Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31332e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31332e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          s7+F9JAo55YPyoLgF5DyT/LXfigyuUNOut6pJ+GOdNo=
Subject key identifier:   0A:F0:0E:32:57:D4:66:E9:4A:74:B0:40:CC:0B:42:27:98:67:86:0C
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       7AE88D62B8C3DD0A1F2ACED42D841CA11A784B89
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31332e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:51 +0000
ROA not before:           Wed 17 Apr 2024 11:34:51 +0000
ROA not after:            Wed 16 Apr 2025 11:39:51 +0000
asID:                     28182
IP address blocks:        189.89.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e8:8d:62:b8:c3:dd:0a:1f:2a:ce:d4:2d:84:1c:a1:1a:78:4b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:51 2024 GMT
            Not After : Apr 16 11:39:51 2025 GMT
        Subject: CN=0AF00E3257D466E94A74B040CC0B42279867860C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:19:70:44:ff:d6:e7:73:d3:ff:3e:cd:b2:
                    ea:70:df:0b:f9:93:a4:1b:1f:1f:e1:f9:fa:18:28:
                    ee:56:46:d7:3e:3a:07:42:df:e6:6e:c9:c8:c5:8f:
                    f0:96:bc:65:91:62:fc:32:50:2f:dd:a0:6e:b9:34:
                    47:39:a0:3d:44:94:cf:e2:d9:0f:29:a9:f6:83:c7:
                    0b:d3:3b:8e:85:86:09:36:7f:23:08:d4:cf:b2:e8:
                    82:57:50:1b:c6:2a:c9:d8:50:12:4f:ed:5a:d9:a5:
                    58:52:aa:ae:e7:65:38:af:47:6a:a2:a6:37:83:20:
                    97:ca:b6:c6:9f:a7:fb:6f:8e:52:0c:62:d5:7a:b4:
                    aa:c4:05:94:b8:c8:62:ed:60:d3:5f:3c:23:ec:fe:
                    2e:e6:68:76:d1:c3:c9:38:01:7d:2d:59:1c:c2:0e:
                    de:b8:c5:06:82:d7:18:32:d8:de:d1:ad:ad:43:0e:
                    5d:9d:6d:ff:d6:db:87:01:78:9e:47:88:b1:e3:48:
                    20:64:c2:f6:89:e3:3a:70:ff:24:24:11:c7:8e:bc:
                    f9:74:3a:03:7d:af:ef:12:6b:31:3f:b6:0b:4b:75:
                    cd:b7:f9:32:bb:be:96:bd:16:e1:6a:aa:92:33:ff:
                    5f:ec:4c:65:89:66:f1:05:a3:4f:8b:28:15:7b:58:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:0E:32:57:D4:66:E9:4A:74:B0:40:CC:0B:42:27:98:67:86:0C
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31332e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:3e:d1:ec:7e:d0:18:1f:fe:a6:46:7a:d9:40:6c:b8:1b:
         b8:3f:b6:82:55:85:34:e8:7c:bc:f5:fd:63:47:2e:a6:a1:c3:
         d2:53:5e:e1:db:0e:10:46:c3:3a:84:49:31:91:aa:db:84:cf:
         fa:05:5c:6f:c9:d6:3c:7b:47:34:43:c6:a6:d8:85:78:0e:ce:
         57:ae:ed:a3:29:01:e6:5f:80:7f:fb:de:e6:1a:c6:e9:7b:56:
         a7:7c:8d:4c:ff:00:9c:86:bb:3d:02:6a:1c:41:4f:35:f0:69:
         ef:bf:85:95:c5:80:8c:70:3c:91:d6:9b:82:c4:de:eb:a3:3b:
         40:a8:e7:c8:f3:71:7d:b0:11:21:b8:d0:fc:e0:48:86:b3:18:
         00:34:04:2f:70:04:f4:77:4f:ac:e3:65:40:d6:8f:5c:b8:28:
         cd:65:8d:8c:c2:55:41:b2:7c:02:f2:25:fd:9d:00:82:07:7b:
         99:45:ff:39:d1:b7:a3:4a:c3:2e:79:21:12:b1:d5:58:82:95:
         26:cd:a3:7d:15:5c:b0:82:90:09:7a:48:27:e4:28:e5:65:53:
         00:7e:12:b7:55:5d:f5:43:94:63:0b:1d:a8:b9:75:36:24:2b:
         8d:83:16:16:0f:2c:bd:86:ec:19:30:57:a2:eb:ec:ff:2b:e1:
         50:49:17:39
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeuiNYrjD3QofKs7ULYQcoRp4S4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NTFaFw0yNTA0MTYxMTM5NTFaMDMxMTAvBgNV
BAMTKDBBRjAwRTMyNTdENDY2RTk0QTc0QjA0MENDMEI0MjI3OTg2Nzg2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48BlwRP/W53PT/z7Nsupw3wv5
k6QbHx/h+foYKO5WRtc+OgdC3+ZuycjFj/CWvGWRYvwyUC/doG65NEc5oD1ElM/i
2Q8pqfaDxwvTO46Fhgk2fyMI1M+y6IJXUBvGKsnYUBJP7VrZpVhSqq7nZTivR2qi
pjeDIJfKtsafp/tvjlIMYtV6tKrEBZS4yGLtYNNfPCPs/i7maHbRw8k4AX0tWRzC
Dt64xQaC1xgy2N7Rra1DDl2dbf/W24cBeJ5HiLHjSCBkwvaJ4zpw/yQkEceOvPl0
OgN9r+8SazE/tgtLdc23+TK7vpa9FuFqqpIz/1/sTGWJZvEFo0+LKBV7WDFzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCvAOMlfUZulKdLBAzAtCJ5hnhgwwHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzODM5MmUzODM5MmUzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZDTANBgkqhkiG9w0BAQsFAAOCAQEAbFs+0ex+0Bgf
/qZGetlAbLgbuD+2glWFNOh8vPX9Y0cupqHD0lNe4dsOEEbDOoRJMZGq24TP+gVc
b8nWPHtHNEPGptiFeA7OV67toykB5l+Af/ve5hrG6XtWp3yNTP8AnIa7PQJqHEFP
NfBp77+FlcWAjHA8kdabgsTe66M7QKjnyPNxfbARIbjQ/OBIhrMYADQEL3AE9HdP
rONlQNaPXLgozWWNjMJVQbJ8AvIl/Z0Aggd7mUX/OdG3o0rDLnkhErHVWIKVJs2j
fRVcsIKQCXpIJ+Qo5WVTAH4St1Vd9UOUYwsdqLl1NiQrjYMWFg8svYbsGTBXouvs
/yvhUEkXOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org