Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          3ZGDIS7wNS1MV7TjAUInB2cW6JKfLKgSymcYandyGlI=
Subject key identifier:   17:1F:89:19:E4:52:D2:AD:15:19:72:F2:1C:32:60:D4:EC:8F:C6:AF
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       241D3E2D6B88D623119AB34D3E9682F37DFA7761
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:31 +0000
ROA not before:           Wed 17 Apr 2024 11:37:31 +0000
ROA not after:            Wed 16 Apr 2025 11:42:31 +0000
asID:                     28191
IP address blocks:        186.193.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:3e:2d:6b:88:d6:23:11:9a:b3:4d:3e:96:82:f3:7d:fa:77:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:31 2024 GMT
            Not After : Apr 16 11:42:31 2025 GMT
        Subject: CN=171F8919E452D2AD151972F21C3260D4EC8FC6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:20:63:a3:e3:b0:9a:c5:9c:15:93:cc:f8:
                    a0:3e:93:b0:29:e9:e6:a7:cb:57:69:94:07:7c:57:
                    05:d2:f9:a3:42:63:a4:2f:cd:9c:e0:f6:8b:1e:cb:
                    c8:e9:52:ba:37:8d:36:f3:fb:66:af:51:8c:4f:2c:
                    6d:29:26:51:02:01:8b:f8:8e:50:21:ab:42:e9:f0:
                    b9:07:2d:67:b7:81:de:7b:6e:c0:33:0d:95:12:2a:
                    2f:91:15:78:2e:07:13:8a:35:84:d1:f3:19:22:6a:
                    e9:29:c5:24:01:84:69:03:3a:05:b1:0a:43:24:7e:
                    c2:ee:86:5d:ce:0c:d1:24:28:67:de:dd:13:d3:f4:
                    02:4f:ca:bb:82:61:c2:ab:60:1e:f2:79:02:d1:aa:
                    3c:2e:fc:dd:6e:5f:e2:bb:0e:79:39:28:6e:3c:f4:
                    ea:fe:a9:fa:5f:75:73:0d:4a:9f:3d:5c:ef:96:ae:
                    de:8a:26:c7:c5:83:bb:4e:5b:dc:99:ca:d5:05:41:
                    08:3a:f2:46:b9:69:b9:3b:c0:62:5a:86:ff:b4:7e:
                    1b:de:67:a4:dd:3e:b7:ac:52:af:d7:e3:2e:fa:80:
                    00:5f:6a:e6:9e:b6:91:16:57:de:50:d1:03:f6:dd:
                    6c:7e:d1:f1:1c:b1:75:74:f7:14:ce:4c:6c:32:97:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1F:89:19:E4:52:D2:AD:15:19:72:F2:1C:32:60:D4:EC:8F:C6:AF
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:14:3f:62:ca:0e:f1:97:a8:ad:b7:aa:8a:4a:16:7f:bb:
         f6:2d:d5:b9:b4:fa:d1:e1:eb:a8:bf:2d:22:5b:dc:50:1d:94:
         3f:a3:8a:4b:3c:3d:55:bb:80:f9:f7:5c:61:a0:25:9b:b1:38:
         6d:27:40:e7:61:87:ba:9d:96:93:d0:74:9e:1b:e9:cd:cd:71:
         3f:51:0d:82:4b:ae:1b:69:4c:43:68:54:22:2f:0b:1e:3d:e7:
         2a:ed:57:e2:52:a0:6c:4b:80:25:9b:0d:aa:41:45:5e:6c:d4:
         e9:54:51:bf:00:98:52:75:2a:82:2c:b1:cd:21:b7:f3:50:76:
         f4:e4:42:bc:4a:0f:62:f1:43:ff:06:ec:6a:ba:9c:4b:bc:c7:
         03:a4:15:54:8e:10:42:43:20:98:2e:bd:2e:62:70:cd:53:81:
         ee:a7:45:d2:51:b7:33:14:e5:47:98:70:98:53:02:b3:51:f0:
         07:60:ff:07:fb:3e:9c:78:06:06:69:b6:4a:be:de:f8:04:2d:
         8a:e6:26:a7:d2:95:df:91:6d:3b:c9:1a:5e:f5:f7:25:d1:34:
         7f:50:5c:09:75:bc:a2:0e:28:a7:7c:9c:97:30:aa:a1:a6:a2:
         24:18:17:bf:e5:85:7b:0e:b5:87:ef:95:d5:e1:0f:aa:87:95:
         b8:69:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org