Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32322d3232203d3e203238313931.roa
File:                     3138362e3139332e3138342e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier:          xZ7ze3sOQchmspGbUbqM3Zdcb0Ov2oL97a0cVaMKy2w=
Subject key identifier:   BB:00:89:AB:5F:89:64:15:E3:69:01:40:1E:8D:C9:E2:77:9B:2D:95
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       1280373AFADE8AE2FD195B2618450936CF2FDD26
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32322d3232203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:33 +0000
ROA not before:           Wed 17 Apr 2024 11:37:33 +0000
ROA not after:            Wed 16 Apr 2025 11:42:33 +0000
asID:                     28191
IP address blocks:        186.193.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:80:37:3a:fa:de:8a:e2:fd:19:5b:26:18:45:09:36:cf:2f:dd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:33 2024 GMT
            Not After : Apr 16 11:42:33 2025 GMT
        Subject: CN=BB0089AB5F896415E36901401E8DC9E2779B2D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:80:1e:70:b3:0a:55:2f:07:a4:ec:db:38:
                    ba:c8:c4:e6:b7:86:3a:cb:ab:64:5d:aa:3d:c7:e0:
                    5b:c4:a8:b7:eb:12:d9:2e:c1:23:c5:53:b4:ba:44:
                    20:32:69:bc:b7:d4:79:73:b6:39:28:00:82:cc:af:
                    29:9b:39:bb:01:1b:40:35:1d:ac:f4:80:39:e2:d5:
                    7c:f7:0c:4b:b0:e1:84:3c:c0:14:73:d5:8c:09:99:
                    ec:95:65:c2:9c:a6:3b:b6:a6:ca:76:74:78:83:b9:
                    9d:46:fa:ee:d5:cf:9a:5c:32:88:63:e7:63:74:15:
                    b7:11:ad:5f:51:55:08:64:c0:2a:69:18:01:c4:aa:
                    1b:3d:54:83:41:0d:2f:aa:5e:84:33:a8:2f:c7:3b:
                    2d:aa:40:c5:a6:20:7e:0b:56:f3:03:5c:d4:5c:c9:
                    d8:87:25:45:03:e5:dd:ce:f3:35:e2:9d:c6:10:62:
                    42:db:05:96:09:37:c1:3b:36:90:f3:ee:ee:84:53:
                    2b:f7:c0:ea:92:5a:48:02:9b:ef:80:e6:0b:72:21:
                    dd:9e:c7:2e:c9:43:ff:32:08:5e:e2:3c:a4:bd:65:
                    5b:65:73:80:5f:0f:17:a3:04:d6:03:c3:f9:40:bc:
                    5d:6b:7d:e8:60:be:8c:91:29:4a:bf:4d:e7:c3:3e:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:00:89:AB:5F:89:64:15:E3:69:01:40:1E:8D:C9:E2:77:9B:2D:95
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32322d3232203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:26:83:93:b9:6d:66:88:c4:df:3f:8f:74:c6:67:9d:94:
         91:41:a3:ea:04:0b:70:f0:58:e8:3d:fc:8c:cc:55:8a:ee:2e:
         04:cf:55:c4:5e:df:0a:58:b5:8b:c2:39:48:43:80:06:c4:6d:
         d8:20:dd:f9:7d:87:19:17:36:75:4b:a6:e4:eb:21:f9:4f:cf:
         e2:1e:52:95:60:0a:fc:28:5a:87:1c:30:7a:29:26:82:85:42:
         02:ad:ab:85:56:a0:70:e6:87:27:c3:a1:06:ff:40:53:d6:a8:
         d0:f7:72:86:c8:aa:00:1d:45:b4:d6:b2:2f:90:95:61:b3:d2:
         80:81:98:64:4c:a7:23:6e:f6:e4:91:43:00:68:3d:55:36:e0:
         9a:d4:cf:e9:f4:c2:c5:99:31:9b:1f:ac:8b:33:7c:fa:5c:3c:
         ef:6d:cd:b1:fe:e6:73:aa:b3:d6:67:ad:09:0d:cd:b7:65:e7:
         e9:50:ce:03:a9:f1:d3:61:2e:55:2b:7c:3b:a1:89:8e:87:91:
         b2:59:37:54:dc:41:7f:16:9e:af:ea:8c:d2:d5:eb:f4:86:ce:
         24:cb:b4:81:75:3b:d1:9f:0c:66:62:61:6a:ef:e2:08:50:83:
         02:c3:23:41:e5:d8:a1:f8:54:4c:34:1d:89:38:a5:0b:87:30:
         ef:e0:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org