Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          Zu5EDL94I6S3RVt6pzAsm3hFNxRdUA0tdLGFHCq0RDI=
Subject key identifier:   52:63:3F:FB:7D:CC:78:BC:B9:56:CE:BA:4F:AF:99:5C:12:C5:FD:CD
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       3E8BA6018AC17964147C42DA3205A809635FD2EC
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        186.193.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8b:a6:01:8a:c1:79:64:14:7c:42:da:32:05:a8:09:63:5f:d2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=52633FFB7DCC78BCB956CEBA4FAF995C12C5FDCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:aa:21:d5:6d:c2:c5:ca:4f:fa:d0:28:d9:
                    ef:3a:1c:3e:42:87:b1:af:94:aa:42:de:73:e9:39:
                    a8:80:ac:1f:1e:be:10:49:ea:e8:bd:17:b3:f1:9a:
                    08:1f:02:0e:49:70:49:69:ea:d3:78:3c:05:91:04:
                    c9:8c:c9:5c:ae:2c:d8:d2:ca:3f:cd:5b:4e:2d:fc:
                    15:e9:a2:fb:8f:dc:ba:4f:b4:79:f2:18:b0:b4:e0:
                    d6:b0:70:ff:21:37:cc:65:f6:73:64:58:91:9a:11:
                    b4:6d:3e:f8:03:64:31:b4:06:24:89:d6:6a:93:53:
                    32:ad:02:c6:ed:2a:2d:c8:89:4a:07:01:ef:54:0e:
                    14:58:cf:44:42:82:d4:10:8d:be:4b:6e:fa:ec:a2:
                    c3:fa:fa:32:60:da:5b:1b:c5:87:8a:b2:07:34:2d:
                    5d:b7:52:f7:71:07:28:67:15:5d:82:59:02:3c:8a:
                    1c:79:e8:47:f6:ae:4c:c8:19:9b:68:f3:5c:8e:88:
                    61:af:dd:31:ac:d3:e4:fc:60:c5:73:32:e3:48:fc:
                    11:fc:24:a0:cc:5e:15:c9:48:a8:e8:85:80:c6:d0:
                    d7:5d:76:2f:f5:ec:28:8d:2b:ec:b0:06:b7:4f:cb:
                    eb:3b:7c:a8:08:e8:63:12:8d:de:e3:a5:e2:0b:68:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:63:3F:FB:7D:CC:78:BC:B9:56:CE:BA:4F:AF:99:5C:12:C5:FD:CD
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6f:20:56:c7:5d:4e:48:47:bd:4c:df:d3:1e:ab:4e:df:1c:
         f5:1a:80:b5:be:0b:22:76:44:ec:5a:b6:4a:e0:57:f9:08:1e:
         77:35:e2:82:2c:76:61:3e:c3:f0:9b:c1:51:0a:56:45:c2:af:
         73:f1:ea:10:18:bb:e6:ef:4b:c1:ba:dc:5b:58:18:f9:6a:0d:
         22:b9:9f:8e:b8:ac:ac:d6:ed:65:c1:70:ff:47:18:83:bc:17:
         d0:f3:11:17:6d:c7:3d:47:3b:3e:10:55:04:f2:46:16:83:4c:
         f1:b7:61:b6:1e:15:8d:6b:2c:b2:d3:86:00:ab:a5:07:e5:97:
         6b:f4:00:83:55:16:0a:13:4f:5c:c4:98:68:a9:ac:2e:1c:96:
         68:ef:21:8c:c4:cf:9c:06:30:80:2d:fa:cf:2b:2c:30:30:cd:
         a9:2f:bb:e8:45:f8:9b:36:06:b5:ec:6e:3b:8e:6a:f8:05:b0:
         4e:75:4e:b5:36:f5:cf:87:04:68:d6:cd:9a:f1:a4:ac:da:3d:
         f2:90:6e:9b:d4:89:13:b3:e1:fa:38:b1:3e:bd:01:b7:c2:ca:
         16:12:3a:71:48:2a:05:8f:dc:88:8a:1d:d5:7a:21:d7:f7:10:
         5a:1d:2c:59:97:72:89:5e:35:12:9c:96:ba:61:a9:1f:3e:97:
         ce:63:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org