Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3230203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32302d3230203d3e203238313931.roa (raw, json)
Hash identifier:          fEE5ShjNk+cK68hrpzgj6CkRia+tp+gVQAUkBAP00RQ=
Subject key identifier:   CC:35:3D:2A:D7:ED:A0:A8:A3:40:EA:D4:8D:F1:3A:3A:E2:E4:03:E6
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       624FBD0E11CAD1FB7A25606897D71F741C97082B
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3230203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:33 +0000
ROA not before:           Wed 17 Apr 2024 11:37:33 +0000
ROA not after:            Wed 16 Apr 2025 11:42:33 +0000
asID:                     28191
IP address blocks:        186.193.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4f:bd:0e:11:ca:d1:fb:7a:25:60:68:97:d7:1f:74:1c:97:08:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:33 2024 GMT
            Not After : Apr 16 11:42:33 2025 GMT
        Subject: CN=CC353D2AD7EDA0A8A340EAD48DF13A3AE2E403E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:4a:4f:e6:4f:b6:76:43:10:fb:89:f5:7f:
                    28:0a:45:b4:42:76:bd:46:fa:9c:ac:4a:fa:fc:df:
                    c9:03:db:69:9d:de:de:b0:14:bd:15:4d:b4:5f:d4:
                    bf:2d:a5:a7:e2:d5:ce:be:b1:3a:9e:40:8d:a1:85:
                    b5:1b:e4:28:d6:c1:c6:99:0e:84:08:d1:ab:94:4e:
                    f4:36:6f:dd:5a:31:9d:07:38:01:48:df:d8:11:8f:
                    d0:0f:1d:93:91:e4:e0:b7:3d:3f:09:57:17:d9:61:
                    e9:b7:68:84:0d:a0:92:c8:4f:f3:4f:47:c7:0a:d2:
                    ea:3b:a8:ee:e4:60:eb:35:90:40:94:4c:c7:8a:4d:
                    2e:4e:f8:ba:5f:8f:10:2e:26:ad:87:7b:f4:8a:4f:
                    c8:fc:5f:26:11:b7:e6:5f:8c:61:ef:f0:81:f5:88:
                    f0:b8:b6:f6:d3:0e:30:9b:aa:3c:ea:f7:36:6e:0d:
                    52:d2:04:b6:4d:61:aa:d7:90:da:c9:08:36:1b:18:
                    7d:5f:17:ee:13:83:96:54:79:f3:58:60:17:66:2f:
                    34:fa:02:80:24:b5:65:2e:65:c0:c5:e1:88:97:89:
                    3b:3f:b5:ff:f3:f2:f2:f6:64:5b:dd:9f:7f:30:bf:
                    3d:89:b6:c9:06:fa:f4:cc:29:38:0a:f5:2d:a9:98:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:35:3D:2A:D7:ED:A0:A8:A3:40:EA:D4:8D:F1:3A:3A:E2:E4:03:E6
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3230203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:4b:9d:f5:6c:03:c3:e3:c1:99:f6:d5:30:39:91:e2:67:
         92:bc:5c:72:c8:48:90:95:11:8d:a3:1f:50:17:73:46:38:50:
         bb:f2:99:18:b2:21:a1:2d:e5:a7:9e:da:e3:0f:a7:9a:49:14:
         f6:77:c3:f6:2a:30:67:61:87:64:d2:1e:d2:2e:7f:6c:8d:58:
         54:31:82:60:ed:b9:0d:51:eb:aa:f7:eb:e3:eb:15:21:b4:74:
         cd:ad:bc:f7:f6:5b:6d:05:bc:84:07:00:ef:94:2c:51:01:d6:
         f7:fb:ec:bc:22:89:6e:07:2d:dd:97:c7:60:3d:72:60:51:77:
         2a:a5:ee:4f:4f:e9:4a:a0:f5:cf:3e:b0:fe:d1:1c:6a:2b:40:
         73:ae:d1:66:cc:d6:cc:42:11:7f:31:bb:78:04:cd:f8:95:83:
         4d:ad:a4:a0:07:e2:5c:c7:6b:52:a2:29:5a:e3:b9:f7:1f:84:
         60:b8:16:c1:f8:6c:06:24:26:48:be:26:d2:f4:e5:b4:ff:51:
         7f:eb:ad:d6:04:76:23:8c:36:8a:6e:bc:72:56:7a:10:bb:b5:
         ad:4a:f3:f4:f8:4e:48:29:33:2b:1c:2e:5f:40:20:dc:39:48:
         68:39:56:ec:30:51:bb:8b:b6:15:8f:db:b8:db:03:ee:94:67:
         e2:96:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----