Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33362e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33362e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          TRM2dK0lolrHTgxinLEuk9kmE3ZuTUCjuYdynysW8uM=
Subject key identifier:   44:53:98:36:B8:76:6C:BC:56:1D:3B:FA:F7:B3:53:95:79:E8:19:A0
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       5BB2C5E1C1BCBF16934E8E71DE00E125996A1213
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33362e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        189.90.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b2:c5:e1:c1:bc:bf:16:93:4e:8e:71:de:00:e1:25:99:6a:12:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=44539836B8766CBC561D3BFAF7B3539579E819A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:c2:37:31:c3:da:97:59:dc:1f:68:a8:d0:
                    bc:22:27:0a:00:b0:10:44:e2:6c:6e:85:b5:78:b8:
                    83:16:27:bc:7b:bf:6d:3f:1b:20:6b:e2:f5:11:9a:
                    6e:c6:7a:54:74:0f:7b:7b:7a:0a:0b:68:3e:ad:ec:
                    98:92:ed:cb:cc:82:9d:02:35:1f:7a:6a:51:d7:a3:
                    39:9f:14:f4:de:1a:bc:ab:74:57:a2:5c:77:89:de:
                    77:38:d2:ab:aa:a1:1f:eb:22:c8:f3:cc:7b:05:e8:
                    28:c7:ee:42:df:b6:44:11:54:24:ae:ef:65:e3:5a:
                    3e:11:63:bc:fa:c6:13:8e:0d:11:e6:55:4f:5f:90:
                    1f:b6:cc:e8:d0:20:4a:09:97:e7:0d:39:ea:e7:54:
                    99:43:73:1e:09:21:ca:2a:7a:4a:e4:0b:d5:41:0f:
                    a7:98:24:7d:09:1d:57:d6:fb:4b:db:22:25:5f:b5:
                    33:a3:a6:df:21:0a:aa:dd:a3:e2:24:2e:aa:bf:19:
                    4a:50:3b:99:2c:50:37:bf:72:76:5e:e5:5f:c7:4e:
                    c1:2d:a4:4e:31:35:1c:34:68:63:1b:c0:f7:9c:0e:
                    c5:eb:86:1c:e3:b5:01:67:4b:96:b1:65:69:0d:37:
                    31:6c:e5:20:07:5b:4b:65:03:7f:35:46:3c:35:e9:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:53:98:36:B8:76:6C:BC:56:1D:3B:FA:F7:B3:53:95:79:E8:19:A0
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33362e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:7c:03:4c:4b:f5:b7:52:a9:50:ba:1a:a8:e0:ea:52:8a:
         b0:09:1b:e7:18:d2:45:01:08:a2:5c:2c:bd:19:cf:93:fe:95:
         e3:67:60:3e:7a:46:0d:2d:e3:22:51:af:b1:4e:75:77:35:f9:
         55:cd:e0:ce:de:fc:3f:ff:3c:05:e5:0a:c3:34:8c:8a:d6:ea:
         0b:ea:24:9b:3a:74:27:01:81:2d:83:dc:97:4d:a3:c1:5c:79:
         db:25:13:9e:a0:7f:76:a4:c3:42:69:69:40:9c:fa:f7:56:f7:
         09:ae:a3:4e:ee:17:2d:9a:95:d9:5a:95:5f:08:52:33:d4:f5:
         e5:20:07:61:55:cb:1b:33:88:31:94:a3:d5:34:86:b7:04:a9:
         f7:c8:07:3b:0f:a4:e0:6c:14:14:41:c2:bf:95:3b:f4:bf:66:
         f5:0d:ab:ea:7b:84:e8:2d:8e:33:39:cf:c9:94:5b:a6:dd:5b:
         e1:8d:a1:37:03:88:9a:a6:05:68:2c:c2:92:59:d9:f4:f9:1a:
         20:2d:40:3a:7f:85:83:02:b9:0d:71:c8:5e:fc:42:12:7b:01:
         3f:15:97:d0:34:a1:ac:36:e8:b9:fe:c0:f7:2e:d2:be:b2:17:
         46:5c:1a:ca:28:63:91:a2:f3:5d:ad:b2:38:07:f4:67:7f:76:
         0b:54:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org