Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33372e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33372e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          o67ObeWGFLXPmUXAZwZiH0s/Ll9csLP1vfSaPQxPWFE=
Subject key identifier:   18:BF:91:4C:E0:0B:7F:8B:33:AC:1B:85:EF:C5:C1:4C:AD:67:9D:D1
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       4D725A76BF745EED26ECF7F85333B2EA0C8FF99A
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33372e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:34 +0000
ROA not before:           Wed 17 Apr 2024 11:37:34 +0000
ROA not after:            Wed 16 Apr 2025 11:42:34 +0000
asID:                     28191
IP address blocks:        189.90.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:72:5a:76:bf:74:5e:ed:26:ec:f7:f8:53:33:b2:ea:0c:8f:f9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:34 2024 GMT
            Not After : Apr 16 11:42:34 2025 GMT
        Subject: CN=18BF914CE00B7F8B33AC1B85EFC5C14CAD679DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:93:4b:51:51:d5:70:52:8e:b5:ad:fc:d4:
                    36:b8:d9:f5:a2:70:da:60:79:f7:7a:0b:a7:e9:ab:
                    05:dd:09:53:eb:e3:d0:61:c8:39:34:9d:75:a9:96:
                    8a:9d:5d:65:9e:78:91:20:fd:69:ad:3b:73:99:8e:
                    18:e4:94:f1:d1:0a:09:4e:12:fb:aa:c0:1a:70:dc:
                    f9:c8:da:b4:b6:1a:46:ea:b5:f5:86:7e:b9:cd:d1:
                    77:b8:3f:93:15:cb:e9:e6:6f:2d:23:fa:98:bf:f7:
                    3b:75:36:5a:40:b7:93:8c:47:1d:d6:46:ee:cb:8a:
                    51:fb:4f:ff:d4:8c:88:06:ae:96:51:5c:bf:aa:01:
                    59:87:6a:01:06:97:d5:07:55:62:d4:fe:81:b1:a9:
                    16:ea:93:32:13:89:70:9a:0f:47:80:9c:d4:8f:af:
                    c8:74:fb:b6:b4:d5:4d:96:6f:42:57:32:2a:b3:74:
                    92:d7:b2:ed:05:4c:8a:a0:8c:6f:78:7a:15:89:08:
                    35:44:44:5e:61:a5:8e:5e:6f:21:da:42:79:2b:a2:
                    8a:0a:3d:40:eb:af:7b:d6:ae:21:a4:a5:4f:a8:c4:
                    57:c3:c9:66:f2:ee:4a:52:b5:51:da:21:1b:81:b8:
                    b7:52:42:5d:1f:0e:67:6e:0e:07:33:eb:ff:d8:8b:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BF:91:4C:E0:0B:7F:8B:33:AC:1B:85:EF:C5:C1:4C:AD:67:9D:D1
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33372e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:73:17:2f:ed:7e:60:7b:64:99:51:54:9a:8f:f8:b9:d6:58:
         19:0d:32:1d:51:c3:2a:0f:89:b4:6d:89:df:e4:8c:9e:c2:af:
         b2:e7:10:22:33:4b:ed:1a:7f:41:b8:51:fb:a1:18:5e:48:2e:
         5b:35:c0:35:58:a8:42:1a:89:a0:96:a4:d0:8f:8c:6c:7d:83:
         f3:37:40:0e:3d:ff:f4:d1:5d:97:75:77:22:27:13:de:03:c0:
         34:0c:aa:83:36:85:08:d9:a5:ab:f4:20:ce:fa:70:2a:42:30:
         d8:32:02:f9:e4:c2:5e:57:04:68:c7:f4:2d:36:a4:2a:7f:ad:
         01:45:f4:97:d3:4b:63:bf:a8:59:b6:bb:53:04:35:45:61:f8:
         4c:e6:45:3b:47:02:0b:34:c9:a3:0f:b9:83:29:29:46:84:7d:
         3e:3c:b5:9e:7e:be:a8:ef:6c:e0:f7:3d:2f:ad:dc:ab:72:b3:
         a9:83:ff:d2:a7:33:3a:c6:c0:ca:ac:f5:73:c4:70:af:eb:18:
         05:a0:e8:e8:05:2d:0f:a8:f6:6b:4f:5f:cf:c6:2f:eb:e9:0a:
         14:e9:d9:c5:38:c8:83:e1:d2:cb:c8:a2:94:72:ad:bd:12:60:
         25:a8:f0:fb:17:4f:86:a7:56:96:7f:ef:a3:c8:1d:2d:03:e6:
         c0:9e:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org