Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34322e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34322e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          9TiAktTJY32zOxg+dQpapascuO4EEdxNsO8tAAix2rk=
Subject key identifier:   6E:E6:E8:2B:92:87:D5:AA:AD:58:64:6F:55:42:EC:E8:BD:11:15:FA
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       1C1FED798639EAB58305A4948E1FC61E72A2A13C
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34322e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:29 +0000
ROA not before:           Wed 17 Apr 2024 11:37:29 +0000
ROA not after:            Wed 16 Apr 2025 11:42:29 +0000
asID:                     28191
IP address blocks:        189.90.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1f:ed:79:86:39:ea:b5:83:05:a4:94:8e:1f:c6:1e:72:a2:a1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:29 2024 GMT
            Not After : Apr 16 11:42:29 2025 GMT
        Subject: CN=6EE6E82B9287D5AAAD58646F5542ECE8BD1115FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:60:9d:a2:2d:c8:b4:fb:2e:2c:b0:c9:3e:
                    d7:a6:76:f8:ef:ac:ee:1d:4a:fc:f3:fa:a0:ac:ce:
                    f9:5e:26:cb:93:a0:5f:0c:60:4b:c9:7d:06:77:6f:
                    13:c0:09:a6:83:24:ea:ef:6d:a2:a0:76:d1:3f:fc:
                    cc:e5:98:63:5d:1c:ce:d8:5a:93:5e:6b:ad:5e:be:
                    70:6f:84:f5:62:9d:94:f9:fe:0f:c2:60:2a:78:c2:
                    48:92:1e:58:7d:4a:7f:51:09:b3:87:d9:09:14:a5:
                    20:d2:9c:1a:7d:c2:cf:9e:84:cf:18:58:54:cb:30:
                    77:73:77:29:40:5a:4e:be:cf:6c:d9:65:0e:1a:d7:
                    13:22:c2:c8:1f:e8:98:2f:a5:db:0f:b9:42:0e:ab:
                    dc:48:d0:16:b8:fe:04:3a:91:2d:6b:8e:46:e6:b4:
                    1c:26:60:6f:ba:c2:b1:8f:23:86:40:69:56:70:10:
                    c4:0f:b8:a2:fd:64:e0:ec:5f:9d:2e:86:3b:38:a6:
                    11:d2:7f:e8:b9:aa:d1:4e:1c:1c:2a:e8:01:63:f2:
                    3d:b5:fb:cb:99:26:09:79:ec:fd:44:bb:c7:77:24:
                    5a:60:94:81:cc:bc:af:79:74:33:68:45:f7:77:c8:
                    9c:52:3a:57:40:57:ec:47:88:92:fe:7a:73:d6:89:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:E8:2B:92:87:D5:AA:AD:58:64:6F:55:42:EC:E8:BD:11:15:FA
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34322e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:31:d7:be:e3:8d:51:c8:ca:75:c4:a8:dc:51:d0:dd:12:
         de:e3:f6:22:55:8b:1d:86:bd:c1:c7:73:5d:1d:3b:41:3a:c6:
         fe:24:3d:35:5a:1a:9a:9e:e3:18:06:e1:fe:86:89:51:96:df:
         2c:01:fd:e0:e7:78:6d:c7:e1:73:87:1d:a1:88:7e:1f:44:50:
         97:32:15:b6:c9:14:a2:74:73:42:8a:57:4b:cd:39:91:d5:79:
         1e:7a:04:28:e4:31:e8:27:a4:13:4e:2f:cb:c0:5b:c2:08:7a:
         01:c4:8f:d2:8e:27:9a:d4:b2:f0:13:6d:d5:bc:37:18:f5:54:
         c9:c5:b8:c7:84:af:dd:bb:c3:63:c2:48:6f:a9:26:cf:b0:08:
         cd:f7:80:77:1d:13:b2:17:46:71:64:b4:90:5e:83:b4:fc:43:
         ad:ce:45:e3:69:4f:90:cb:ba:65:96:42:c7:f2:1f:dc:16:9f:
         02:15:70:d5:c3:2f:4d:c8:ec:26:3d:ab:0c:53:3b:48:41:0e:
         d1:5d:a1:12:41:04:9e:26:bc:2b:90:66:d8:13:8d:ac:4f:2c:
         54:d4:a9:3e:f7:3e:19:43:f5:64:7c:83:e9:23:3c:87:48:31:
         4b:b9:4e:d7:19:b6:9c:31:7a:c7:da:b7:df:c8:af:25:cc:5e:
         22:91:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org