Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          N61rg5kHHqoF4y8QHFSUCS4yOxCAiZdIGJEKal69eDI=
Subject key identifier:   B7:EF:6B:AB:73:5E:09:F9:CC:DC:50:99:51:B9:E4:29:E9:D6:B0:97
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       6372A1C2740038028084EDC35FBB496340220A3A
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        189.89.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:72:a1:c2:74:00:38:02:80:84:ed:c3:5f:bb:49:63:40:22:0a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=B7EF6BAB735E09F9CCDC509951B9E429E9D6B097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:e4:ef:30:ed:22:75:b0:9d:96:ca:ae:d7:
                    78:18:49:b9:bc:c4:b5:65:ea:37:74:03:87:64:92:
                    55:e4:0f:04:3d:f6:2a:2f:83:65:ed:2c:21:8a:c0:
                    08:b1:93:30:61:d3:e0:3a:d9:d2:0c:d1:58:eb:a0:
                    dd:05:4e:19:7b:db:02:8e:35:76:3f:c1:2b:cf:99:
                    a5:b1:63:6f:4d:52:1c:8f:8a:b4:75:76:41:a4:c1:
                    54:82:87:c4:31:3c:95:97:a3:2b:8d:e2:cd:a1:3c:
                    4f:3f:8c:61:4c:e5:6f:32:a3:6e:c9:7e:25:1a:bd:
                    3f:e9:ab:e9:50:f3:45:3e:f9:0c:0b:cb:c4:42:f7:
                    ec:f4:ce:16:81:9e:b4:ec:eb:10:15:4c:fc:d3:94:
                    d8:65:5d:9e:a9:37:82:c3:1e:b7:f1:87:bd:e9:41:
                    70:47:f4:52:1a:a7:34:b1:da:db:7f:4b:5a:b4:20:
                    15:60:6e:51:96:12:86:61:c3:a9:4f:da:77:00:f5:
                    98:fb:11:ad:1d:b5:1e:9c:17:8f:95:86:fd:20:bd:
                    5e:85:3d:5c:13:93:7b:d4:93:fb:d5:ce:4b:e1:41:
                    b9:7b:79:69:df:02:d4:a0:95:8b:1d:dd:64:b8:e3:
                    70:19:f8:0e:4f:e9:48:32:12:eb:10:6d:94:3d:b7:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:6B:AB:73:5E:09:F9:CC:DC:50:99:51:B9:E4:29:E9:D6:B0:97
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:f6:91:db:d2:14:c1:cf:dc:aa:84:50:56:6a:ef:d1:89:
         dd:ea:73:71:ae:c5:b6:06:a7:49:8b:2f:d5:a5:cb:f0:ed:1a:
         17:ee:bf:fe:28:94:58:b8:63:11:47:61:ab:36:f5:43:a4:63:
         9b:97:91:da:88:81:4b:2e:0a:8c:e9:49:36:ab:cb:ce:6d:b9:
         ce:5a:3b:48:65:0b:1d:97:24:88:f1:72:10:8f:1e:c9:92:83:
         b9:d1:26:87:4f:cc:02:1f:96:82:4b:51:f0:71:1e:9b:40:65:
         8f:af:ed:46:06:a9:70:af:0e:f2:98:6c:1b:ed:fb:c2:2c:e3:
         ed:fd:ec:f4:d2:8e:ab:6b:25:51:3b:18:59:60:32:b7:41:0e:
         e5:e4:a3:16:d6:fc:1c:65:6e:07:79:29:a1:ea:88:4e:09:17:
         0a:97:e3:2c:64:46:5d:d6:fc:fc:a4:ad:ec:dc:92:2c:8b:9b:
         42:3a:79:51:01:14:98:e9:40:2a:90:46:e3:78:b5:26:c1:a1:
         97:e9:52:65:81:6a:9b:dd:35:db:a6:df:f7:dd:16:14:64:7c:
         0c:34:a2:e2:f1:2b:e3:51:28:cb:3a:af:d0:f9:3e:0b:2e:c3:
         4d:e0:3f:7f:1a:d7:59:8e:9a:d0:78:c1:b2:8f:af:da:cf:79:
         03:f1:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org