Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          EnZtC8cFn9pDKoqwp0vDWiib7uw8QpciSTMhavFT5LA=
Subject key identifier:   B2:D0:FF:98:6B:67:4F:96:5B:48:D8:32:A6:C4:C4:FE:6D:24:E2:02
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       1AD0089BE1CB3DA14CDDBD1EFE812247208ADCD5
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        189.90.32.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:08:9b:e1:cb:3d:a1:4c:dd:bd:1e:fe:81:22:47:20:8a:dc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=B2D0FF986B674F965B48D832A6C4C4FE6D24E202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:a2:50:da:4e:9f:14:b6:6f:dd:03:a3:98:
                    e6:d7:83:e9:3d:df:b1:f1:02:a5:74:c4:b4:6d:5c:
                    4c:f3:af:76:95:ff:30:39:f7:33:a6:a9:55:6e:bd:
                    c3:43:06:68:c3:56:37:76:8a:36:8c:14:15:b8:47:
                    86:94:63:1a:f6:47:e8:4d:44:51:fa:84:d4:e0:e2:
                    6f:3b:cc:91:6c:38:4f:0a:85:3c:08:e5:b2:c8:5c:
                    25:1d:ac:d7:ad:08:4a:ad:99:4a:ed:29:97:95:2f:
                    9a:89:f5:4c:f2:64:7f:32:92:62:c6:c9:28:bb:1d:
                    ec:59:24:8d:ec:da:b6:5f:df:11:b3:9c:2c:b9:40:
                    ea:27:e7:8e:8b:5e:d2:4d:c3:44:4a:a9:55:3a:ed:
                    a6:08:38:db:24:9f:75:b0:cb:d2:d7:f2:1b:d0:2e:
                    6f:bc:fe:c1:cf:13:8a:f9:80:df:30:4f:ad:85:a6:
                    98:c4:99:aa:3d:a6:76:b6:1b:bf:37:b4:bc:67:e6:
                    de:d3:1b:68:5f:32:d5:e1:8c:6b:d4:e2:f2:7e:5e:
                    6d:3c:a0:0f:d4:28:bd:04:1a:de:9e:46:5d:84:8a:
                    00:b5:a2:91:f6:e0:24:b9:c5:b0:c9:05:bb:cd:ca:
                    6a:76:a9:a2:30:52:9a:dc:8e:69:16:fb:a3:ea:be:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:FF:98:6B:67:4F:96:5B:48:D8:32:A6:C4:C4:FE:6D:24:E2:02
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:e7:aa:01:f0:43:dd:7e:12:d8:eb:fb:fd:fa:ef:bc:43:6d:
         2b:ce:01:90:a2:39:76:53:23:75:13:e6:c0:8c:f5:77:16:4d:
         68:80:e1:0a:26:23:76:16:00:af:4d:83:a7:c5:9e:d0:40:6a:
         d0:22:45:8e:35:43:b7:f5:e8:b7:43:44:51:73:ba:6c:2d:66:
         3b:c0:81:c1:28:67:cd:1d:bd:9d:2d:f0:c7:77:75:bd:7d:93:
         49:d3:0a:e4:b4:d0:c1:c9:02:f0:66:78:36:8e:a1:95:55:1a:
         0d:fb:e1:a2:81:1a:be:18:40:69:af:dd:f7:95:e0:fc:d5:27:
         f3:20:82:8c:8f:f9:eb:8a:21:aa:3e:fc:42:ad:66:7b:ca:95:
         98:41:fa:00:33:27:a0:b8:0d:df:77:9a:a0:a6:60:29:3d:a7:
         20:70:2b:31:b5:21:18:53:1b:bf:4a:29:ba:85:d9:ea:62:3b:
         59:6f:d1:e0:e0:00:e6:5a:fc:95:42:0b:64:7c:1e:b8:03:21:
         bd:b2:2a:60:6f:80:49:ce:30:c8:d3:96:b1:c8:8d:a3:86:ec:
         35:f2:1b:a1:86:c6:4f:e3:d1:62:02:61:e3:c9:10:15:35:8a:
         22:3d:1b:ac:b2:29:c8:d0:08:34:59:9c:5d:78:fd:a7:25:f8:
         bb:27:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org