Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          WBGTTj+rCopBtCWFPx5u/a2+kj/i2Mf7yphItX/PTFQ=
Subject key identifier:   3A:8C:AE:81:A5:7A:9B:DB:09:CA:7C:B5:0A:9D:F9:53:A7:88:CA:96
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       6F0014809E7959A589210067AFFD383D40FCFC83
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:31 +0000
ROA not before:           Wed 17 Apr 2024 11:37:31 +0000
ROA not after:            Wed 16 Apr 2025 11:42:31 +0000
asID:                     28191
IP address blocks:        186.193.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:00:14:80:9e:79:59:a5:89:21:00:67:af:fd:38:3d:40:fc:fc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:31 2024 GMT
            Not After : Apr 16 11:42:31 2025 GMT
        Subject: CN=3A8CAE81A57A9BDB09CA7CB50A9DF953A788CA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:c8:8c:d7:f7:42:ca:0b:a9:76:50:2e:9c:
                    60:0a:c4:7a:6a:e9:0b:ce:62:13:cf:f3:92:70:e0:
                    8e:5b:f8:2f:8e:9b:c5:e1:91:f3:67:8f:62:f9:51:
                    3d:99:b2:3a:83:6b:39:30:4f:9a:1f:f0:c7:eb:f2:
                    e2:d2:53:30:8e:c2:5f:ae:1e:a4:c4:f6:1b:af:b3:
                    8e:46:26:00:14:1b:07:24:99:51:de:a3:04:a4:ea:
                    79:90:f7:02:92:11:d7:3d:f3:7f:bb:c0:d6:4f:0c:
                    6e:c0:11:32:dd:1a:af:1b:5d:04:3e:d0:61:36:db:
                    70:95:4e:c8:cf:74:96:3f:87:46:85:5b:57:2e:4f:
                    18:33:17:ea:96:e1:3f:23:5f:9a:6a:0a:86:b1:3e:
                    3b:b8:6f:ee:d7:9a:39:ec:2e:60:c4:02:96:a4:85:
                    27:ec:6d:c0:80:c0:f4:89:1f:68:d1:9c:bd:51:6c:
                    b4:5c:fe:06:cd:d2:f8:71:15:75:77:5e:5d:56:34:
                    0a:cc:af:43:29:ba:90:3d:71:b9:7a:a9:93:9e:73:
                    7d:3b:41:74:eb:9d:f0:3c:8a:43:8e:ba:73:c3:e8:
                    39:0f:70:15:87:eb:87:5b:5f:b5:06:6b:9d:3f:77:
                    d9:3c:a2:97:35:25:b2:da:97:e8:f4:ec:e5:b4:83:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:AE:81:A5:7A:9B:DB:09:CA:7C:B5:0A:9D:F9:53:A7:88:CA:96
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:71:22:2a:ef:2a:72:18:4b:c2:fe:a7:18:98:6a:72:c3:db:
         d6:93:4d:0d:24:4c:61:ee:c2:cf:44:7a:cc:80:3c:df:82:43:
         37:1b:fa:a8:55:9e:5d:9d:a0:09:d9:f9:a9:9d:b4:de:14:f8:
         d2:bf:48:67:96:a0:da:d3:23:78:37:73:76:1c:89:ed:df:78:
         0d:9a:ef:db:cc:da:45:a1:36:a9:28:6e:20:c3:c4:2b:79:bc:
         48:4e:96:e0:5f:2c:2c:b8:fc:95:88:11:a3:e3:0a:96:f1:06:
         4e:74:88:95:18:af:dd:23:4d:6f:ef:5b:cb:ff:40:a3:37:10:
         54:8e:3d:2b:c5:a2:e9:0d:6e:89:0f:a3:0b:86:89:50:63:25:
         34:1c:5c:0c:47:9b:b0:32:5c:9e:dc:3c:ff:3c:94:f3:3b:b2:
         04:c0:d7:02:c8:1f:be:d9:7a:81:81:98:f0:db:8a:f7:d8:2e:
         8b:0a:21:74:02:bf:32:c4:a4:8b:21:9f:7e:10:52:af:cd:eb:
         64:a3:c4:c0:05:52:a1:46:60:56:00:a7:8b:56:db:0b:99:4f:
         54:ec:0c:33:8a:d7:c3:5c:49:61:96:b7:6d:f3:5b:dd:50:95:
         76:5a:48:b2:81:14:93:d5:90:57:51:f8:b2:e5:57:ec:13:03:
         96:d9:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org