Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          x0auPncz02GVRST0bFTRA2B2fwhMnr1sLGOfTOmBS14=
Subject key identifier:   46:A8:90:4A:0E:ED:A7:F7:EE:15:10:7D:95:82:95:F6:8F:A7:7D:94
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       03DF6B53112735DE1B82587480E132021077CF48
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:34 +0000
ROA not before:           Wed 17 Apr 2024 11:37:34 +0000
ROA not after:            Wed 16 Apr 2025 11:42:34 +0000
asID:                     28191
IP address blocks:        186.193.182.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:df:6b:53:11:27:35:de:1b:82:58:74:80:e1:32:02:10:77:cf:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:34 2024 GMT
            Not After : Apr 16 11:42:34 2025 GMT
        Subject: CN=46A8904A0EEDA7F7EE15107D958295F68FA77D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:69:ca:33:9a:4d:9d:e5:38:9a:38:aa:f8:
                    f1:dc:ec:db:5a:e9:35:3d:fc:1c:0f:a3:db:3d:87:
                    fa:e6:4d:0e:d1:2a:ab:7e:5e:00:90:7e:cc:df:51:
                    1c:b2:d6:b1:9f:80:5f:36:be:85:83:43:60:36:ed:
                    b6:85:88:a3:e8:51:ff:c0:cf:f3:f1:d9:fa:07:62:
                    77:b9:e9:86:73:a8:12:af:b4:42:29:86:ac:ed:f2:
                    48:3a:69:98:17:a2:40:20:66:58:e4:4f:38:b2:e6:
                    b5:9e:0c:4b:8f:d5:94:a8:1a:24:d0:40:c6:aa:ee:
                    5b:d0:b8:b8:24:14:b3:52:b1:8f:4f:83:04:8b:3f:
                    90:ae:96:07:a8:60:f3:47:9a:86:92:62:b6:93:f9:
                    6b:f7:27:84:83:9d:2c:5e:aa:f4:a4:96:e1:ce:9b:
                    3e:01:fc:fd:87:d1:8c:45:56:19:49:e9:9a:5a:94:
                    e2:d6:69:b4:49:5f:c2:ee:b6:d5:9a:f6:0d:4d:02:
                    71:2b:61:e1:c9:d2:22:68:69:a8:01:d6:30:f3:7b:
                    fd:70:c5:6a:ea:7a:84:a8:5f:9b:90:b7:7b:e0:f0:
                    72:38:a9:64:da:77:8c:2a:7d:64:1c:b7:c1:cf:ff:
                    62:3c:f1:7f:e2:45:7e:e1:f3:42:b4:f5:f2:41:39:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:90:4A:0E:ED:A7:F7:EE:15:10:7D:95:82:95:F6:8F:A7:7D:94
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:bf:79:23:90:e3:6d:58:fc:f3:97:87:c7:ec:15:ae:ac:85:
         11:e7:3a:0d:19:5f:b3:4b:78:ad:92:69:94:ac:75:da:ff:24:
         bd:1d:90:63:37:ba:57:c6:9b:66:77:10:b0:33:c5:85:08:2c:
         22:19:49:f7:70:91:e0:06:fe:fb:83:cd:ac:4b:d7:0b:e0:d8:
         e3:69:13:bd:3c:9e:9c:30:4d:b5:9f:ba:8b:ef:f6:86:fa:48:
         a9:17:6e:ce:7d:2d:0e:56:d3:53:3f:76:3d:03:d7:49:d2:f8:
         a1:1c:67:6e:14:7a:01:ef:e1:b0:d5:35:fc:27:62:1c:07:d9:
         43:67:3e:80:35:81:b0:63:4e:bd:6b:ed:9a:7b:46:02:37:f8:
         04:ba:d0:17:84:20:b8:0c:93:df:48:e7:b2:19:63:9c:02:c0:
         a5:d2:2e:1e:e4:ad:63:54:e5:0b:37:a9:60:8e:eb:a5:03:cf:
         2f:d2:b8:a2:f3:2c:25:8d:15:b8:d3:de:bc:76:56:ed:47:c6:
         a6:e5:ab:66:84:b7:25:5c:ca:78:0d:a0:e8:e9:20:95:87:67:
         f3:35:15:c1:d4:b7:58:c0:a5:7e:f0:92:98:e4:81:19:bc:5b:
         69:68:c4:9e:73:d2:2d:64:b9:62:38:e7:d8:d7:aa:7d:bd:b3:
         27:48:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org