Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e312e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e312e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          kGRByHC0krHf8p8C94howpNz3AKhJNg0O6or0vOzz04=
Subject key identifier:   1E:9E:6F:65:CB:C9:3D:6A:0C:C9:17:8E:F6:23:3E:E4:AD:A0:D9:20
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       2186EF41B3677F572B7A4CACE0BB30E6AEAFAD05
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e312e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:52 +0000
ROA not before:           Wed 17 Apr 2024 11:34:52 +0000
ROA not after:            Wed 16 Apr 2025 11:39:52 +0000
asID:                     28182
IP address blocks:        189.89.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:86:ef:41:b3:67:7f:57:2b:7a:4c:ac:e0:bb:30:e6:ae:af:ad:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:52 2024 GMT
            Not After : Apr 16 11:39:52 2025 GMT
        Subject: CN=1E9E6F65CBC93D6A0CC9178EF6233EE4ADA0D920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:5d:f9:c3:d4:14:41:eb:31:d0:19:8f:df:
                    7e:cf:c3:eb:e8:b9:df:e0:c7:31:d7:3d:c7:0a:0f:
                    e4:b9:43:b2:16:09:a4:c9:e8:71:ea:1c:a4:67:fc:
                    1b:6c:b6:79:05:77:5c:80:ec:cd:d4:f2:d3:23:ae:
                    1f:c5:0b:6c:12:ed:56:ad:d6:ed:4c:66:7f:df:d5:
                    99:2d:54:01:df:db:44:d1:97:70:2c:6f:b9:ae:35:
                    88:11:5f:8d:50:10:d3:87:79:03:45:ea:c0:52:91:
                    e2:d6:0c:c8:e9:ec:a2:8c:64:46:17:c6:e3:44:4e:
                    32:9f:44:0b:3d:3b:66:c4:a3:29:94:e9:05:3c:44:
                    fa:51:e7:cd:95:55:2d:7b:9d:7a:7b:a4:74:51:6d:
                    36:17:12:b5:ce:ad:68:81:21:b8:0c:31:8f:b7:33:
                    17:b8:5e:29:73:f7:b8:88:54:01:2e:f6:db:0f:45:
                    30:db:d6:6f:91:6a:0e:e6:ee:c1:10:43:94:c4:a0:
                    fb:34:86:d2:23:77:6a:c0:a7:42:20:9c:b8:32:2f:
                    c3:78:52:3e:d8:e8:27:74:71:ba:98:f4:b8:d9:b1:
                    5f:66:cb:3f:fa:92:ca:1d:b8:bd:01:ee:8d:db:9b:
                    3c:9b:67:24:cb:82:61:cf:0b:ce:d7:e3:80:79:e3:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9E:6F:65:CB:C9:3D:6A:0C:C9:17:8E:F6:23:3E:E4:AD:A0:D9:20
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e312e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:32:af:78:03:6a:e8:f1:d8:ed:7b:6d:4e:59:64:63:5f:
         77:14:9f:f4:30:07:e3:04:ed:4f:df:3b:08:d7:39:25:cf:a4:
         2e:38:f5:fe:fb:d3:15:dc:4a:37:37:8b:35:11:1f:d2:e1:10:
         af:56:09:0e:7e:c1:e5:4d:ab:9a:68:2d:56:4a:1e:d1:d0:23:
         d6:bc:42:d4:d5:29:c1:84:72:3a:76:53:1f:70:53:33:67:d0:
         8f:af:eb:fe:e7:93:dd:a8:19:c3:26:45:7f:9a:4d:e5:11:cf:
         bb:b5:71:4c:bf:d1:3a:39:9a:04:a8:88:68:32:fc:e8:7c:e1:
         5d:fa:2d:b7:30:1a:dc:be:71:bf:36:42:d9:c9:99:2c:d7:7a:
         44:0b:f7:79:f1:42:14:d3:f3:9f:e9:ad:70:e9:d0:96:ef:7c:
         12:ec:4b:26:0b:e5:7e:04:e8:f8:44:1f:8b:57:4b:69:47:1d:
         78:75:86:76:2b:71:03:3a:1e:72:38:fe:ce:1d:71:a4:f0:12:
         fb:f9:c5:be:e8:9f:45:2a:e6:00:d0:bf:ba:fe:5d:3b:3f:cd:
         4c:b3:b2:c9:8c:c2:2c:7f:86:2a:78:7d:8c:e4:8d:b1:ad:2d:
         1f:f8:73:93:92:d6:fa:0d:30:c2:98:dd:86:30:dc:b8:0a:2c:
         ab:1b:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org