Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34352e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34352e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          RHzqp7s8ozbd8atyuIJBZm3LFez5sgVUglCDVVIK5xA=
Subject key identifier:   32:8D:76:0F:C6:22:24:0D:A7:16:07:D2:A2:D8:44:70:E1:95:69:1C
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       33948F97C21F4D97F18F1072896926B86B6B5B93
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34352e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:30 +0000
ROA not before:           Wed 17 Apr 2024 11:37:30 +0000
ROA not after:            Wed 16 Apr 2025 11:42:30 +0000
asID:                     28191
IP address blocks:        189.90.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:94:8f:97:c2:1f:4d:97:f1:8f:10:72:89:69:26:b8:6b:6b:5b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:30 2024 GMT
            Not After : Apr 16 11:42:30 2025 GMT
        Subject: CN=328D760FC622240DA71607D2A2D84470E195691C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:59:28:db:85:0f:7a:8e:e3:b0:4c:81:a5:
                    aa:c2:78:b2:2d:aa:28:eb:1f:03:39:c6:8f:09:79:
                    26:1b:0a:ea:d1:ad:9c:60:98:82:8a:87:21:58:18:
                    45:61:6b:ce:e7:49:48:a4:1a:d4:c9:ab:d5:1d:eb:
                    67:83:da:7a:b4:54:58:b3:29:ad:45:6f:94:1f:3e:
                    fe:f6:14:ba:84:c4:86:27:14:2c:3d:98:cb:b3:d9:
                    2a:8f:eb:05:96:df:8d:52:80:60:48:53:65:63:06:
                    c0:99:23:87:ed:5f:7f:7e:42:09:75:73:a0:0a:e7:
                    53:fa:2b:d0:b0:4d:ae:5a:5c:2e:5a:f1:5a:58:e8:
                    97:3b:1b:5c:d1:72:40:b4:d4:82:b0:a8:34:56:93:
                    f9:43:19:13:cb:ac:89:d7:06:51:52:46:9b:34:09:
                    7a:e2:f7:5c:7b:85:34:3d:ed:9f:3b:60:f4:6f:ee:
                    77:5d:4f:6c:39:c6:fb:85:fe:15:20:82:f6:74:3b:
                    e8:67:e3:3c:a0:8f:c8:2b:8a:22:28:38:75:b3:40:
                    a9:8b:66:9d:4b:99:e7:2d:79:c1:f6:7f:e4:fc:c7:
                    fe:0b:d3:6c:8a:e0:39:28:67:c1:17:c8:e2:8d:08:
                    a4:28:ef:f9:2d:5b:96:9d:a7:1b:d2:c3:9c:b4:5e:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:76:0F:C6:22:24:0D:A7:16:07:D2:A2:D8:44:70:E1:95:69:1C
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34352e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:e8:cb:6f:31:81:72:42:ec:be:b7:72:92:a8:75:41:ec:
         1f:87:60:6b:03:19:f3:a6:17:b5:91:51:69:01:64:e3:02:32:
         99:24:57:f1:62:c6:9d:56:cf:54:89:bc:d0:6e:c9:7d:fb:2f:
         29:51:8d:f5:d1:5e:6d:34:55:5d:43:2d:12:63:a0:dd:c1:26:
         0f:de:fb:e6:5b:9b:76:f5:ca:24:d1:d8:3b:ba:16:6c:f8:8f:
         dd:04:84:49:04:2d:90:b8:da:aa:10:ec:6e:e1:fa:d4:19:95:
         12:3e:ef:0e:b5:e5:09:74:de:43:7a:81:21:2f:59:44:b9:be:
         5f:6f:13:ee:cd:50:e9:8b:e6:2a:6b:c8:46:ad:68:f6:66:b3:
         75:f8:9e:e7:66:9b:a1:7a:c5:2b:c7:f9:fc:ba:28:57:ed:a4:
         0c:9a:a6:2e:1b:80:e5:b1:9a:71:d3:98:25:17:df:8d:7d:74:
         27:38:7c:aa:6e:7a:ed:0a:4b:20:15:ca:14:6f:83:1f:31:86:
         d4:ae:8b:a2:b1:4c:af:03:c7:dc:8a:ee:20:24:c5:37:c7:06:
         03:60:3e:7d:37:d3:0e:38:94:93:34:cd:11:25:d2:be:4f:04:
         70:af:bf:55:94:70:55:c3:20:38:aa:10:94:35:71:7e:22:51:
         38:0a:24:01
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUM5SPl8IfTZfxjxByiWkmuGtrW5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MzBaFw0yNTA0MTYxMTQyMzBaMDMxMTAvBgNV
BAMTKDMyOEQ3NjBGQzYyMjI0MERBNzE2MDdEMkEyRDg0NDcwRTE5NTY5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi9lko24UPeo7jsEyBparCeLIt
qijrHwM5xo8JeSYbCurRrZxgmIKKhyFYGEVha87nSUikGtTJq9Ud62eD2nq0VFiz
Ka1Fb5QfPv72FLqExIYnFCw9mMuz2SqP6wWW341SgGBIU2VjBsCZI4ftX39+Qgl1
c6AK51P6K9CwTa5aXC5a8VpY6Jc7G1zRckC01IKwqDRWk/lDGRPLrInXBlFSRps0
CXri91x7hTQ97Z87YPRv7nddT2w5xvuF/hUggvZ0O+hn4zygj8griiIoOHWzQKmL
Zp1LmectecH2f+T8x/4L02yK4DkoZ8EXyOKNCKQo7/ktW5adpxvSw5y0XhQRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMo12D8YiJA2nFgfSothEcOGVaRwwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM5MmUzOTMwMmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1aLTANBgkqhkiG9w0BAQsFAAOCAQEABqboy28xgXJC
7L63cpKodUHsH4dgawMZ86YXtZFRaQFk4wIymSRX8WLGnVbPVIm80G7JffsvKVGN
9dFebTRVXUMtEmOg3cEmD9775lubdvXKJNHYO7oWbPiP3QSESQQtkLjaqhDsbuH6
1BmVEj7vDrXlCXTeQ3qBIS9ZRLm+X28T7s1Q6YvmKmvIRq1o9mazdfie52aboXrF
K8f5/LooV+2kDJqmLhuA5bGacdOYJRffjX10Jzh8qm567QpLIBXKFG+DHzGG1K6L
orFMrwPH3IruICTFN8cGA2A+fTfTDjiUkzTNESXSvk8EcK+/VZRwVcMgOKoQlDVx
fiJROAokAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org