Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e302e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          zbRlXqYOH+YYl3YNoSIoI7BQ6YGJuTKvGe7ax2Tqr8c=
Subject key identifier:   4C:A9:1D:83:0B:11:DE:9A:9B:E6:B0:53:59:E8:AD:0E:1D:E2:6C:25
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       71663F52C5444E111EBA4844B4436CF62C42E3CF
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:51 +0000
ROA not before:           Wed 17 Apr 2024 11:34:51 +0000
ROA not after:            Wed 16 Apr 2025 11:39:51 +0000
asID:                     28182
IP address blocks:        189.89.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:66:3f:52:c5:44:4e:11:1e:ba:48:44:b4:43:6c:f6:2c:42:e3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:51 2024 GMT
            Not After : Apr 16 11:39:51 2025 GMT
        Subject: CN=4CA91D830B11DE9A9BE6B05359E8AD0E1DE26C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:9b:e9:29:df:ea:64:c5:fc:e0:f3:bd:90:
                    b5:47:a4:f3:ce:ad:b3:4f:79:84:14:fb:55:ee:40:
                    7c:ab:bd:42:89:1c:84:67:51:75:18:49:99:3e:ae:
                    3d:a1:9e:e8:b6:6d:68:10:7d:59:6b:05:16:19:e9:
                    bd:ad:e3:b3:2b:9e:3e:6a:bf:25:fb:ab:7b:19:65:
                    5b:83:3b:59:8e:63:a0:e7:d7:51:60:29:08:6a:c7:
                    39:dc:34:29:3c:7d:f1:00:29:13:c0:d9:1e:d3:9c:
                    e4:8b:8b:8a:20:1f:8f:d6:0b:c8:24:02:79:62:a4:
                    c2:ec:b8:5b:44:b4:4b:bc:5a:0b:83:4d:c9:51:23:
                    f5:5b:4a:cb:03:59:85:d5:8e:6c:56:5c:a6:39:d6:
                    10:84:8d:fb:72:e6:65:a3:00:35:61:d4:19:19:ce:
                    28:da:2c:07:a3:ab:bf:54:b4:76:e4:58:1b:4e:2d:
                    4d:98:e6:be:00:fe:92:4d:11:4f:a8:cd:96:02:c6:
                    a9:cc:6c:0c:0a:3e:51:cd:70:72:7f:9e:d5:a0:1a:
                    1f:33:2d:ee:90:0a:1f:50:4b:f7:67:56:73:58:16:
                    7b:7c:28:b8:5a:e3:c9:7f:f7:50:14:67:98:30:36:
                    0a:37:e3:3d:cf:da:07:e7:96:b9:cb:83:d6:de:aa:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:1D:83:0B:11:DE:9A:9B:E6:B0:53:59:E8:AD:0E:1D:E2:6C:25
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a9:4d:19:79:f5:8f:e7:0b:fa:6f:ac:83:b4:08:0c:f6:fb:
         84:d1:a3:ae:67:6d:8a:f1:e4:6d:69:62:2d:4c:d4:73:00:e0:
         cb:8c:93:8f:af:b0:93:86:57:5d:bf:f3:dd:97:68:0f:81:9e:
         56:9a:25:c2:79:4e:08:7e:c6:7a:13:a1:e5:a2:9f:63:92:e4:
         f3:8c:4b:77:7a:5c:80:48:65:90:ec:a7:57:a2:40:fb:5c:02:
         2c:76:31:b9:57:80:c5:3c:79:ac:b5:2b:b8:83:d1:73:e8:51:
         5a:03:5d:51:11:bc:ec:f3:0b:8f:39:3e:bf:fd:56:86:66:89:
         f7:b4:00:7c:48:06:69:c0:fa:ac:ea:a6:35:a9:76:df:65:e3:
         27:e2:60:72:05:b6:a8:ad:9c:50:ba:dc:65:ce:2f:46:42:70:
         b2:46:1f:b7:54:07:26:ce:4f:7f:f4:e3:78:d8:8f:9e:57:4e:
         93:03:b0:a2:01:21:26:ec:c5:ff:f8:8e:44:5e:c2:e7:42:f5:
         cf:5b:31:c3:4b:3e:75:44:45:57:c3:58:11:a4:8e:d9:9b:fd:
         d2:e8:6a:b7:65:d0:11:bf:ee:fa:28:99:6f:8e:9f:0e:d8:72:
         42:dc:cc:5e:a4:f7:6b:24:f9:7d:d5:38:de:c0:d8:86:62:f4:
         9e:0c:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:14 2024 by rpki-client on console-fra.rpki-client.org