Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32322d3232203d3e203238313931.roa
File:                     3138392e39302e33322e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier:          df9wXYFWaHU4ZZjKrSYxFf/G83wpfC2lFoYsev7z66c=
Subject key identifier:   77:4E:C5:91:32:FA:F4:2F:AE:E9:A3:91:58:82:87:82:A0:8D:93:2B
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       58A8B09EF248C28FE1369760609E857AA5C8DF49
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32322d3232203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        189.90.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a8:b0:9e:f2:48:c2:8f:e1:36:97:60:60:9e:85:7a:a5:c8:df:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=774EC59132FAF42FAEE9A39158828782A08D932B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:94:94:b2:6a:6c:d5:52:91:c6:b6:1c:ba:
                    91:1a:28:43:e1:99:b2:ed:d5:9b:c6:ee:0a:31:15:
                    c9:5f:62:df:c1:a0:09:23:43:c5:eb:12:15:22:0c:
                    35:2d:82:81:5c:45:bc:69:1e:9e:8a:29:4b:e8:9c:
                    0e:87:e0:f4:64:cd:a1:6d:2d:96:81:eb:8b:5f:72:
                    f9:79:7a:68:3d:7c:9c:dd:29:8d:7b:dc:5c:22:36:
                    9e:0c:73:9b:6c:ca:2c:85:b3:29:1d:09:b9:f0:7a:
                    6a:48:5a:8d:86:bd:77:0e:1c:d2:b6:ff:0b:c2:a1:
                    39:00:c0:1b:43:ef:ee:c4:84:10:e4:af:86:76:11:
                    05:bc:f6:62:0b:a8:5d:d6:ea:fe:f7:ca:2a:58:f5:
                    df:54:2a:05:7a:76:e0:fc:fc:30:82:0a:fc:d0:7b:
                    ae:3c:4b:f0:cc:63:e3:f3:48:a3:e6:70:78:d6:4c:
                    ac:4b:20:2a:31:3c:90:19:88:d1:4f:da:0a:7f:ff:
                    c6:b2:9a:62:2c:5a:7d:98:91:a0:b0:25:88:fa:d6:
                    f6:f3:66:79:01:37:d6:9b:ad:a4:63:73:0f:02:a3:
                    5c:30:56:b6:67:7a:7c:cb:d5:b0:f6:1b:fc:ec:4d:
                    da:a8:a0:1f:8a:25:ee:ea:22:c4:ec:f2:9a:01:f6:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:C5:91:32:FA:F4:2F:AE:E9:A3:91:58:82:87:82:A0:8D:93:2B
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32322d3232203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:d2:49:37:39:c7:63:ed:95:e8:fe:65:e6:f3:73:54:c1:
         24:46:05:e6:90:d8:11:de:0f:52:6d:c3:52:de:11:7c:cf:c4:
         63:ae:f9:b5:0d:95:3e:ac:41:31:38:c7:9a:a5:9e:cf:74:98:
         45:76:c3:fd:a6:07:2e:b4:18:4c:8f:6d:20:08:63:a4:8a:92:
         2d:57:fe:6d:52:41:4c:60:4f:6c:e5:2a:11:b6:f9:97:89:3b:
         48:33:04:e6:af:a5:52:c2:18:cf:57:f5:7a:3f:56:5c:34:29:
         fa:cc:74:22:e1:21:8a:b9:bd:23:8f:0c:ad:2f:ab:bc:6b:e2:
         43:6e:4b:37:0b:cf:9c:09:8c:2e:a8:5a:84:01:b3:3e:57:3f:
         9c:ed:98:15:f2:42:5c:bf:da:be:04:11:ae:93:54:a0:f1:52:
         b8:93:32:47:d4:97:e6:1c:9a:7e:f5:33:7e:51:fb:8f:9b:fd:
         94:ad:65:87:33:c8:77:d0:ec:4f:e5:c3:60:8b:5a:c7:ad:4a:
         2e:7e:76:fc:09:ca:a7:2e:24:e8:5b:5c:ba:b5:3e:c4:0a:ab:
         6f:28:d7:4d:87:b8:0e:ce:9a:e0:9a:6d:9f:66:c9:e4:b9:23:
         d1:e5:f0:33:19:dc:73:21:a4:c9:bf:13:1b:71:7c:a8:50:d6:
         1a:2b:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org