Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34362e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34362e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          t74yXYR45h0n/GHflo60q/+ISRXvyBqKeZ7S0G4g8V0=
Subject key identifier:   06:F0:39:D1:09:86:75:C5:F0:B0:05:94:46:C6:83:E5:56:B2:78:80
Certificate issuer:       /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial:       5EF71EC354FA784EEA44F07205E96BD345F6557D
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34362e302f32342d3234203d3e203238313931.roa
Signing time:             Wed 17 Apr 2024 11:42:35 +0000
ROA not before:           Wed 17 Apr 2024 11:37:35 +0000
ROA not after:            Wed 16 Apr 2025 11:42:35 +0000
asID:                     28191
IP address blocks:        189.90.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:1e:c3:54:fa:78:4e:ea:44:f0:72:05:e9:6b:d3:45:f6:55:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
        Validity
            Not Before: Apr 17 11:37:35 2024 GMT
            Not After : Apr 16 11:42:35 2025 GMT
        Subject: CN=06F039D1098675C5F0B0059446C683E556B27880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:34:ec:28:a6:fe:6c:c7:c7:6f:8a:84:1d:89:
                    63:89:da:5b:0c:be:3f:03:95:4b:2a:52:92:d7:83:
                    88:fe:be:22:23:54:33:41:34:27:15:f2:38:e0:c1:
                    9d:33:b0:3b:d2:00:85:d3:7f:36:4b:b9:63:37:83:
                    01:aa:4a:58:e0:5e:88:b8:d4:e2:89:ca:e1:6a:cd:
                    e7:51:75:4b:45:56:20:0e:3f:15:5e:c0:3b:b0:aa:
                    d3:b6:fc:50:02:a9:28:28:a3:2a:a8:fd:8f:ac:12:
                    ac:c9:eb:24:c7:a5:a5:df:5b:23:e4:1d:79:5e:9f:
                    8e:f6:49:31:cb:93:59:3b:a9:54:0d:28:7a:fc:d5:
                    47:e8:82:29:0e:a6:97:6d:05:38:94:fd:ef:16:92:
                    a9:ff:e2:88:1b:43:9c:9f:a0:35:19:e7:f6:a8:43:
                    f2:e0:c7:11:49:b5:f7:56:66:35:ea:4b:3e:99:8f:
                    ec:89:f3:02:13:5e:ce:7c:f2:b7:cb:6e:60:93:9f:
                    ba:53:e6:7a:3e:56:72:22:c3:3b:03:99:98:ff:ab:
                    6e:a2:e2:d7:34:ae:bb:27:d1:57:0e:ac:90:da:89:
                    d3:37:91:fa:d1:e5:d4:c8:09:35:7a:c0:09:7e:93:
                    59:6b:0a:43:5b:74:bd:c0:8d:55:5f:07:47:8d:ae:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:39:D1:09:86:75:C5:F0:B0:05:94:46:C6:83:E5:56:B2:78:80
            X509v3 Authority Key Identifier:
                keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34362e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:0b:8d:1d:4f:6d:5a:a3:19:d3:ba:b1:23:da:d0:9a:68:
         21:4a:71:32:bb:ae:4e:ab:45:71:ed:e6:ca:c8:a0:0a:c3:6e:
         cc:5c:05:9e:dc:c5:96:69:a0:e8:06:be:74:eb:b3:23:f1:07:
         a2:0a:d3:5e:37:f4:d3:0c:71:6a:b3:18:98:2f:fb:a4:0d:9e:
         b8:b8:84:f0:3f:7c:4c:cd:6a:70:68:2c:b0:04:40:0d:c8:36:
         82:24:28:74:b0:3d:d5:a2:a9:60:f5:3c:44:2f:7e:0b:94:fe:
         b0:45:93:30:d9:ed:aa:2f:b4:f2:34:19:7b:79:ae:78:be:e6:
         67:bb:b2:7e:01:1b:62:23:bc:6d:09:a8:14:bd:6c:4d:53:f2:
         22:98:d9:39:8b:e3:61:43:63:3f:39:92:c5:b0:90:45:f7:a7:
         6a:77:bd:b1:ed:9e:e9:d6:bd:2f:05:df:bd:de:02:37:7a:49:
         bd:57:ff:fa:4d:39:9a:57:99:1c:28:21:a7:c7:5d:b6:01:9c:
         7f:96:98:76:d6:d1:b6:0b:8c:e2:15:b8:0f:cb:7f:7f:f1:8f:
         d4:c8:ee:a0:f5:b6:b9:4f:0d:5e:b6:fd:27:79:22:a1:a6:de:
         a9:7c:28:71:f3:3b:db:78:92:f5:08:51:99:66:4c:37:78:69:
         73:90:99:7f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXvcew1T6eE7qRPByBelr00X2VX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MzVaFw0yNTA0MTYxMTQyMzVaMDMxMTAvBgNV
BAMTKDA2RjAzOUQxMDk4Njc1QzVGMEIwMDU5NDQ2QzY4M0U1NTZCMjc4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmNOwopv5sx8dvioQdiWOJ2lsM
vj8DlUsqUpLXg4j+viIjVDNBNCcV8jjgwZ0zsDvSAIXTfzZLuWM3gwGqSljgXoi4
1OKJyuFqzedRdUtFViAOPxVewDuwqtO2/FACqSgooyqo/Y+sEqzJ6yTHpaXfWyPk
HXlen472STHLk1k7qVQNKHr81UfogikOppdtBTiU/e8Wkqn/4ogbQ5yfoDUZ5/ao
Q/LgxxFJtfdWZjXqSz6Zj+yJ8wITXs588rfLbmCTn7pT5no+VnIiwzsDmZj/q26i
4tc0rrsn0VcOrJDaidM3kfrR5dTICTV6wAl+k1lrCkNbdL3AjVVfB0eNrijzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUBvA50QmGdcXwsAWURsaD5VayeIAwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM5MmUzOTMwMmUzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1aLjANBgkqhkiG9w0BAQsFAAOCAQEArjcLjR1PbVqj
GdO6sSPa0JpoIUpxMruuTqtFce3mysigCsNuzFwFntzFlmmg6Aa+dOuzI/EHogrT
Xjf00wxxarMYmC/7pA2euLiE8D98TM1qcGgssARADcg2giQodLA91aKpYPU8RC9+
C5T+sEWTMNntqi+08jQZe3mueL7mZ7uyfgEbYiO8bQmoFL1sTVPyIpjZOYvjYUNj
PzmSxbCQRfenane9se2e6da9LwXfvd4CN3pJvVf/+k05mleZHCghp8ddtgGcf5aY
dtbRtguM4hW4D8t/f/GP1MjuoPW2uU8NXrb9J3kioabeqXwocfM723iS9QhRmWZM
N3hpc5CZfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org