Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34342e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          We91aw353QRsixO0kdNMci4yPJF6MTXXth/tVrVE9Wo=
Subject key identifier:   2E:85:39:4B:59:E2:FE:78:F5:A9:A5:FA:89:14:25:26:3F:74:CA:D8
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       67B14B9CC62C1A6EAD74EC211D6EAAFEAE8D0D52
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:33 +0000
ROA not before:           Wed 17 Apr 2024 11:37:33 +0000
ROA not after:            Wed 16 Apr 2025 11:42:33 +0000
asID:                     28191
IP address blocks:        189.90.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b1:4b:9c:c6:2c:1a:6e:ad:74:ec:21:1d:6e:aa:fe:ae:8d:0d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:33 2024 GMT
            Not After : Apr 16 11:42:33 2025 GMT
        Subject: CN=2E85394B59E2FE78F5A9A5FA891425263F74CAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:7d:92:bf:c9:c3:50:a3:0c:6d:c5:f5:db:
                    87:22:39:d9:74:1f:4d:49:54:b2:67:69:a1:ec:e2:
                    9d:9c:97:ae:a1:43:57:d1:d1:1c:0f:3c:6d:61:69:
                    5d:0c:f1:a4:e4:da:d3:bf:c2:64:0b:1b:f7:d0:6c:
                    1d:79:5d:09:11:c6:a2:ee:dd:a3:21:e8:52:ba:0e:
                    15:3e:fc:83:91:1b:4b:9f:d2:61:d7:09:9b:88:32:
                    67:08:d3:67:19:7a:0b:68:ff:39:d0:72:bc:40:0e:
                    63:52:c3:65:24:09:97:4c:05:19:4e:8a:1e:82:6a:
                    9a:78:06:14:fc:45:8c:e5:b6:9a:cf:eb:36:11:57:
                    2d:52:b5:6e:7d:3f:29:70:b2:eb:f1:f2:04:e0:5f:
                    2d:ae:59:1c:77:22:db:3b:12:b7:c9:78:11:4e:69:
                    a9:1a:61:0d:ad:d5:32:76:36:76:34:fb:fa:92:d7:
                    aa:97:78:8e:42:e8:db:6f:33:41:4b:1d:a9:98:5b:
                    9c:75:99:b4:24:3c:39:27:21:d2:cf:d0:91:b8:62:
                    86:1d:d0:d7:27:bb:0f:ef:92:e1:d3:21:52:dd:6d:
                    c7:d9:d4:a3:9a:4c:19:76:e6:4e:d5:10:7b:ea:f5:
                    3f:d7:b4:4c:22:fe:09:c9:e7:21:57:9d:ce:ce:6c:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:85:39:4B:59:E2:FE:78:F5:A9:A5:FA:89:14:25:26:3F:74:CA:D8
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34342e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:e5:89:ad:6c:5f:46:ba:65:a7:2d:da:10:36:25:9d:57:
         d2:48:83:db:2e:18:7c:39:8e:cb:09:e1:1c:0c:92:53:ef:b8:
         c6:0b:57:49:49:90:c0:e2:3e:a1:d3:69:89:51:24:a9:ca:c6:
         bb:de:4a:a5:5b:64:cc:65:37:f7:a3:90:a8:6a:47:08:cc:31:
         76:ec:21:65:ac:e3:c7:fe:04:0e:06:22:f2:37:52:5a:a8:97:
         4d:1e:ee:d2:b5:24:19:9f:9b:b0:d7:a5:40:0b:0b:e3:84:b3:
         64:fe:ed:5b:c7:39:6b:6e:68:a5:61:0a:5c:5c:0d:2f:f5:8a:
         b7:1d:76:e4:6a:af:c9:c8:6c:b6:26:b7:da:12:1f:a3:91:ad:
         dc:55:3f:56:c7:a3:0a:b7:eb:8f:5e:65:86:4f:f2:56:48:21:
         63:a0:91:2b:e8:43:b6:5f:07:71:04:b5:92:11:75:c1:99:3d:
         1a:a9:b1:4e:87:37:de:64:b0:74:e7:20:a2:cc:b1:fd:41:00:
         05:72:b1:bc:bb:fd:46:62:e0:19:1d:9f:f3:af:3e:e2:6f:da:
         72:2f:ac:ff:52:92:89:4d:73:2d:ee:10:49:ff:2e:36:f0:1b:
         bd:35:c3:cd:d4:ba:31:9d:34:f8:bf:97:cb:6d:ca:37:a3:81:
         1a:7b:a2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org