Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33392e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33392e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          aFbI39jU+vvrm6uNVeLSfIa33e/THiRZ6Golmr7h/jg=
Subject key identifier:   90:35:B0:2F:A7:C0:D0:8A:41:A8:C5:00:B5:58:93:12:AF:05:DF:08
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       115931C3B0AB185DD7DCE49C7E51713022DF42D9
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33392e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        189.90.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:59:31:c3:b0:ab:18:5d:d7:dc:e4:9c:7e:51:71:30:22:df:42:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=9035B02FA7C0D08A41A8C500B5589312AF05DF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:e8:f3:e1:98:88:05:94:7b:bc:20:ae:50:
                    e1:39:3d:58:76:5e:4c:b2:40:a7:ec:47:e5:cf:ea:
                    66:e4:7c:b4:16:a6:46:9c:46:72:ef:a5:d7:42:ce:
                    ce:3e:e7:6a:30:18:08:c0:f3:bf:97:b0:2e:c5:02:
                    e3:9a:5c:70:7d:e0:b4:59:38:dd:37:be:cd:3d:9f:
                    f5:ac:9e:43:c0:79:d7:31:77:b0:a6:9d:a3:99:db:
                    e0:76:c7:82:42:3b:43:71:af:7a:c4:32:42:79:ed:
                    f4:e4:7b:4c:65:89:c0:e4:63:17:27:f0:7e:9c:98:
                    53:b3:66:a6:a5:36:1f:31:74:67:1f:a8:56:f5:ef:
                    22:46:23:7b:70:13:1b:91:9c:a6:4c:36:ef:3e:a4:
                    b3:f5:66:78:5d:29:d2:25:cd:da:fd:73:58:60:3b:
                    3b:61:2f:b5:02:20:ee:cb:cf:38:29:66:28:07:fc:
                    01:be:58:44:4b:66:dc:47:98:28:84:a4:ec:74:19:
                    72:18:2d:22:07:ff:86:87:08:10:4e:f0:47:11:04:
                    80:82:ed:82:41:85:5f:4e:27:ca:b1:1b:69:6a:37:
                    be:8e:03:16:a4:ea:0b:dd:cb:04:6f:ce:71:5c:fc:
                    43:3d:83:69:00:c1:3f:59:42:6e:58:ec:54:d5:7c:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:B0:2F:A7:C0:D0:8A:41:A8:C5:00:B5:58:93:12:AF:05:DF:08
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33392e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:8c:37:04:e1:be:11:d5:ea:56:fc:d9:e8:17:5e:e7:82:0a:
         2d:70:77:0e:2c:36:10:91:48:bb:5a:12:bd:fb:fe:9b:1b:58:
         06:ef:0b:64:e9:45:ae:14:c5:06:13:80:53:8a:3f:f3:0f:fb:
         89:8e:90:97:2d:bc:62:02:aa:8a:dc:8e:8d:34:53:7f:e6:ba:
         e2:16:a5:d9:d3:99:bc:2e:ff:3f:0f:79:00:bc:c8:18:80:56:
         7c:b8:c7:9e:e5:a3:48:3f:32:2a:8c:54:55:73:0f:10:6d:f5:
         3d:bf:82:ea:95:2e:ca:38:20:f4:fe:f1:47:31:24:f4:e9:a4:
         7b:91:ec:c5:b2:34:6f:a7:96:e1:60:97:ed:73:0f:af:2e:d4:
         98:7e:bb:74:91:a0:cf:82:9c:4e:3c:c0:e5:48:4d:a3:f3:cc:
         52:84:2c:5e:12:f4:2b:42:24:0f:8f:d3:0d:b7:81:b3:07:7d:
         bb:3a:43:80:1b:5c:e6:48:59:8a:cd:58:0b:8c:2c:90:dc:11:
         68:55:bf:0b:4a:2e:8a:6b:66:7b:99:72:28:ba:3b:dc:67:c2:
         6f:05:3b:1b:5a:d0:d7:ff:d5:0a:59:6c:1f:e2:bb:79:2d:69:
         6a:49:6c:b3:11:2a:db:cb:83:25:d5:66:19:c4:26:92:ef:06:
         42:79:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org