Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          f+Ae7uQ1i19mFTJDj8bpJE9WANx7TTIdcOfHjKBRji0=
Subject key identifier:   1F:A2:B6:20:BA:65:BF:3C:0F:25:FB:00:DB:89:84:00:6E:FA:D9:C4
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       28790999BC1865FC7FFC917D5A304FDD44FE7B92
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        186.193.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:79:09:99:bc:18:65:fc:7f:fc:91:7d:5a:30:4f:dd:44:fe:7b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=1FA2B620BA65BF3C0F25FB00DB8984006EFAD9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:82:fe:26:50:08:f2:1c:6a:f7:8b:37:80:
                    9b:12:ae:3c:aa:b2:dd:21:81:ac:d5:fd:0b:96:4c:
                    a4:78:c6:3c:11:fb:c8:9b:23:62:cc:b5:41:cb:a4:
                    23:98:20:44:0c:25:60:c0:02:27:6e:8e:74:ac:94:
                    d5:b6:8d:cc:57:ff:18:70:16:60:cc:4f:f4:54:42:
                    f8:6d:be:43:5f:50:2a:3b:43:14:03:7a:be:d0:09:
                    f2:d9:67:04:fd:d7:04:51:ab:2b:3c:4e:e0:87:c4:
                    8a:0b:fb:36:b3:b8:e5:25:2e:3a:7f:27:dd:2c:64:
                    aa:99:31:71:dc:79:65:2d:ee:e9:47:b5:e8:b2:58:
                    3f:5c:21:1f:1e:cf:75:bc:e7:43:8c:2c:c8:f5:43:
                    0a:c4:0f:84:7c:f2:79:c4:b3:ec:66:57:6c:d0:9d:
                    0d:0a:1f:72:28:5b:dc:08:a6:8d:7d:1e:84:c7:52:
                    16:24:9c:cc:dc:c9:b4:08:b6:26:83:71:6a:93:75:
                    71:8c:d2:75:f6:ef:79:e8:1b:d4:15:7e:22:8d:f2:
                    38:e8:3c:84:86:67:64:eb:05:25:e5:9b:d0:a5:fe:
                    96:5a:e7:43:5a:32:2d:2d:83:38:43:43:ba:bb:d6:
                    a1:20:b3:16:ae:56:b7:a2:9c:63:a3:2a:1a:9c:fc:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A2:B6:20:BA:65:BF:3C:0F:25:FB:00:DB:89:84:00:6E:FA:D9:C4
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138352e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:81:e2:7b:1a:0a:1e:35:35:89:a7:cf:f2:a0:75:a7:ad:
         82:80:8d:58:e5:b8:63:f0:6f:75:2b:27:ef:07:58:70:48:9e:
         ce:c4:08:04:c9:50:57:ee:96:bc:f1:ca:70:8d:6f:92:f3:50:
         ff:d6:97:9f:6d:2a:f0:3d:f1:d6:12:d0:38:f0:84:b6:31:de:
         63:75:22:11:a5:a9:4c:a2:e4:2c:59:28:37:3a:13:2f:42:dc:
         78:0b:cc:3c:0e:c0:71:ba:7e:88:11:fc:78:91:5f:2f:8b:cf:
         26:bd:01:98:06:2b:10:16:6a:13:80:f7:25:89:e6:d5:ea:81:
         5e:b5:d0:de:50:b5:5a:11:04:07:8a:68:f7:7b:fb:4d:aa:13:
         04:9d:f8:32:c9:36:39:f5:63:0a:14:05:17:0b:8f:45:1b:3a:
         6b:0a:a1:3b:b0:ac:9d:f3:60:b1:0b:a5:8c:15:02:cc:f8:4c:
         96:ef:17:3d:c6:87:50:e2:f8:83:b0:2b:c2:bd:77:c1:cf:bb:
         8f:4e:d3:c0:39:0a:f8:2c:b5:fc:dc:e2:a1:24:41:bd:a9:00:
         2c:47:22:a0:c8:ab:7c:6f:4b:3d:72:b4:db:37:84:6c:fc:32:
         19:b1:c7:8c:68:63:5d:d1:2f:19:70:53:6a:5c:05:f8:a1:b1:
         b6:05:a4:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKHkJmbwYZfx//JF9WjBP3UT+e5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MjlaFw0yNTA0MTYxMTQyMjlaMDMxMTAvBgNV
BAMTKDFGQTJCNjIwQkE2NUJGM0MwRjI1RkIwMERCODk4NDAwNkVGQUQ5QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDszoL+JlAI8hxq94s3gJsSrjyq
st0hgazV/QuWTKR4xjwR+8ibI2LMtUHLpCOYIEQMJWDAAidujnSslNW2jcxX/xhw
FmDMT/RUQvhtvkNfUCo7QxQDer7QCfLZZwT91wRRqys8TuCHxIoL+zazuOUlLjp/
J90sZKqZMXHceWUt7ulHteiyWD9cIR8ez3W850OMLMj1QwrED4R88nnEs+xmV2zQ
nQ0KH3IoW9wIpo19HoTHUhYknMzcybQItiaDcWqTdXGM0nX273noG9QVfiKN8jjo
PISGZ2TrBSXlm9Cl/pZa50NaMi0tgzhDQ7q71qEgsxauVreinGOjKhqc/DunAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUH6K2ILplvzwPJfsA24mEAG762cQwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wbkwDQYJKoZIhvcNAQELBQADggEBAJMsgeJ7
GgoeNTWJp8/yoHWnrYKAjVjluGPwb3UrJ+8HWHBIns7ECATJUFfulrzxynCNb5Lz
UP/Wl59tKvA98dYS0DjwhLYx3mN1IhGlqUyi5CxZKDc6Ey9C3HgLzDwOwHG6fogR
/HiRXy+Lzya9AZgGKxAWahOA9yWJ5tXqgV610N5QtVoRBAeKaPd7+02qEwSd+DLJ
Njn1YwoUBRcLj0UbOmsKoTuwrJ3zYLELpYwVAsz4TJbvFz3Gh1Di+IOwK8K9d8HP
u49O08A5Cvgstfzc4qEkQb2pACxHIqDIq3xvSz1ytNs3hGz8Mhmxx4xoY13RLxlw
U2pcBfihsbYFpM8=
-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org