Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e34342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          rXgZ/87cvTTHgBBtnvb5olbXzKoU+zdtb5gO1Ji8qaU=
Subject key identifier:   1A:66:6C:30:28:0D:89:51:AE:84:52:D0:2C:55:85:1F:7C:A1:D7:85
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       5440E4C0CE1C5C3139B0CDFAAFED18312CDA3C84
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32332d3233203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:34 +0000
ROA not before:           Wed 17 Apr 2024 11:37:34 +0000
ROA not after:            Wed 16 Apr 2025 11:42:34 +0000
asID:                     28191
IP address blocks:        189.90.44.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:40:e4:c0:ce:1c:5c:31:39:b0:cd:fa:af:ed:18:31:2c:da:3c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:34 2024 GMT
            Not After : Apr 16 11:42:34 2025 GMT
        Subject: CN=1A666C30280D8951AE8452D02C55851F7CA1D785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:7c:72:8d:fe:12:35:93:43:66:92:85:43:
                    60:6c:a1:c7:d7:83:17:e7:98:77:bd:4e:85:e5:e3:
                    3d:1a:07:77:78:a6:16:ec:b4:b9:66:9e:ce:4e:a0:
                    23:69:67:f1:3d:a6:90:7b:fa:69:84:da:00:24:51:
                    a9:68:cb:62:aa:90:68:8f:19:79:c5:93:e8:36:7c:
                    21:e7:df:ba:d7:a4:24:fa:44:44:c9:88:95:43:0b:
                    c6:1e:fe:09:7f:d0:0e:3a:d2:b2:06:c9:19:1e:80:
                    c2:9f:ae:bf:cb:51:6a:65:0c:00:72:bf:75:9f:47:
                    a3:69:28:03:f3:10:11:09:a2:1f:d9:2c:db:73:1c:
                    2b:b7:6a:86:93:c1:35:3f:e5:03:a8:b6:3a:73:6a:
                    4f:41:c2:95:eb:e7:06:6a:6b:04:1b:b5:4e:6e:37:
                    e6:18:6b:b8:a3:4a:e2:8c:c6:c2:df:7b:0a:6d:f1:
                    5e:2f:2f:5f:be:3a:98:cf:5b:3c:8f:70:8b:f3:55:
                    9e:32:61:b1:46:8d:0a:37:cc:d3:f1:ad:e8:93:24:
                    a3:e8:d1:bd:c7:ec:66:05:54:9d:57:ff:5b:21:b9:
                    d4:7d:02:6f:66:2d:30:4f:c8:ea:8b:5a:d2:c6:6d:
                    5b:0f:af:15:7c:96:f5:70:b3:b1:e7:8e:be:8f:79:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:66:6C:30:28:0D:89:51:AE:84:52:D0:2C:55:85:1F:7C:A1:D7:85
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:8c:0c:b8:1b:20:ac:e1:f3:a0:fb:af:86:90:1f:e8:f4:
         ba:88:3b:5f:7a:af:1a:30:11:5f:d3:97:38:b7:95:0a:59:93:
         cb:99:e3:6c:a5:a1:a3:99:63:8c:a1:6a:52:77:ee:2a:6f:00:
         7c:d7:71:e1:19:1d:72:e1:24:dc:c9:e3:c9:26:0a:be:ad:2e:
         4e:dc:47:9d:52:7c:99:c4:e0:be:0f:a3:e7:f2:26:23:a1:13:
         22:d3:10:e0:6b:6c:55:fc:0d:ba:4c:e2:cb:d9:bf:a4:f5:14:
         4e:7c:9e:e4:ea:87:8e:09:93:57:a3:cb:32:ab:66:04:39:13:
         15:39:d6:64:0c:ef:81:8c:2f:ca:e3:4a:77:4a:59:9e:98:b0:
         f6:46:7d:52:db:00:68:05:10:85:16:b2:5d:8b:cf:c3:44:5d:
         45:a3:32:e1:91:43:61:c9:f2:99:81:54:c7:9e:55:82:61:5d:
         6c:c0:44:d6:9e:17:ea:2f:14:cf:a6:bc:de:ba:da:02:63:7a:
         7b:ee:1c:43:cb:a3:2f:c4:83:42:03:d0:e6:87:a5:47:5f:73:
         82:3e:10:bd:c6:52:23:ad:7a:99:ff:33:9e:db:0b:ab:4e:2f:
         d0:7e:20:ae:46:7f:3a:67:94:ff:46:75:ab:34:4d:93:a7:0c:
         2d:ab:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org