Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          p4aB/ejbRW9ERTQecd6Q38h68WZm7A42uo2aiK8Q+Dk=
Subject key identifier:   32:AC:B1:13:26:95:D0:16:E1:60:C4:BA:AE:E0:45:78:33:61:B7:41
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       0FFF5E9F626958B82B6A044D88E34C9ADC10CE7C
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:35 +0000
ROA not before:           Wed 17 Apr 2024 11:37:35 +0000
ROA not after:            Wed 16 Apr 2025 11:42:35 +0000
asID:                     28191
IP address blocks:        186.193.176.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ff:5e:9f:62:69:58:b8:2b:6a:04:4d:88:e3:4c:9a:dc:10:ce:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:35 2024 GMT
            Not After : Apr 16 11:42:35 2025 GMT
        Subject: CN=32ACB1132695D016E160C4BAAEE045783361B741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:23:d1:64:f1:61:47:ee:bc:d6:c2:51:9e:
                    33:cf:6a:d7:d4:73:66:84:17:7a:91:25:80:10:32:
                    e9:87:75:a0:d6:72:b9:9f:b9:d1:98:c8:7c:88:8a:
                    9c:b7:bc:f5:ac:a4:54:a7:8b:66:b3:46:82:04:d1:
                    e2:94:ea:54:c9:3d:e3:84:49:a4:01:16:95:78:7b:
                    34:41:07:f5:85:cf:5c:da:f8:d6:51:f3:ab:d1:cd:
                    34:0c:f8:99:1b:9f:69:fc:3d:5f:91:46:2e:be:92:
                    9f:aa:d7:8a:3b:95:6d:cd:9c:89:8c:bd:14:d3:1f:
                    36:2e:97:af:d7:36:34:7d:53:87:91:b1:c0:93:07:
                    a1:13:d0:a4:e8:5c:d4:6c:d0:de:80:45:59:16:79:
                    c9:7f:9c:7d:cd:43:e0:45:31:e0:a8:53:e3:7e:b5:
                    0a:66:5d:44:c6:9f:75:a9:8a:74:24:f8:f7:db:91:
                    b9:19:5d:bc:8d:5a:d6:3c:c7:40:5e:b2:50:15:e7:
                    ab:0e:d2:ca:db:86:06:84:0c:19:32:a9:c0:70:e6:
                    0e:9c:39:76:5b:10:e2:2b:e2:b6:a8:d5:23:11:7b:
                    4b:76:99:71:f3:0a:01:8e:e9:79:51:4e:9d:6d:2f:
                    e2:0a:c0:5c:10:d9:dc:6c:52:96:6e:eb:a9:86:b6:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AC:B1:13:26:95:D0:16:E1:60:C4:BA:AE:E0:45:78:33:61:B7:41
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:49:ef:3c:9a:06:22:fa:d4:bd:3e:19:d0:c9:f2:9c:54:19:
         34:fc:5c:b4:45:b6:e6:15:79:8f:05:eb:03:b1:38:e9:aa:ab:
         eb:18:51:e6:41:30:02:03:a7:9f:ac:6c:72:fe:32:db:fe:09:
         bf:5d:dd:dc:91:6e:5d:27:f6:29:14:55:64:6e:8d:3b:64:8c:
         4d:95:81:8e:d1:ee:43:5e:e2:94:40:ab:b6:55:76:41:6a:79:
         73:2e:c3:f4:59:8f:7a:d4:d3:72:e3:6a:66:c3:4f:2e:9d:bb:
         98:dc:b8:c0:d5:c6:5b:54:01:8d:1e:e0:7f:ff:d8:5e:de:ae:
         bb:27:90:69:e0:2f:5b:ba:af:a9:27:07:01:fd:9b:d6:c7:55:
         d7:6f:50:5f:ed:be:dd:44:73:1b:7e:03:42:c5:bf:fa:ad:69:
         59:79:4d:3a:4c:b3:6a:3d:4a:83:d9:13:96:fb:09:89:0b:5d:
         7a:6c:3c:fc:59:40:87:8c:5f:88:fc:3b:6a:23:e7:50:4e:ed:
         58:9c:3c:32:a2:cd:89:a0:80:92:11:15:9e:63:91:60:fa:eb:
         1d:12:cb:0f:ec:23:fd:10:93:33:99:48:72:21:3f:b5:90:de:
         e4:58:13:0d:1b:18:f4:b6:7a:21:16:61:61:66:b5:f7:09:40:
         67:2d:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org