Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138362e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          nmEkZZvlDgw6ZZGEG2leUKAxGfjC1T8KO8wHj4IvRfk=
Subject key identifier:   C1:B7:06:A4:11:38:DE:4A:0A:F6:63:68:A6:87:BC:3B:F4:80:7D:16
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       667BBED350675D3CA2B272C469D70D687EB600DF
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        186.193.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7b:be:d3:50:67:5d:3c:a2:b2:72:c4:69:d7:0d:68:7e:b6:00:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=C1B706A41138DE4A0AF66368A687BC3BF4807D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:07:a4:15:8a:7a:e2:61:27:14:57:63:f4:
                    30:a9:f6:81:c8:0a:ef:35:83:15:a1:9f:41:ce:36:
                    c4:de:89:a5:0c:a7:eb:0c:02:fd:82:cd:5c:73:e7:
                    16:e5:11:45:86:72:e9:16:33:10:11:18:4b:8c:c4:
                    ff:d4:23:3d:b7:3e:7d:6f:30:93:26:6b:90:f2:e8:
                    e5:89:eb:ab:75:6b:ea:72:9f:9a:df:d6:52:e1:83:
                    2f:e7:9e:f0:59:cb:b0:c8:49:0d:4c:5f:47:f1:5b:
                    42:c8:d0:66:90:7e:77:f8:75:10:fa:79:af:cf:54:
                    69:01:b9:bd:58:e3:ac:c4:44:02:40:03:73:cb:f7:
                    ab:a4:85:e1:6c:ef:d0:b3:a1:f1:1c:fb:1e:7e:1e:
                    21:ae:8a:a2:14:e3:c1:c4:bb:c2:05:13:40:cc:99:
                    ba:a7:f9:0b:c7:82:ae:6c:3b:1b:15:f4:26:d3:cb:
                    3e:c5:eb:91:b7:06:5e:1d:38:e1:12:05:ba:a2:b4:
                    fc:ce:21:6e:14:02:5d:7f:f0:12:b3:83:96:90:05:
                    5e:23:1c:6b:72:f7:0d:a1:0c:7b:4c:77:43:0f:af:
                    f2:cb:55:ef:89:48:bc:e3:2d:a2:1b:e9:84:01:25:
                    33:29:4c:f3:d7:d4:59:74:3b:55:6c:72:85:16:05:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:06:A4:11:38:DE:4A:0A:F6:63:68:A6:87:BC:3B:F4:80:7D:16
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138362e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:74:18:7c:be:b3:a4:90:b5:28:07:26:a0:79:99:f6:63:61:
         85:53:60:05:1f:0c:70:1c:d4:83:ad:2a:d0:2a:38:48:ed:3e:
         a3:69:2a:45:12:cc:af:5f:a4:41:ad:40:51:f2:0f:ac:ef:0f:
         36:91:ff:e3:b3:48:e7:18:f7:9d:e8:82:44:92:95:31:1f:af:
         ee:7c:f1:fc:76:a0:70:f5:ad:91:16:07:af:ce:8c:93:b5:48:
         c0:9f:91:42:79:5b:fc:f8:b1:6a:7c:90:76:2e:32:15:70:91:
         eb:91:03:3f:d9:e4:70:3c:02:0a:73:7e:a2:5b:f6:fa:75:23:
         55:c7:31:d6:57:38:cd:fc:ef:97:75:0e:62:64:13:9f:e4:dd:
         5f:43:80:64:cd:4c:e1:65:3e:ea:a8:1d:14:2b:65:de:7d:c3:
         a7:1b:e8:e5:d3:14:ef:97:fc:2b:a1:2c:10:66:e2:aa:f0:d1:
         54:91:cb:0c:6b:94:2c:56:66:68:e1:f0:1c:68:8d:31:12:37:
         cd:39:01:70:e9:27:0c:62:18:0a:15:00:9a:21:bd:36:84:b1:
         31:45:00:37:ab:f3:3a:61:45:78:b4:9c:1c:05:bb:ee:4a:fb:
         b4:b7:f3:5a:97:64:cc:54:29:e4:96:3b:ac:d3:bb:a8:4d:af:
         49:2e:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org