Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32312d3231203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier:          2S3+rGbkJm8swamV56ukQhcNIl7mVAH9lqheRanGbcg=
Subject key identifier:   6B:B5:00:EA:12:3A:D6:51:46:87:DA:1C:47:8A:74:6A:B3:4E:C2:29
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       2C7CC1D89E0C326435568BB86CF4B8062EF2D06D
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32312d3231203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        186.193.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7c:c1:d8:9e:0c:32:64:35:56:8b:b8:6c:f4:b8:06:2e:f2:d0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=6BB500EA123AD6514687DA1C478A746AB34EC229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:25:f6:0a:b7:c3:4f:77:51:2f:61:cd:1f:
                    72:2f:0e:9f:e4:93:c8:38:09:f9:fd:5d:dd:19:cc:
                    45:ab:9f:16:01:27:0d:ac:2b:9f:86:e9:c1:ee:5c:
                    75:27:3a:4d:a1:53:46:07:90:a8:2f:16:5b:54:b8:
                    0e:39:1a:29:92:91:88:7b:e2:40:f5:ab:52:74:5b:
                    4b:b5:1e:9f:9f:95:90:43:81:13:51:87:2d:cd:6d:
                    c2:0d:9f:42:81:c7:03:59:7d:f4:50:7b:ad:e5:bf:
                    9f:83:5b:1e:c9:dc:ef:b6:f1:81:e0:22:21:5c:e0:
                    c2:53:bb:77:da:54:e2:db:dd:79:b9:a5:b1:d0:a9:
                    b8:c3:08:8a:5a:5e:07:74:35:a4:79:d0:f4:78:85:
                    70:a3:d6:59:16:6f:b5:ca:2b:9d:a7:a4:d3:e2:9e:
                    e5:e5:c0:63:6e:7b:e8:9b:da:c0:da:93:dd:75:f6:
                    db:56:1b:54:31:14:be:2a:0a:8e:a3:26:5f:b7:0a:
                    a6:58:b8:08:c4:5c:65:fc:cb:7d:04:68:92:e4:5e:
                    d6:a6:2b:da:2c:a0:85:ac:26:9a:13:02:f4:f5:59:
                    d5:35:b3:ba:24:5a:92:40:80:2a:fb:ba:d9:8b:76:
                    2d:c1:b7:d6:18:92:8a:ce:67:1a:38:5e:c1:5b:71:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B5:00:EA:12:3A:D6:51:46:87:DA:1C:47:8A:74:6A:B3:4E:C2:29
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32312d3231203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:be:0d:26:6b:70:e0:61:ba:cc:8f:e6:de:38:9f:6d:42:
         41:2d:42:2a:7e:15:a1:25:b4:e1:1e:63:62:47:c9:ef:05:ee:
         33:b7:8d:44:7a:61:e4:de:ea:e3:e6:3e:67:38:05:ed:77:7d:
         71:cb:8d:19:d0:52:0a:a0:6a:3e:7a:30:78:85:7d:73:46:5d:
         bf:c3:2d:fa:07:c6:b7:14:8a:90:ca:cf:11:80:e7:2d:23:35:
         8f:93:4f:fc:29:15:b4:b0:f9:29:44:bd:43:ad:e5:04:26:80:
         80:0e:21:ec:34:56:c9:1f:9d:d7:2d:c2:8f:98:bb:15:9e:fa:
         d2:b7:17:d0:e1:f0:b2:4e:8c:a7:7a:99:5e:97:36:8c:e2:ff:
         e8:bf:c2:9c:12:f4:f7:3f:0d:33:0a:c4:fa:73:fa:db:a6:6a:
         55:5b:47:b2:97:c1:cf:d7:3b:e7:e1:2f:5f:bc:34:50:f1:5a:
         ff:45:3a:f1:c6:a8:8d:2c:ff:65:34:b2:42:f2:86:25:90:07:
         9f:8c:bc:38:81:c0:eb:31:b0:33:f3:41:1a:ca:23:d0:d2:17:
         8e:c1:59:78:e6:72:6b:2a:80:c4:33:b3:c5:92:e5:f7:23:3d:
         5c:c2:48:c2:72:88:ee:3c:d9:fc:74:c2:00:1f:e2:b5:7a:ab:
         4b:ca:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org