauaTwJMn4=
Subject key identifier:   8B:AF:B2:58:01:6A:EE:AC:E2:FC:DD:F1:C2:04:94:27:00:23:EE:B0
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       38E5C291B9393C15C0347C86E71DD85A6F923FE9
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:31 +0000
ROA not before:           Wed 17 Apr 2024 11:37:31 +0000
ROA not after:            Wed 16 Apr 2025 11:42:31 +0000
asID:                     28191
IP address blocks:        186.193.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e5:c2:91:b9:39:3c:15:c0:34:7c:86:e7:1d:d8:5a:6f:92:3f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:31 2024 GMT
            Not After : Apr 16 11:42:31 2025 GMT
        Subject: CN=8BAFB258016AEEACE2FCDDF1C20494270023EEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:01:ce:42:ed:18:fa:43:9b:5c:b2:e7:63:
                    32:6c:dd:7b:e0:79:f9:0d:07:c2:76:d6:79:b1:e1:
                    e6:dd:7b:a8:56:91:57:46:b4:b4:50:5c:29:25:a1:
                    2f:c8:c9:b1:b2:8d:6b:b4:48:19:df:1f:f4:5e:bf:
                    0e:12:89:c5:be:e7:15:0d:48:09:32:98:7a:8f:75:
                    7d:af:3c:72:d2:b8:f5:92:af:5e:84:23:bb:03:e8:
                    73:56:2e:05:7f:09:1d:15:ef:2a:f3:85:02:fc:9e:
                    06:cf:11:79:c7:b1:15:53:27:a3:61:5d:f0:57:bb:
                    18:ab:15:8c:57:ab:c4:06:2a:d2:7c:2f:1d:b6:17:
                    c3:2a:e8:e6:8b:2c:fe:fb:64:7e:08:f9:03:bd:04:
                    13:f8:14:a2:d2:85:6e:3f:b1:48:b5:d5:e1:a5:6a:
                    0c:bf:8a:7f:0a:a8:78:62:18:9a:46:b5:83:2d:d0:
                    4b:fd:1f:78:1b:f5:ac:92:7d:f2:18:d7:4c:7a:7e:
                    6d:94:80:0d:e0:64:51:0d:99:30:5a:84:8d:f7:2b:
                    a3:32:45:de:a8:79:b5:70:18:ba:a9:93:06:1d:a7:
                    de:d1:a1:e0:6f:49:4d:c5:82:4e:48:d1:98:b5:9c:
                    6e:f3:7e:3d:56:ac:13:a9:ce:cf:9b:b8:c9:ac:f6:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AF:B2:58:01:6A:EE:AC:E2:FC:DD:F1:C2:04:94:27:00:23:EE:B0
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:a3:0c:0d:87:d9:ea:20:8e:74:32:af:78:7d:e7:b1:dc:
         29:70:d1:b5:b9:4e:ad:c3:f3:c7:68:01:a2:fa:90:f2:21:8a:
         76:7b:69:41:28:63:ec:80:29:77:bd:f9:40:03:6c:73:e0:a3:
         c3:dd:5b:e6:e5:e8:13:ee:d5:f8:d8:90:94:fe:5b:32:73:83:
         d3:fb:10:07:41:d9:ed:07:6d:a7:72:3b:54:0a:b2:4c:2e:7f:
         fc:4a:d0:22:01:87:48:d6:a5:48:3b:27:66:0b:b1:61:f6:63:
         04:33:2a:13:ac:6b:6f:9d:ff:22:c9:09:ef:7d:79:2f:7d:9b:
         6a:01:47:4f:25:97:7d:75:fc:0e:5e:55:75:be:d3:6b:69:fa:
         6a:d0:7d:49:33:b7:28:e5:69:da:ec:95:e6:ce:40:35:a4:31:
         2d:f8:ab:b4:16:8a:b0:5d:01:9f:60:27:60:a6:c3:05:74:b2:
         41:46:75:98:ee:08:59:28:25:08:30:99:26:1c:04:e6:c9:87:
         4c:6c:ba:9b:e7:5c:3f:cf:3d:dd:20:08:15:a2:b2:d3:76:f8:
         85:7f:fa:53:53:a7:25:65:2e:b4:4a:81:58:e7:c4:38:19:a3:
         e8:16:d4:83:30:2e:1a:24:4a:eb:85:6e:a8:f8:43:8f:69:00:
         18:67:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org