Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33382e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33382e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          TLxiI9aIVUCy/B+DdBqAZRkwW5k22o/ZaZMXFEeW5C0=
Subject key identifier:   AB:15:3A:E8:5C:4A:FA:22:95:95:91:25:5A:8B:0F:57:7C:7C:A9:BF
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       791EE069F2677B17BFA734ABABD3039996E9B89A
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33382e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        189.90.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1e:e0:69:f2:67:7b:17:bf:a7:34:ab:ab:d3:03:99:96:e9:b8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=AB153AE85C4AFA22959591255A8B0F577C7CA9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:15:5c:d7:66:ee:d7:0c:7f:03:64:6a:b4:
                    4c:9d:ce:fa:94:aa:e8:0a:eb:94:01:b1:19:08:bd:
                    7a:39:e5:be:9c:03:a5:54:57:a6:ca:a0:fb:24:73:
                    e9:c7:79:12:45:0f:0f:52:8b:bb:2f:17:0b:b2:18:
                    cd:91:0c:59:be:2e:68:30:f9:d6:e9:18:2e:95:55:
                    fe:64:e4:26:bc:96:10:75:27:33:37:72:f2:a8:1c:
                    63:d2:1f:44:02:bf:d8:05:36:7a:31:c5:02:3f:bc:
                    a3:b6:db:ae:af:15:93:f1:33:04:fd:e7:99:e9:51:
                    02:9a:8c:a0:6d:24:a6:5f:d7:1c:db:5b:0b:46:58:
                    4a:94:73:a7:d4:c2:c0:1b:f1:5a:00:4f:6f:8b:d1:
                    1e:50:9b:8e:0f:06:93:12:6f:90:77:6c:22:b7:98:
                    e2:fd:ee:05:10:5c:df:3d:7f:85:ae:8e:b8:e8:0d:
                    95:44:a1:db:0d:aa:56:0d:d3:d9:31:0b:13:f9:c1:
                    2d:c8:11:38:1d:0d:e2:1a:91:04:99:70:eb:d7:d5:
                    ce:9d:8e:95:66:02:7d:15:f5:23:91:e5:36:3f:33:
                    6b:68:ca:c1:1f:e4:c8:43:5b:f3:ba:75:15:2b:6e:
                    a6:e9:01:09:f0:44:5f:64:b3:0c:c9:f3:8d:89:24:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:15:3A:E8:5C:4A:FA:22:95:95:91:25:5A:8B:0F:57:7C:7C:A9:BF
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33382e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:c9:fe:aa:5c:96:02:36:21:4b:fb:67:78:44:dc:77:3f:
         38:60:ea:65:43:ea:f7:47:c0:14:77:a6:c2:8d:2a:ce:ad:a0:
         49:50:19:f6:51:c1:ac:e9:b7:d5:5d:67:06:18:dd:47:b1:63:
         5f:f7:43:24:6f:8a:4f:49:cd:12:aa:d7:87:86:ec:27:68:55:
         a0:ea:6c:ef:14:f0:2d:af:60:b8:b6:4f:dc:72:32:8d:b4:4d:
         c9:14:22:82:d9:f5:ac:30:b1:bd:88:13:c0:b3:a5:d0:9f:62:
         d7:d1:ab:77:57:bd:23:98:56:a7:a2:ef:e1:ea:54:3b:00:23:
         2b:c5:fe:d8:57:a6:47:63:39:0f:14:c5:86:c6:22:92:cc:bb:
         6a:ae:42:0e:d9:6c:64:8a:e9:24:4c:e3:1a:54:5f:80:58:e2:
         fc:ac:06:46:3c:de:87:1b:36:40:20:1f:e6:fc:44:be:16:88:
         f2:52:a1:ee:f1:f1:33:62:82:35:8c:d5:6d:27:c7:fb:76:6c:
         81:c1:b0:77:35:ae:d7:dd:4a:df:61:ee:aa:06:85:ea:c6:29:
         d0:ee:34:f7:2a:43:1f:5b:6f:b3:88:0a:21:d4:9d:1c:1d:c1:
         b7:44:1a:f5:18:17:bb:d7:7f:02:e1:f1:27:6e:03:ca:1a:e8:
         34:e1:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org