Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3132382e302f32342d3234203d3e20323730363030.roa
File:                     3138392e33362e3132382e302f32342d3234203d3e20323730363030.roa (raw, json)
Hash identifier:          oM4fEI2UaRJBkPVo0lSIHpTctWa9F1ONao6WhduWnzQ=
Subject key identifier:   0C:4D:33:73:FC:08:CD:60:4F:98:26:39:AF:95:2F:BD:13:CC:03:EB
Certificate issuer:       /CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
Certificate serial:       6AD971EF2733DC2DEED20436E8242BA9AD327823
Authority key identifier: 91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3132382e302f32342d3234203d3e20323730363030.roa
Signing time:             Fri 07 Jul 2023 12:29:49 +0000
ROA not before:           Fri 07 Jul 2023 12:24:49 +0000
ROA not after:            Fri 05 Jul 2024 12:29:49 +0000
asID:                     270600
IP address blocks:        189.36.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:71:ef:27:33:dc:2d:ee:d2:04:36:e8:24:2b:a9:ad:32:78:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BA894BC4C9FD65599785CF3EE4DECB1FF82238
        Validity
            Not Before: Jul  7 12:24:49 2023 GMT
            Not After : Jul  5 12:29:49 2024 GMT
        Subject: CN=0C4D3373FC08CD604F982639AF952FBD13CC03EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:86:cc:ea:cb:10:3a:67:0c:3b:84:f0:a4:
                    96:ae:71:14:3d:28:0a:9e:a8:97:bd:cc:0e:1c:6b:
                    bc:cf:6f:ba:0d:3d:3c:76:17:f5:33:e7:8f:74:67:
                    42:f7:27:d2:32:4b:34:63:85:81:e3:d4:0c:18:9a:
                    14:f6:2c:bb:e2:6e:9e:a0:6b:d7:71:ef:61:8e:c9:
                    6d:c1:3e:c8:73:1d:4f:d0:f7:aa:2e:88:50:4e:41:
                    a5:b6:e7:a3:10:a0:ba:78:42:8a:92:f4:8c:5d:17:
                    04:40:70:72:15:6d:4a:78:70:ff:90:08:80:da:b6:
                    3a:f4:28:55:29:cb:01:c8:fa:18:77:04:47:37:ae:
                    09:fa:e2:12:fe:3a:a4:50:88:b7:f6:07:97:5a:a6:
                    fc:18:76:52:f1:72:1f:a7:4c:5c:c9:5f:d4:2c:0a:
                    19:1c:39:86:bf:88:f4:49:67:4b:a1:1e:cd:82:75:
                    a9:54:c7:0d:f1:f1:0f:a4:35:0b:69:da:34:2c:7f:
                    d5:e9:dc:da:8d:61:57:07:ae:0e:71:08:7f:7a:7a:
                    36:03:72:d4:57:67:4a:59:ef:c1:f8:fe:fc:e7:e5:
                    d5:0c:e0:9a:fd:e9:27:52:01:0d:5e:9a:64:94:92:
                    8e:08:fb:f4:c1:c1:fc:7f:8e:77:51:2c:cb:67:57:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4D:33:73:FC:08:CD:60:4F:98:26:39:AF:95:2F:BD:13:CC:03:EB
            X509v3 Authority Key Identifier:
                keyid:91:BA:89:4B:C4:C9:FD:65:59:97:85:CF:3E:E4:DE:CB:1F:F8:22:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BA894BC4C9FD65599785CF3EE4DECB1FF82238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/3138392e33362e3132382e302f32342d3234203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:71:29:18:fa:1f:02:9b:56:c9:9e:ac:74:78:46:79:f3:
         f4:dd:19:37:c7:59:04:86:8a:ea:6a:cd:cf:3e:ab:84:86:02:
         39:85:0a:ad:59:90:74:fd:e6:5a:77:95:5c:9a:7b:39:b1:7c:
         f3:19:48:55:a2:21:bd:6a:de:b7:48:c1:8b:86:1c:f3:cf:12:
         9e:88:17:33:25:be:01:82:a0:51:4b:ad:5f:2b:20:6e:24:eb:
         82:1e:ee:6f:4c:8e:07:7b:a3:68:86:b2:7f:72:c9:8a:c4:7c:
         f2:b8:d5:4e:c0:17:5c:ad:de:84:96:37:6c:f6:c3:51:98:4d:
         8b:97:5f:87:b5:1b:f4:8d:da:70:57:a3:62:04:c0:c6:42:5f:
         4c:01:4b:99:2b:77:c9:b4:7e:73:db:fd:08:eb:b4:78:f5:c8:
         c1:3f:ce:23:60:3d:c0:06:bd:17:aa:05:5c:ce:e5:60:e9:1f:
         3a:00:d8:33:20:7d:00:3e:b6:cc:8a:f2:45:af:60:5f:cb:ce:
         e1:f3:a7:6d:d6:e2:8a:9e:3e:d7:3c:7b:e7:3d:f1:eb:89:c2:
         70:24:8c:0a:03:85:4b:eb:90:39:78:13:cb:34:16:47:bb:31:
         28:7e:c2:78:4d:42:f1:82:f5:a2:11:79:29:25:24:b6:a2:be:
         f6:47:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 13:20:22 2023 by rpki-client on console-fra.rpki-client.org