Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34372e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34372e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          Thm7OzorpvEPzbwmcPOVs13XXQ5lQR/zXtuOG0cCwyw=
Subject key identifier:   2E:4A:74:A1:16:54:B3:AF:22:0C:0E:D7:C9:5A:89:B4:84:8D:4C:7E
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       69AF43F4ED66FE464FA1B6EF6A2ECB5A18FA971A
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34372e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:32 +0000
ROA not before:           Wed 17 Apr 2024 11:37:32 +0000
ROA not after:            Wed 16 Apr 2025 11:42:32 +0000
asID:                     28191
IP address blocks:        189.90.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:af:43:f4:ed:66:fe:46:4f:a1:b6:ef:6a:2e:cb:5a:18:fa:97:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:32 2024 GMT
            Not After : Apr 16 11:42:32 2025 GMT
        Subject: CN=2E4A74A11654B3AF220C0ED7C95A89B4848D4C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:8b:34:47:01:d8:6b:51:7b:83:98:9d:34:
                    d9:77:41:6c:62:9d:4d:e7:f6:34:0a:84:88:a9:1f:
                    4a:f4:f7:de:4c:f0:e6:af:92:d5:cd:e6:96:38:61:
                    70:cb:50:25:fe:0b:8f:64:f6:fc:0f:48:4d:c4:33:
                    43:3d:47:b3:95:c6:29:2b:03:87:9d:34:ee:37:91:
                    a0:b7:d3:38:7a:26:bc:8f:fc:0c:19:97:98:7d:b1:
                    92:41:4f:cd:7b:91:22:cf:64:ec:ff:93:7b:1d:f2:
                    26:de:64:c0:2a:71:1b:07:84:6f:f9:b7:36:34:02:
                    1d:e9:5f:74:05:9d:ff:4c:10:8b:32:1c:2d:41:67:
                    23:e6:7e:69:2e:d4:9f:76:84:25:70:87:64:ba:b1:
                    fc:20:45:70:8f:4f:f3:a3:a1:72:61:fb:fa:8d:74:
                    eb:e5:1f:23:37:7b:ed:43:bd:e7:40:7b:f4:00:7a:
                    a0:73:52:40:e9:28:7d:33:15:64:66:e2:db:4e:4f:
                    80:0a:37:b9:82:19:33:90:8c:0c:56:ec:4e:47:a0:
                    05:fa:10:63:0e:e0:d8:36:7f:13:ac:42:19:0b:0f:
                    f0:30:87:41:5e:b9:e8:09:06:82:ac:46:99:ac:60:
                    ba:8d:b3:98:0c:12:54:c5:34:33:84:c7:58:48:0b:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4A:74:A1:16:54:B3:AF:22:0C:0E:D7:C9:5A:89:B4:84:8D:4C:7E
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34372e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:75:be:ed:0f:ef:85:87:8d:12:fb:23:03:03:6e:05:1c:d3:
         76:0f:88:f9:d0:4a:c7:e0:d2:69:58:3d:af:0c:ef:82:72:11:
         3b:b7:f7:4f:12:fa:af:06:9d:79:f9:b2:a7:bb:f2:5a:35:ea:
         2d:33:7e:09:03:ac:aa:8f:c2:28:04:5a:d2:1c:a0:ca:3f:f2:
         4a:13:eb:2a:b8:0d:d8:67:f3:84:cf:3a:a8:29:24:a2:0d:8f:
         9b:c1:6f:f3:fa:86:34:2d:de:c4:8f:b5:77:75:a8:45:20:eb:
         0e:59:70:af:42:a7:78:3d:b7:2b:48:cb:6d:92:e9:fe:56:0c:
         a1:73:c6:36:5b:2c:b6:dd:33:75:44:1d:2f:7d:e1:ae:64:a3:
         c3:8a:86:4d:8f:91:cb:34:f8:60:36:14:0c:cf:e6:2e:a5:a9:
         bd:5d:a8:37:82:af:e0:0b:01:ef:21:95:ef:2d:7f:c0:7f:ab:
         b0:26:56:d1:f4:49:0a:89:0b:22:73:83:0d:19:ba:39:2e:b4:
         ca:70:2e:f2:05:fe:1c:20:04:dd:4a:6e:e9:27:2d:7c:db:c2:
         dc:a3:9f:a7:c2:f2:0b:bd:28:ff:55:b9:ee:c8:b0:9c:67:cc:
         58:04:ca:c2:c0:07:2c:d4:7a:22:35:87:84:54:4a:94:14:07:
         bb:8e:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org