Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          GXr6L6QkuXv92TVMS1YAYoAJpVAlB2pxDWlMxWmZYl0=
Subject key identifier:   64:1A:3F:40:23:12:7F:B4:88:1D:C4:5D:55:D4:F4:D6:58:B4:15:84
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       18E9DF098CF6C6F2F4D23CAEA12A29783528F001
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:31 +0000
ROA not before:           Wed 17 Apr 2024 11:37:31 +0000
ROA not after:            Wed 16 Apr 2025 11:42:31 +0000
asID:                     28191
IP address blocks:        186.193.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e9:df:09:8c:f6:c6:f2:f4:d2:3c:ae:a1:2a:29:78:35:28:f0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:31 2024 GMT
            Not After : Apr 16 11:42:31 2025 GMT
        Subject: CN=641A3F4023127FB4881DC45D55D4F4D658B41584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:ef:45:8d:c9:9a:19:bf:2f:8d:91:36:e6:
                    75:08:34:8e:a0:f1:c3:f7:b6:35:d1:9f:da:3f:fa:
                    76:7e:4c:2a:e7:0d:cb:c6:f6:ff:42:ca:d5:e8:2f:
                    a6:72:d2:22:6b:7f:58:7e:f3:a5:f9:cd:7d:3f:07:
                    11:2c:bc:15:3c:00:b2:29:dd:e9:26:70:92:61:df:
                    c4:1d:28:ff:38:ee:3e:f4:46:5f:b5:74:bb:fe:6e:
                    a6:1b:0c:15:fd:55:dc:8d:74:fe:48:37:8b:c6:8f:
                    e4:3a:06:fc:37:2d:a0:0f:19:1e:cd:59:d7:39:f8:
                    23:ed:90:fa:e1:b1:b1:b3:e2:b4:cd:c0:3e:2b:95:
                    2a:d1:80:4a:bc:b0:06:c1:c6:5f:82:4d:29:1b:0d:
                    cd:34:34:2f:18:a5:89:6e:7a:69:d4:4d:91:00:f5:
                    95:ea:a3:94:0e:c2:50:dd:2a:d7:4d:c1:8b:ce:c1:
                    98:3e:cb:0f:4c:f5:e9:e1:17:c3:ed:a5:c1:a3:99:
                    a1:98:b8:28:46:e2:de:40:02:30:85:05:06:95:3e:
                    fb:39:de:41:37:6e:fc:79:d3:96:16:c5:34:0b:35:
                    11:d0:eb:07:9d:20:f0:71:e7:7c:d3:26:88:82:40:
                    97:d2:8d:aa:08:dc:e8:6d:ca:70:51:f4:8d:77:be:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1A:3F:40:23:12:7F:B4:88:1D:C4:5D:55:D4:F4:D6:58:B4:15:84
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:ef:f4:6e:de:34:47:91:5a:5f:5c:9c:9d:b8:b1:1a:db:
         17:e6:4a:4c:df:ad:5d:fe:e4:61:db:50:02:3e:5b:67:d5:04:
         93:9e:e6:57:4c:31:72:19:be:b5:c2:9b:4d:74:d3:6a:6b:4f:
         38:33:67:e7:5b:08:69:91:03:8e:0f:7f:31:9c:5a:b8:7d:ad:
         b5:73:08:86:7f:d9:de:22:98:9b:d1:64:84:fe:ee:0b:59:12:
         ee:72:4b:3f:dd:3a:c8:6e:8f:4d:a4:e3:e1:f9:da:05:e2:1e:
         54:9e:eb:ec:82:f8:98:53:f5:5d:ad:b4:38:6c:d9:11:cc:8c:
         e2:c3:c1:a2:43:75:f2:b9:ee:8d:d2:ff:fd:8e:ef:89:e8:6c:
         0b:f3:49:9a:44:a2:9a:02:ad:71:4b:a2:cb:82:2b:8a:bd:72:
         94:a7:2c:81:08:1b:7e:f2:e2:64:a2:19:38:92:2b:07:f7:fe:
         30:19:9e:66:f8:3d:48:ae:e2:f9:30:b8:1a:2c:8a:e8:eb:f6:
         cf:d1:73:ad:a0:d1:b6:27:8d:33:6e:b5:a8:21:ff:01:22:2b:
         b3:67:32:62:5e:e9:f0:f2:20:f6:d9:8d:8a:7c:e6:2e:8f:d3:
         25:9f:1e:d8:25:a3:5e:6c:4e:03:46:63:a2:95:11:fd:b9:f8:
         27:82:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org