Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138382e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138382e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          TvDQIorD8mj+Q5XZQWR12iEgclJilo3H3KeYP8yfgek=
Subject key identifier:   07:B1:79:16:0A:1C:65:33:97:EC:E3:14:6B:7E:EC:83:6E:FA:50:F4
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       0A43AE2B24126D6706D6DB42851F288550FF9514
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138382e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:33 +0000
ROA not before:           Wed 17 Apr 2024 11:37:33 +0000
ROA not after:            Wed 16 Apr 2025 11:42:33 +0000
asID:                     28191
IP address blocks:        186.193.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:43:ae:2b:24:12:6d:67:06:d6:db:42:85:1f:28:85:50:ff:95:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:33 2024 GMT
            Not After : Apr 16 11:42:33 2025 GMT
        Subject: CN=07B179160A1C653397ECE3146B7EEC836EFA50F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:12:23:cd:e6:dc:b4:be:0e:61:9e:4c:55:
                    40:e9:c1:6d:9f:7d:bd:29:24:e8:b3:e8:0f:f8:3d:
                    b7:ec:fb:b2:f2:40:06:3e:d5:01:a9:9c:d5:14:a9:
                    8a:d7:fd:c8:eb:ef:0a:da:e7:9e:e7:ca:ea:df:b4:
                    65:2f:0a:4d:e2:5a:29:38:42:be:8e:68:3e:14:e5:
                    01:a1:7d:48:a4:c7:ff:a7:e6:d8:85:c4:5f:d3:d2:
                    cc:2d:0d:19:09:b7:d0:08:0e:45:60:bb:b0:7f:37:
                    9c:8c:71:13:70:87:99:05:74:3e:19:ed:72:74:14:
                    59:53:13:23:30:e8:68:cc:26:25:c5:8e:2b:c2:62:
                    31:69:e0:0d:b3:08:76:e3:2f:3a:ec:26:d6:cd:85:
                    ff:ba:02:80:d9:b6:15:63:2a:ff:13:0a:f3:26:ed:
                    ae:f3:cb:f9:6e:17:d5:4e:da:70:37:98:15:f3:27:
                    8e:f4:70:8b:42:aa:1a:c8:a4:29:55:97:ba:b2:4f:
                    2b:3a:af:8c:ce:cc:db:b9:f6:1c:31:30:0a:00:7f:
                    ee:fd:62:06:99:a8:86:7d:b3:88:5b:43:c9:70:1a:
                    a3:48:92:37:35:4e:4f:46:3d:d5:0f:75:c6:af:b4:
                    4b:b5:1a:d4:89:fb:75:e0:78:56:95:d0:2b:b4:f2:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B1:79:16:0A:1C:65:33:97:EC:E3:14:6B:7E:EC:83:6E:FA:50:F4
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138382e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:05:e9:58:8b:63:24:bd:ed:ed:24:4e:ef:94:90:9f:4f:07:
         f4:cd:fb:ff:f8:66:60:ea:0f:8a:8b:23:b8:dc:e2:ff:85:f3:
         50:e8:65:cc:28:ea:49:c2:32:a3:6b:48:8f:f9:97:3d:3c:5a:
         7c:45:83:87:cf:32:65:c5:92:94:d2:86:6d:c7:3c:06:07:75:
         5a:9c:7f:ec:40:2d:df:66:4b:43:b3:50:b3:43:22:0d:49:bc:
         26:6f:24:0a:6f:7d:b8:f1:7c:e6:75:3b:ec:1e:f2:47:ed:bf:
         78:b2:de:bd:f5:f3:75:20:7b:77:f8:33:3a:39:91:ad:f7:81:
         6c:46:19:8a:cc:86:fb:86:a0:45:4c:d1:b6:22:d8:f6:41:76:
         8c:d3:18:3a:eb:4d:fb:98:44:10:5f:b5:8f:4c:97:30:93:e7:
         f6:45:a6:cc:3a:bc:45:98:42:a9:ee:6c:e2:b9:0a:57:fd:9c:
         1b:b8:4c:9d:f0:b3:5e:98:f6:ac:99:08:7c:6d:7e:fd:f9:a0:
         54:81:65:ae:6f:d1:5f:a5:5e:b6:d1:64:30:e7:b1:1f:7f:bc:
         fc:73:18:5e:f4:b4:bb:cd:96:b4:37:b4:ce:a6:c0:1e:da:b0:
         df:a7:e1:41:88:1e:97:25:78:ad:03:87:3e:68:a2:f3:8a:c2:
         79:a0:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org