Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32322d3232203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier:          DRInRBhe0+1JbvhWG8U1Pm6dfDJOr3dIHYtSHrwcvNU=
Subject key identifier:   18:DF:4B:6E:18:0D:00:C6:82:4D:EF:7D:47:C4:A0:20:B2:7E:92:3F
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       4A3723F26BB75E240C9EE6A7FB03E7AD0F84EF23
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32322d3232203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:28 +0000
ROA not before:           Wed 17 Apr 2024 11:37:28 +0000
ROA not after:            Wed 16 Apr 2025 11:42:28 +0000
asID:                     28191
IP address blocks:        186.193.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:23:f2:6b:b7:5e:24:0c:9e:e6:a7:fb:03:e7:ad:0f:84:ef:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:28 2024 GMT
            Not After : Apr 16 11:42:28 2025 GMT
        Subject: CN=18DF4B6E180D00C6824DEF7D47C4A020B27E923F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:da:f5:f6:f5:c5:17:f1:0a:3a:31:dc:7f:
                    68:18:19:d5:3c:72:e9:9c:2a:ce:e1:db:d6:32:9b:
                    a3:55:24:30:89:4c:eb:a4:59:95:fd:b1:e1:c9:32:
                    f9:29:46:23:d6:7f:68:84:dd:23:81:86:6b:2c:24:
                    eb:60:96:bb:03:c4:97:28:f1:ce:b9:fb:d7:32:45:
                    e4:08:79:7d:6b:aa:70:74:a0:26:ef:12:10:f9:1d:
                    78:4a:8a:30:d4:06:0f:06:34:9b:5f:a0:41:29:48:
                    f3:18:f1:f1:9f:57:53:22:d1:37:b5:3e:a3:3d:04:
                    82:a2:1b:29:a8:8f:af:91:a8:69:08:dc:fd:ac:a2:
                    c0:ad:6a:44:ef:fc:de:eb:49:30:b9:4e:5d:aa:e7:
                    b8:46:5b:0c:fe:e9:55:f3:79:4b:62:eb:ac:ef:7b:
                    0d:41:cd:e8:f4:a9:82:3a:61:a1:e8:50:d3:aa:5c:
                    09:95:96:b3:60:ee:db:f1:ce:72:81:58:17:25:54:
                    19:26:51:9b:28:6e:18:62:03:37:69:d6:f4:a8:95:
                    77:13:ae:f0:71:4e:3e:74:44:7a:0e:48:6d:18:73:
                    c4:51:6f:ff:be:09:68:9e:a4:14:91:15:58:84:63:
                    1a:5f:71:7c:8d:d2:eb:5a:a7:1d:5f:3f:8d:0a:0e:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:4B:6E:18:0D:00:C6:82:4D:EF:7D:47:C4:A0:20:B2:7E:92:3F
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32322d3232203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:d6:b6:24:37:c0:74:f7:63:c4:2e:b0:b1:e2:52:ae:2c:
         4a:c8:7b:38:71:cb:01:b5:5f:08:e3:c5:a2:18:8f:7e:4f:58:
         f3:dd:f5:d0:56:20:75:b3:1a:22:9e:ff:68:1d:ac:07:87:47:
         38:8c:53:82:09:16:3d:8c:23:2e:81:5f:f9:f8:5d:40:0e:75:
         42:4b:22:a9:61:03:e4:e4:a3:87:e6:ac:ea:5c:b4:bd:bb:d6:
         3a:2c:bd:65:54:bd:58:11:a7:d3:dd:77:ce:53:c6:d7:af:1f:
         74:f3:b4:86:e2:55:0c:40:fe:5a:58:70:27:ec:34:95:8b:27:
         88:bc:9f:fd:26:fc:58:69:3d:c8:c3:2c:05:1c:ae:96:e6:e1:
         25:c9:62:bb:51:6a:6a:65:12:93:60:87:56:be:58:a9:dd:80:
         62:6b:4f:0a:fc:2c:21:e9:bb:26:6b:2c:19:f9:ca:b6:08:a1:
         e3:3f:da:f2:db:58:02:a8:10:3c:f3:71:a9:3c:d0:b1:76:2d:
         0b:fc:d0:09:9f:f4:50:31:4e:5d:9e:a7:0f:87:dd:4b:d6:16:
         32:17:6d:7d:e2:cd:2c:06:61:9f:40:81:aa:3c:db:e1:6f:c2:
         f6:cb:8c:8e:64:95:b8:55:76:63:0a:64:51:63:21:36:c2:a0:
         d8:b1:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org