Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3230203d3e203238313931.roa
File:                     3138392e39302e33322e302f32302d3230203d3e203238313931.roa (raw, json)
Hash identifier:          b4QIcqOTlZ3BVnjZUERcl0vrru8yj6i4RbIUNhiAByc=
Subject key identifier:   86:3F:85:FC:D3:5A:E3:96:0F:94:5A:F2:EE:9C:FE:01:61:0F:7A:66
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       089EC9A6969D00EB5D53A82BF0A45CD5AF351BFF
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3230203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:33 +0000
ROA not before:           Wed 17 Apr 2024 11:37:33 +0000
ROA not after:            Wed 16 Apr 2025 11:42:33 +0000
asID:                     28191
IP address blocks:        189.90.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9e:c9:a6:96:9d:00:eb:5d:53:a8:2b:f0:a4:5c:d5:af:35:1b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:33 2024 GMT
            Not After : Apr 16 11:42:33 2025 GMT
        Subject: CN=863F85FCD35AE3960F945AF2EE9CFE01610F7A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:45:86:c1:e0:08:54:4c:09:3f:0b:9f:bd:
                    9d:e9:fe:55:27:22:e8:52:cd:39:2d:25:6d:be:b4:
                    ce:ac:ff:e6:7a:9c:e5:9b:e9:6d:09:f7:5e:0d:2b:
                    6a:9f:d5:85:cb:63:82:b3:f3:a3:12:a9:cf:15:34:
                    c0:b2:66:ac:14:48:b9:53:73:2b:56:35:8a:97:7a:
                    c6:a1:11:9a:1f:1f:d4:27:57:69:99:46:a3:1a:54:
                    c6:87:3d:e4:ae:97:c9:c4:3f:7e:2e:3e:6c:d6:e8:
                    de:07:fb:4a:1e:a9:0b:8a:27:3b:d0:d4:8e:6a:e4:
                    2d:9d:3d:40:fe:bd:8b:6f:13:3f:2a:38:d1:ae:7a:
                    5c:03:19:56:e0:ce:2d:3a:ea:40:e0:e5:4b:84:df:
                    a3:8b:cb:e8:ed:82:0a:f5:62:35:d0:7f:86:81:ee:
                    8d:e2:d7:26:9c:da:9e:44:df:b9:be:71:82:38:b1:
                    da:12:1d:2c:35:ec:05:a8:19:37:c8:7e:e4:81:99:
                    38:f8:c7:28:38:54:b8:6c:05:27:df:9c:5d:8d:dc:
                    83:a0:d8:b6:86:0d:77:98:65:a9:34:21:87:56:5e:
                    1c:a0:05:b8:34:8e:34:5c:52:01:62:ff:b9:46:b8:
                    2c:e5:b0:11:81:c6:8f:86:ff:a4:4f:81:d7:83:2e:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3F:85:FC:D3:5A:E3:96:0F:94:5A:F2:EE:9C:FE:01:61:0F:7A:66
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3230203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:66:4c:9d:4e:3d:67:b9:6c:da:bb:22:dd:d0:24:55:c9:b2:
         11:a0:e3:2d:4e:2c:d8:90:79:70:8c:25:aa:29:b1:b7:27:91:
         4d:b1:ee:16:5b:de:e7:e0:36:72:c5:ae:74:d4:a0:e8:5e:d9:
         5f:a2:aa:c6:8a:83:11:d0:fd:ee:d6:a0:ca:f6:a8:34:df:4f:
         44:d6:12:1f:82:4a:45:86:4b:ae:a7:b3:37:82:4a:fc:77:a4:
         7b:a1:01:de:87:da:49:61:62:b9:6b:13:2b:08:80:e2:89:af:
         1f:cb:46:af:cb:da:76:ca:06:6a:47:ed:b6:ed:9b:3c:f5:01:
         ff:75:ee:ea:cd:7a:e1:2d:07:09:e8:42:7c:8c:b7:3c:c1:5c:
         8a:df:39:96:82:fd:06:0b:a1:1d:e5:6b:dd:f5:16:b4:42:98:
         9f:e6:62:45:b7:eb:87:6d:c6:05:b8:07:ea:30:d3:35:59:f6:
         99:6e:59:b9:76:21:22:4c:72:6e:0d:b9:70:c5:6e:76:db:e0:
         ee:8a:a6:f8:cd:4a:54:10:90:6c:61:16:d8:fe:8a:23:b4:ae:
         b2:7d:ee:d7:64:47:7a:1f:d8:b9:23:af:37:1a:0c:d6:69:98:
         26:51:12:f7:5c:fd:7d:ea:32:e8:5c:9d:54:d5:ea:f4:67:fe:
         7a:b2:02:59
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCJ7JppadAOtdU6gr8KRc1a81G/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MzNaFw0yNTA0MTYxMTQyMzNaMDMxMTAvBgNV
BAMTKDg2M0Y4NUZDRDM1QUUzOTYwRjk0NUFGMkVFOUNGRTAxNjEwRjdBNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkY0WGweAIVEwJPwufvZ3p/lUn
IuhSzTktJW2+tM6s/+Z6nOWb6W0J914NK2qf1YXLY4Kz86MSqc8VNMCyZqwUSLlT
cytWNYqXesahEZofH9QnV2mZRqMaVMaHPeSul8nEP34uPmzW6N4H+0oeqQuKJzvQ
1I5q5C2dPUD+vYtvEz8qONGuelwDGVbgzi066kDg5UuE36OLy+jtggr1YjXQf4aB
7o3i1yac2p5E37m+cYI4sdoSHSw17AWoGTfIfuSBmTj4xyg4VLhsBSffnF2N3IOg
2LaGDXeYZak0IYdWXhygBbg0jjRcUgFi/7lGuCzlsBGBxo+G/6RPgdeDLry7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhj+F/NNa45YPlFry7pz+AWEPemYwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM5MmUzOTMwMmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL1aIDANBgkqhkiG9w0BAQsFAAOCAQEAhGZMnU49Z7ls
2rsi3dAkVcmyEaDjLU4s2JB5cIwlqimxtyeRTbHuFlve5+A2csWudNSg6F7ZX6Kq
xoqDEdD97tagyvaoNN9PRNYSH4JKRYZLrqezN4JK/Heke6EB3ofaSWFiuWsTKwiA
4omvH8tGr8vadsoGakfttu2bPPUB/3Xu6s164S0HCehCfIy3PMFcit85loL9Bguh
HeVr3fUWtEKYn+ZiRbfrh23GBbgH6jDTNVn2mW5ZuXYhIkxybg25cMVudtvg7oqm
+M1KVBCQbGEW2P6KI7Susn3u12RHeh/YuSOvNxoM1mmYJlES91z9feoy6FydVNXq
9Gf+erICWQ==
-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org