Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e31342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          bWRGF1NSCwBTrFJYXJ+dFeAgMGIpb5tc8dsOqLvG9Rg=
Subject key identifier:   0E:2A:AD:89:37:C1:FF:FD:1F:A9:A5:2D:CD:F6:EC:77:7A:32:C7:DD
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       0E466E6F6D50F3F3C88BF7CD36CCE47A8F16D363
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:51 +0000
ROA not before:           Wed 17 Apr 2024 11:34:51 +0000
ROA not after:            Wed 16 Apr 2025 11:39:51 +0000
asID:                     28182
IP address blocks:        189.89.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:46:6e:6f:6d:50:f3:f3:c8:8b:f7:cd:36:cc:e4:7a:8f:16:d3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:51 2024 GMT
            Not After : Apr 16 11:39:51 2025 GMT
        Subject: CN=0E2AAD8937C1FFFD1FA9A52DCDF6EC777A32C7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:a5:8f:fb:1c:39:c5:60:9f:05:d6:4f:3e:
                    64:4e:90:5c:3c:00:e9:ce:a9:d3:db:67:f9:99:b1:
                    6a:3a:c3:a3:63:9c:fb:5f:66:dd:4a:8c:2d:26:92:
                    b7:7a:42:95:69:93:b8:2f:7d:d8:12:fa:8b:19:eb:
                    1c:f3:21:0c:20:e3:5d:bb:10:42:c1:9c:09:27:c5:
                    0d:64:66:2b:85:aa:a1:28:ef:52:90:01:43:40:16:
                    0b:1a:a0:b0:91:0d:38:0c:6d:b2:38:ad:ce:03:4b:
                    04:0f:26:c8:a1:bb:17:d5:04:b2:a6:a7:2b:e3:72:
                    29:2b:1d:e7:18:e3:df:a2:0e:93:19:e5:85:76:34:
                    1c:ad:25:13:e7:98:9a:57:61:64:2f:f7:90:a7:14:
                    04:61:61:ee:a4:12:a0:ae:d2:bb:50:a0:6c:cc:32:
                    5b:57:67:ad:aa:e0:f9:b2:eb:ca:60:79:a3:ef:65:
                    79:22:c2:7a:52:5e:ab:08:ec:ec:46:cd:4a:72:8c:
                    20:db:d4:5a:d7:d6:31:d0:56:90:c6:62:c9:f2:a3:
                    4e:33:de:94:77:ab:f0:87:ea:e2:8d:8b:64:5e:ae:
                    4c:01:27:08:0a:eb:a7:2e:2a:1b:78:5e:c4:98:39:
                    d5:97:39:0f:6e:12:4d:c0:fc:61:cf:7d:76:ae:92:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2A:AD:89:37:C1:FF:FD:1F:A9:A5:2D:CD:F6:EC:77:7A:32:C7:DD
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:d8:36:60:d2:d5:a9:47:1a:17:31:02:55:12:c6:ce:fb:
         ce:e2:0c:21:a0:bf:25:8d:da:b7:93:46:2a:cf:ed:98:e8:93:
         0f:e3:0e:8c:e9:b6:c7:8d:94:1f:99:a3:28:a4:07:30:76:9d:
         46:15:7c:90:46:bc:4e:0b:59:a6:24:0c:44:40:5d:3e:0d:92:
         7e:c1:83:7e:fe:a0:d1:8f:99:2c:11:81:f4:36:ef:15:e7:9f:
         88:aa:ef:e1:ea:b5:a9:26:bf:47:28:c6:ec:2d:fa:ac:fe:06:
         0d:af:e4:92:d6:28:b6:63:d0:13:f3:a3:db:3e:cd:10:20:b1:
         d8:3c:dc:43:9d:01:da:c6:04:8a:a3:94:15:06:0c:67:9d:5b:
         18:31:ce:2f:6c:d0:69:51:34:71:1b:d6:f0:45:ed:20:d1:56:
         1e:c4:aa:72:8c:9d:91:ba:9d:33:38:e4:7d:84:95:a3:3d:96:
         46:a9:1b:98:53:8e:f4:0a:77:1e:e4:5c:e4:84:4e:30:14:25:
         2f:37:7d:0d:70:7e:90:cc:3a:d1:1c:a9:46:55:03:dd:b3:85:
         eb:4d:19:6f:25:c0:1d:d6:48:72:85:ed:d5:2b:ae:bf:d9:2f:
         ef:3e:e4:d2:0b:a0:94:b6:c8:20:2c:87:95:0c:fe:5e:c5:dd:
         6b:7e:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:14 2024 by rpki-client on console-fra.rpki-client.org