Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa
File:                     3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier:          GLF3EV9zp6DIOvmppHmAE9HuzOcY1JlXnHM9tLk4mqc=
Subject key identifier:   FD:9E:4D:60:0B:A5:3C:8C:7B:6A:8F:84:C6:47:08:10:DF:7C:37:E5
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       07CB29AFA1B4898A391C34322EE20358E65E39CC
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        186.193.184.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cb:29:af:a1:b4:89:8a:39:1c:34:32:2e:e2:03:58:e6:5e:39:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=FD9E4D600BA53C8C7B6A8F84C6470810DF7C37E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:94:72:61:61:6c:a0:db:bb:10:69:f1:7c:
                    32:27:eb:6e:e5:15:14:47:33:55:ea:3e:63:41:ad:
                    02:7e:8b:77:50:5d:e6:8e:b6:40:dd:85:3c:09:4f:
                    e4:1c:2c:69:09:26:15:8f:a8:6c:49:df:c7:f1:95:
                    9f:31:21:74:51:41:f3:76:8e:cd:d3:b8:45:f8:1d:
                    0a:16:29:3f:c2:1e:e2:a6:5e:fe:7d:b2:23:42:5c:
                    db:53:5d:52:9e:a3:cf:e0:ea:37:27:6d:19:b6:7b:
                    9c:66:66:b4:68:24:77:64:d6:d3:d2:1a:a3:fc:18:
                    60:e3:7e:f6:a0:80:ba:05:70:ca:f2:b0:12:6c:e2:
                    3b:fa:91:73:ca:a7:be:f3:d1:a4:b8:f4:0c:2c:42:
                    dc:3f:54:76:4f:37:de:54:7a:e6:a5:62:f5:e0:47:
                    ee:9a:bc:ee:39:82:2d:4d:fa:a1:38:fa:4a:01:8a:
                    a6:a6:e7:0b:8f:7b:9a:7f:2a:7c:6b:da:7a:08:aa:
                    61:35:2a:93:2b:46:d4:d8:51:61:b0:61:01:8c:12:
                    c6:0b:e0:f5:6a:31:51:e4:de:c3:b9:dd:83:59:c2:
                    df:03:a9:b9:a6:fc:a9:41:ed:28:25:e9:d6:df:d7:
                    62:32:06:a5:63:d3:06:6b:11:93:7e:87:be:16:18:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:4D:60:0B:A5:3C:8C:7B:6A:8F:84:C6:47:08:10:DF:7C:37:E5
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:95:b7:b8:8b:ac:89:5c:e8:7b:1e:d8:0c:ec:ba:03:3d:1b:
         52:5c:05:48:23:16:83:7e:e9:e1:c7:98:cf:af:0f:06:04:15:
         0e:d1:89:ad:6b:b7:e5:13:22:66:bf:e8:27:84:e6:99:e8:87:
         6e:26:84:09:83:0b:b0:82:3e:f2:ef:fd:c3:53:59:26:b9:50:
         05:6e:e0:0e:a2:b0:da:d3:f6:75:59:c0:c6:00:57:ab:99:86:
         5a:79:79:56:07:31:04:c2:b1:b8:0a:ee:ee:51:ea:c8:3c:a4:
         46:da:6a:e8:c0:23:14:d8:70:3f:d4:0e:9b:fe:6c:24:76:35:
         f4:e9:02:1e:d4:86:77:a3:40:f8:b3:25:40:69:c5:2e:98:cd:
         5a:9c:a9:5f:e6:47:50:ed:e2:3e:ea:9a:f3:20:c0:ef:bf:1a:
         39:b1:88:20:30:a6:34:5e:2f:dd:dd:02:ac:50:3c:9f:d8:ec:
         b7:67:38:b5:18:4f:01:da:cb:b5:c9:8f:39:9b:f1:a3:6d:be:
         1b:e6:0f:36:f7:9b:fa:de:2c:da:cf:6c:c2:e3:45:8e:88:ab:
         fa:36:e4:13:5a:03:95:fe:9c:c7:c2:c5:70:af:9e:54:0f:c0:
         9f:45:c4:6c:b7:56:89:d5:c5:70:f9:7f:dc:3e:fa:ae:6e:2e:
         96:7e:d0:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB8spr6G0iYo5HDQyLuIDWOZeOcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MzBaFw0yNTA0MTYxMTQyMzBaMDMxMTAvBgNV
BAMTKEZEOUU0RDYwMEJBNTNDOEM3QjZBOEY4NEM2NDcwODEwREY3QzM3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kpRyYWFsoNu7EGnxfDIn627l
FRRHM1XqPmNBrQJ+i3dQXeaOtkDdhTwJT+QcLGkJJhWPqGxJ38fxlZ8xIXRRQfN2
js3TuEX4HQoWKT/CHuKmXv59siNCXNtTXVKeo8/g6jcnbRm2e5xmZrRoJHdk1tPS
GqP8GGDjfvaggLoFcMrysBJs4jv6kXPKp77z0aS49AwsQtw/VHZPN95UeualYvXg
R+6avO45gi1N+qE4+koBiqam5wuPe5p/Knxr2noIqmE1KpMrRtTYUWGwYQGMEsYL
4PVqMVHk3sO53YNZwt8Dqbmm/KlB7Sgl6dbf12IyBqVj0wZrEZN+h74WGCYZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/Z5NYAulPIx7ao+ExkcIEN98N+UwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzgzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO6wbgwDQYJKoZIhvcNAQELBQADggEBAGCVt7iL
rIlc6Hse2AzsugM9G1JcBUgjFoN+6eHHmM+vDwYEFQ7Ria1rt+UTIma/6CeE5pno
h24mhAmDC7CCPvLv/cNTWSa5UAVu4A6isNrT9nVZwMYAV6uZhlp5eVYHMQTCsbgK
7u5R6sg8pEbaaujAIxTYcD/UDpv+bCR2NfTpAh7UhnejQPizJUBpxS6YzVqcqV/m
R1Dt4j7qmvMgwO+/GjmxiCAwpjReL93dAqxQPJ/Y7LdnOLUYTwHay7XJjzmb8aNt
vhvmDzb3m/reLNrPbMLjRY6Iq/o25BNaA5X+nMfCxXCvnlQPwJ9FxGy3VonVxXD5
f9w++q5uLpZ+0F0=
-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org