Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          BrBi080gvvK/PhFewuOHxHW9XHQ7LDW3EBQdTcfg60Q=
Subject key identifier:   52:F5:D7:D4:2B:52:6A:08:3E:CA:00:15:BE:C6:D1:45:F0:5A:7F:43
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       59CBBF549144AECA9A77A289534640B4F3488919
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        189.90.34.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cb:bf:54:91:44:ae:ca:9a:77:a2:89:53:46:40:b4:f3:48:89:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=52F5D7D42B526A083ECA0015BEC6D145F05A7F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:e5:7f:3d:ef:92:01:bd:9e:ae:db:b9:51:
                    1d:98:12:dd:01:b6:0d:3f:8f:8a:b6:60:28:ab:9d:
                    e1:ae:d7:34:4e:a9:0c:e9:d5:d6:eb:73:e8:db:a5:
                    cf:26:cd:3c:79:0b:05:b2:20:df:9c:c1:9d:a2:41:
                    79:59:72:4b:77:c4:f1:2e:ae:68:1e:1c:18:09:01:
                    3e:2b:99:bd:60:89:08:f9:03:dd:74:16:a5:d4:65:
                    fe:08:41:3b:f8:c6:6c:49:0b:4d:33:19:28:13:8b:
                    40:b2:ea:7e:05:d6:50:95:77:ab:7a:4b:65:68:0a:
                    0f:f4:53:55:09:c7:4b:fb:83:3a:88:e9:d6:1d:fe:
                    17:f3:19:bd:a8:ac:cb:6a:20:43:6d:5f:b5:19:4c:
                    44:ca:55:0c:7f:03:2e:b6:0f:18:06:cc:f7:22:d7:
                    03:f5:62:8b:a1:72:6f:ca:6e:83:a4:8b:e2:bf:07:
                    b4:e2:79:4c:fd:49:e6:7d:47:55:2d:a6:5a:be:3e:
                    4a:ee:94:97:9b:55:a0:1a:6d:78:4b:dc:37:e8:85:
                    57:22:ca:67:d7:7b:97:14:85:15:db:ed:5b:7d:c6:
                    ab:6d:bc:5e:4a:6c:fb:1f:83:45:ee:61:10:2a:18:
                    a2:b8:fc:d5:43:96:c5:d1:78:f5:bb:84:00:b8:19:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F5:D7:D4:2B:52:6A:08:3E:CA:00:15:BE:C6:D1:45:F0:5A:7F:43
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:69:66:ae:06:10:44:7d:87:bb:b2:e0:5a:de:f2:3b:12:de:
         18:c8:71:12:c2:9e:be:b5:1f:2e:b3:c7:24:a6:f2:cb:dc:44:
         46:40:f3:7f:78:c9:2c:b4:d3:cf:34:63:67:a1:53:31:8b:23:
         1e:a4:fe:ad:7a:ba:a8:35:77:b7:24:40:a1:a4:c2:c7:20:be:
         56:d9:ab:05:77:59:82:c0:ae:04:06:33:5f:c9:68:ee:5c:5f:
         b6:93:4c:52:1e:b7:a4:02:ca:44:3f:93:51:f5:3f:a6:5d:69:
         bf:ad:e9:a0:26:06:cb:0d:25:a2:dc:b7:98:cf:d4:69:a7:c4:
         e3:43:41:2f:d8:dc:87:b1:ca:f3:4a:67:c2:15:78:70:60:99:
         4d:0a:e1:b8:08:ff:32:ff:3a:a9:d6:d6:26:2c:fb:5f:23:02:
         61:42:72:b1:8d:14:f2:79:b6:7e:b8:bf:17:f5:a2:9a:33:d3:
         ca:0c:7b:0b:28:43:09:73:fb:0f:c9:16:3b:bf:a3:9e:53:85:
         3b:3f:27:0a:a6:3a:39:0c:dd:92:ee:0e:4e:fe:8f:91:3a:5e:
         83:1b:73:ef:a2:4a:0e:53:a8:46:7c:b9:84:4a:e0:78:59:76:
         73:3c:80:c6:7a:81:5d:b4:f9:ed:8b:61:87:be:77:17:f8:b8:
         36:99:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org