Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34302e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          Ihh+t7hGaOD9eWE4bx3O/6ZnhlsSM2wJ43lw/oPVXb0=
Subject key identifier:   AD:66:79:9B:2D:8D:28:FD:D8:72:C8:72:E1:06:3A:C2:57:EC:E5:22
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       0D65D102F65ACB9191981A2161ED3719390AEA9B
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        189.90.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:65:d1:02:f6:5a:cb:91:91:98:1a:21:61:ed:37:19:39:0a:ea:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=AD66799B2D8D28FDD872C872E1063AC257ECE522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:e7:db:e3:3e:e6:30:8f:09:de:80:50:3a:
                    ec:99:a0:82:88:bb:1b:71:26:f9:d1:07:6c:02:b1:
                    34:cd:7a:d0:5c:b6:88:7c:71:06:3d:95:73:fb:a8:
                    0e:5d:c5:f7:96:cc:b8:35:13:50:3a:a2:db:0e:37:
                    5e:7f:c8:b2:08:3a:de:1f:2a:24:4a:b4:e8:36:21:
                    44:51:05:0d:f9:2a:c0:b2:f3:7b:0c:85:1b:88:70:
                    b4:ad:c5:02:4d:03:40:85:bd:a8:ee:95:42:4b:22:
                    95:9a:68:b1:d8:df:a1:58:4c:86:f7:0d:9a:cc:2a:
                    c8:f6:4c:35:ab:44:b6:3f:69:19:83:7e:89:b2:d8:
                    60:6c:d1:95:e6:eb:8a:1c:1e:b0:40:9e:27:d2:22:
                    ea:16:ca:12:74:f1:b6:54:c7:e2:85:01:34:85:74:
                    a8:95:a0:7f:ca:62:ec:55:cd:2e:5f:66:01:d3:26:
                    c6:89:b4:cd:25:41:3e:7c:9f:fe:b1:d8:78:82:26:
                    c0:86:54:de:4e:a3:f1:0c:b9:cb:b2:61:cf:62:18:
                    89:fd:b1:e2:ed:b4:b8:45:1e:6d:a0:d1:37:04:38:
                    77:93:be:ff:7b:38:3e:d2:87:33:d3:48:45:98:12:
                    4b:a0:dd:82:49:cc:cf:e5:1a:47:29:7b:c2:13:82:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:66:79:9B:2D:8D:28:FD:D8:72:C8:72:E1:06:3A:C2:57:EC:E5:22
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:32:4d:c9:e4:12:73:7b:d9:17:72:76:b9:aa:da:f9:df:c6:
         f4:f7:bb:c8:7e:4d:47:44:0f:57:c2:cb:ee:ec:3a:4b:99:ab:
         88:23:44:c1:97:8b:02:08:69:e9:72:dc:6b:c4:94:56:1a:ad:
         75:d9:f8:d0:e8:39:77:ae:2e:15:cf:33:f2:e0:2e:ec:24:a8:
         61:82:39:33:3e:df:dc:f1:36:c8:c3:a7:86:00:84:79:6a:dc:
         4c:ac:3f:ff:65:d0:48:ed:c3:da:d9:45:23:ba:b4:98:66:2b:
         a4:61:98:f7:41:f4:61:c7:b4:42:23:40:30:a4:f8:d5:f5:7c:
         9c:ed:c0:66:a9:25:fc:b9:4b:d4:da:6a:c7:bb:93:ab:bb:3b:
         82:be:c3:fc:96:03:66:8d:9e:b2:11:89:55:7c:8b:f4:b4:2f:
         31:b6:f1:9c:d3:84:1f:ce:41:80:29:cf:f4:73:3a:4e:57:0a:
         21:5b:5b:0d:03:64:65:e7:63:36:dd:1c:3e:27:f7:1f:f8:af:
         9a:99:76:22:2a:87:0e:c0:99:58:66:fc:e1:01:91:8c:a9:32:
         be:4b:e9:e5:9c:f5:55:11:e9:8b:30:37:29:d8:19:e7:67:94:
         25:14:19:2c:1b:0a:40:26:c7:46:b3:d1:0c:0f:20:33:dc:5e:
         89:95:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org