Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33352e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33352e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          PPsKxiQVxOzYfFU4ZSCPkoYC7iHOO1CDwcfOYDEfI1Q=
Subject key identifier:   CC:A8:59:61:20:B5:FA:29:AF:8C:09:54:9D:D6:9B:64:7C:78:B5:0D
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       7B8CE6738883D3ACE2BBBE92C688C624A8C4D06F
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33352e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:35 +0000
ROA not before:           Wed 17 Apr 2024 11:37:35 +0000
ROA not after:            Wed 16 Apr 2025 11:42:35 +0000
asID:                     28191
IP address blocks:        189.90.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8c:e6:73:88:83:d3:ac:e2:bb:be:92:c6:88:c6:24:a8:c4:d0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:35 2024 GMT
            Not After : Apr 16 11:42:35 2025 GMT
        Subject: CN=CCA8596120B5FA29AF8C09549DD69B647C78B50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:d4:5e:3c:4e:5c:c4:09:6f:b6:dd:d1:9e:
                    c9:ed:5e:2e:26:38:9c:1d:08:22:0e:d3:76:74:a5:
                    f2:14:33:e6:78:11:d8:52:64:1d:1e:31:4b:9d:43:
                    c0:c7:5d:d3:f7:7f:90:66:c5:ce:8b:30:36:7f:c1:
                    4a:a3:1c:48:7c:56:92:01:11:c5:2b:b1:e3:72:c7:
                    11:df:93:67:9e:aa:7b:65:90:a6:d8:ec:a6:0a:35:
                    63:b4:dd:b4:b7:eb:94:19:e3:52:35:91:50:c1:87:
                    50:6c:36:4e:e6:0a:f6:c9:7f:5e:6c:9f:b7:91:78:
                    b0:f4:d5:61:06:27:31:13:4c:f7:03:d8:07:bb:38:
                    16:b8:db:a5:e0:cb:64:41:d9:a0:c8:a7:fa:db:08:
                    c0:cc:2b:f7:93:2c:66:53:89:73:35:d8:e6:6a:b3:
                    12:b6:2f:4c:0d:56:31:a2:f6:bc:23:ef:c1:7f:e0:
                    5e:f9:47:a8:b6:63:6e:61:2b:d7:58:d2:0c:71:e2:
                    33:36:26:fb:b6:f2:12:4c:01:6f:2b:34:44:07:1d:
                    93:de:05:15:90:be:c3:98:c1:c5:18:45:53:59:8c:
                    ff:db:27:eb:91:c2:3b:fd:83:20:3d:ab:76:c0:56:
                    a1:cf:eb:3b:14:6a:66:b4:d8:b5:66:12:b1:0f:ed:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A8:59:61:20:B5:FA:29:AF:8C:09:54:9D:D6:9B:64:7C:78:B5:0D
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33352e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:48:d1:ee:b1:b6:3b:6f:64:8d:57:2b:39:02:3b:d8:28:4d:
         27:b7:24:84:a7:79:74:6c:fb:77:a5:59:32:0e:d0:74:74:8e:
         aa:92:91:96:8e:f8:8a:de:48:2a:97:96:36:48:41:20:e5:89:
         28:72:96:0f:37:74:2b:f8:1e:f3:17:e6:45:19:13:cc:8d:05:
         2b:17:1d:7b:30:7b:41:89:05:67:3f:3e:70:80:2d:db:3d:1c:
         fa:49:f0:8e:f2:0f:ba:02:79:fb:8a:94:eb:d2:13:0b:00:4f:
         ee:2c:43:fc:de:05:20:f3:5e:9b:dc:64:5c:32:91:f3:59:c4:
         fd:ef:f4:9c:e8:39:6d:48:64:a4:7c:cb:d9:0d:a7:e4:f5:61:
         69:67:1f:ad:4f:43:6e:03:4d:6f:57:dc:82:cf:f9:a3:c9:11:
         60:73:cc:5b:2a:36:ea:22:2b:cd:04:b7:ee:17:be:bb:b0:95:
         03:66:06:36:d7:d4:17:0f:db:64:72:2c:93:e6:2d:c4:89:69:
         6e:6a:67:d1:ae:83:87:4f:1c:dc:2a:58:77:06:9c:26:02:7f:
         fd:20:8d:2b:69:82:b4:16:62:49:a3:00:53:a2:b2:a0:4d:01:
         ab:c0:81:c9:51:13:ff:b5:ec:3a:15:59:ba:6a:83:7a:1e:16:
         05:0e:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org