Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e31322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          OqCJoKQXIXvwpCy3PBwJWdaqbR51j648mudD9IQHpGs=
Subject key identifier:   6C:04:C2:5B:57:29:97:EE:F4:5A:04:AF:71:BD:AF:5E:59:2E:01:21
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       054111E22AF5AD048464315446B71E2F86BC3A3C
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:49 +0000
ROA not before:           Wed 17 Apr 2024 11:34:49 +0000
ROA not after:            Wed 16 Apr 2025 11:39:49 +0000
asID:                     28182
IP address blocks:        189.89.12.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:11:e2:2a:f5:ad:04:84:64:31:54:46:b7:1e:2f:86:bc:3a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:49 2024 GMT
            Not After : Apr 16 11:39:49 2025 GMT
        Subject: CN=6C04C25B572997EEF45A04AF71BDAF5E592E0121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:66:08:d3:ba:11:38:19:8f:4b:70:18:05:
                    46:70:8b:2d:41:7a:a2:1c:35:5a:aa:50:67:f7:24:
                    27:02:29:47:0e:41:d0:3d:83:4e:c4:61:89:66:f5:
                    b6:bf:f2:3e:61:96:a9:88:7e:69:9d:6b:2a:7a:30:
                    3b:1e:da:da:69:8a:9c:d3:99:1b:0d:90:05:a1:da:
                    f7:92:0b:c7:54:07:97:0c:c2:ba:64:83:20:c0:5d:
                    e8:86:4a:45:d9:49:23:16:88:5a:18:c0:66:f6:b1:
                    73:86:4a:70:c5:fc:f3:53:a8:b1:0c:1f:39:4e:9d:
                    cd:98:69:6b:50:b5:0a:f7:a2:72:db:25:e9:16:b7:
                    72:ba:5a:bc:7e:61:d0:5f:8c:c1:bc:c2:6e:a6:93:
                    3b:96:87:70:8c:0a:1b:15:38:17:cb:5a:88:b9:ed:
                    b9:89:43:3a:b7:4e:63:91:75:cd:94:81:2c:ce:92:
                    61:8b:8c:65:c7:d6:8b:6d:29:18:c3:90:d3:0d:c6:
                    68:39:b5:28:e0:9d:3a:2e:00:86:f5:93:2d:f0:6e:
                    d1:57:f8:0f:53:dd:15:e9:4a:76:cc:89:f5:58:44:
                    94:ba:c6:4e:97:3c:37:68:10:0c:8b:ea:45:a3:70:
                    98:b1:3e:4c:64:92:93:38:e9:44:01:fe:32:47:2e:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:C2:5B:57:29:97:EE:F4:5A:04:AF:71:BD:AF:5E:59:2E:01:21
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:19:e4:7c:b7:d2:d0:b9:84:4f:8c:73:ae:1e:ce:c8:29:
         ad:80:38:a9:81:41:26:4c:41:64:6d:b7:9e:3b:3a:84:bd:20:
         4a:fe:a4:40:7d:d5:82:ed:90:c6:34:42:40:95:b0:3b:c5:3d:
         5d:0f:d1:aa:a1:10:67:c2:6a:bf:ed:ba:56:64:c5:73:b6:58:
         b2:f4:3b:e3:e4:81:bc:38:66:ac:2e:ce:5b:df:c4:1b:ee:c8:
         09:73:45:66:9d:5a:7f:8e:5c:37:3a:e5:1e:3d:fd:52:e3:d3:
         e9:9c:8c:4b:de:7e:50:68:6b:1a:2d:3a:ec:12:05:de:a1:90:
         fb:ef:d9:63:56:4a:66:af:f5:cd:6f:e1:7b:50:23:03:87:fd:
         bc:3c:ca:64:a7:b4:3c:54:cd:c7:a3:06:d9:31:8f:f4:6e:24:
         6a:2a:25:1f:5b:9a:b0:d2:ac:8a:fd:94:06:9f:26:a9:5f:c1:
         79:f3:78:0a:0b:98:4f:58:76:c2:43:c9:24:bc:e8:90:9b:b9:
         2b:50:4b:8b:56:80:49:2b:b5:f1:15:22:d7:9e:a2:d7:cc:76:
         53:6b:40:00:2b:14:c8:b4:a8:4e:e2:e4:a4:89:5d:0d:e1:c9:
         03:fd:24:bb:80:6d:81:f1:ad:63:c0:00:7b:84:0a:c8:39:8c:
         dd:7f:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:14 2024 by rpki-client on console-fra.rpki-client.org