Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137392e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3137392e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          OVOSnn9RCwJEjuDPDAyS0ZFGy5tK/yYvoX04QfzZIPk=
Subject key identifier:   88:78:4B:BC:83:79:59:0F:CB:D2:BC:59:B8:59:5E:99:8D:E5:39:8B
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       4FA9895A9F1A557CE4AD659794B7F2A8C3FAB1C0
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137392e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:34 +0000
ROA not before:           Wed 17 Apr 2024 11:37:34 +0000
ROA not after:            Wed 16 Apr 2025 11:42:34 +0000
asID:                     28191
IP address blocks:        186.193.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a9:89:5a:9f:1a:55:7c:e4:ad:65:97:94:b7:f2:a8:c3:fa:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:34 2024 GMT
            Not After : Apr 16 11:42:34 2025 GMT
        Subject: CN=88784BBC8379590FCBD2BC59B8595E998DE5398B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:13:e9:74:a1:c2:d9:1c:6a:39:42:c9:e7:
                    1b:45:64:5b:84:f1:fa:48:75:fb:98:37:ee:f9:f1:
                    62:fe:ca:47:8e:6f:5f:62:03:f9:62:a1:cc:cf:5b:
                    f1:74:42:b0:8f:94:f4:27:e6:16:09:7f:f9:10:4c:
                    d4:50:83:c3:1d:d7:b5:89:35:bf:12:cc:62:60:58:
                    c8:80:d6:81:c1:03:71:2c:79:30:d6:2e:6f:32:e6:
                    3b:04:c0:42:e7:e4:e7:56:d2:1e:d2:53:22:27:eb:
                    66:28:bb:58:7e:0f:9d:22:42:ae:9c:d2:e3:82:ae:
                    fd:3e:4e:61:50:8f:49:e0:00:68:d5:07:19:0f:28:
                    43:82:08:e3:6f:bb:1c:bf:b8:f6:70:cc:93:9c:84:
                    0c:29:04:b2:0c:1e:ad:52:4a:04:a6:f4:6e:19:38:
                    5f:05:df:f0:b9:5e:34:21:c0:9c:40:b9:dd:be:6a:
                    c8:56:f4:a2:4a:07:ef:a0:6d:d6:b9:c1:fc:40:08:
                    5a:98:34:e3:4d:cb:40:ad:73:31:06:aa:a1:20:ab:
                    4f:2e:7d:34:b5:66:6f:75:24:16:d1:27:4c:ca:04:
                    df:da:e7:2c:10:e1:22:d2:af:f6:2e:a3:33:15:a2:
                    d5:ca:d0:55:89:a0:0a:ec:5d:0b:7c:2e:e3:a7:73:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:78:4B:BC:83:79:59:0F:CB:D2:BC:59:B8:59:5E:99:8D:E5:39:8B
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137392e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:23:01:25:9e:01:ca:71:e3:c3:db:50:b8:d5:56:fc:8c:
         2a:c4:74:77:bd:32:08:21:3b:7b:18:e5:f3:42:d0:d1:41:57:
         5a:55:f7:4c:ed:7f:69:9c:57:58:ce:b3:83:24:78:7b:b3:f0:
         9d:21:96:2a:3a:1a:1e:d8:6c:24:08:94:ed:f7:39:8d:ac:8a:
         45:05:f5:4a:ec:19:e1:1e:b0:84:a6:81:fe:49:5f:01:0f:a1:
         d0:93:33:8d:25:5a:26:1c:33:8b:6b:43:ec:b0:38:89:74:f5:
         a7:65:0a:f9:f7:9d:ac:39:c7:74:2c:67:dd:0d:d9:85:a8:8e:
         6c:ae:06:6d:71:a0:31:30:8f:e5:ff:e6:f0:f0:a0:29:8c:25:
         06:4c:7d:fb:78:da:d9:43:d5:97:2c:e1:bf:9e:90:2f:a0:ef:
         c5:31:1c:74:d3:51:82:57:a5:a8:6d:9d:cd:23:13:c3:db:e1:
         62:0b:d7:7a:4a:69:0a:47:af:87:43:19:06:35:e7:d0:fd:63:
         03:7c:54:95:94:74:6f:1d:59:bd:77:88:f5:95:f8:05:7c:e0:
         7c:5b:fc:a3:40:99:c5:af:b8:cf:fb:5a:e7:4d:0b:cf:58:67:
         c7:64:94:d8:a3:b9:63:03:8f:59:72:0a:08:43:bf:47:a5:ed:
         b8:14:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org