Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31342e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          OIIJ7QXz2t72ol8ZHtyQlQi/L+q1rKHbENvR80CAqqs=
Subject key identifier:   F3:06:1C:5F:23:49:68:49:15:A8:0B:BD:33:48:F4:15:FA:EE:3F:80
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       5A11AB2E152DA9DA667BAB9C1C432E3D266A510B
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        189.89.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:11:ab:2e:15:2d:a9:da:66:7b:ab:9c:1c:43:2e:3d:26:6a:51:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=F3061C5F2349684915A80BBD3348F415FAEE3F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:b7:fb:84:da:b8:89:a9:31:5a:c5:93:91:
                    89:48:43:a6:31:55:2e:ac:4b:dd:f5:60:77:c2:b6:
                    59:81:ee:46:d9:3b:74:15:b2:a5:d5:bb:61:65:c4:
                    68:4b:34:d2:5c:b1:3b:87:e1:72:f2:b4:66:20:b7:
                    69:40:d2:f2:e6:21:5e:12:b4:75:46:25:7f:c4:11:
                    2c:77:8f:f0:87:41:eb:fa:6f:f1:c6:2d:70:1e:39:
                    26:0b:0e:fb:a5:8d:20:10:52:cb:a1:24:ff:a9:bf:
                    55:48:95:5f:19:4e:e3:41:03:be:65:81:e1:d8:75:
                    b8:af:20:48:07:d3:a0:cc:b1:92:84:ea:5d:65:ed:
                    b6:3a:74:6b:e9:35:73:d8:54:c0:ba:0a:57:f2:7b:
                    70:b2:8c:c0:f5:77:1d:7b:fc:22:83:0d:5c:b5:64:
                    d9:ba:92:f2:69:e0:d9:f2:b0:1d:9a:db:eb:4b:23:
                    d8:99:3e:2f:79:73:ff:94:73:a3:d6:36:d5:2e:05:
                    2b:4b:f7:c6:03:86:d7:10:c7:50:61:97:29:29:8c:
                    66:e7:b5:9d:ca:35:69:66:bb:99:4b:55:ae:8b:07:
                    0a:e5:1e:f0:95:20:95:5c:b6:80:df:c1:eb:50:7f:
                    6f:b1:0a:8f:30:32:75:a4:c8:1d:72:e4:23:12:83:
                    12:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:06:1C:5F:23:49:68:49:15:A8:0B:BD:33:48:F4:15:FA:EE:3F:80
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:63:90:32:89:09:16:51:4a:74:84:aa:72:44:8a:0a:14:
         29:05:3e:c3:c8:29:27:70:db:65:c8:69:1f:3a:ce:92:25:4c:
         98:36:b9:4e:b4:62:98:c8:2e:23:d6:a4:44:4f:2f:54:0b:be:
         26:35:29:91:44:a4:15:6b:16:3b:ee:ec:36:ee:3d:29:3c:82:
         7d:c7:56:04:b5:47:2c:d0:e6:77:16:84:74:3f:19:4f:a3:25:
         e8:3e:e2:5f:d6:f3:66:99:b8:c4:d6:9b:83:70:16:12:c7:03:
         75:f0:21:62:8d:77:4f:2a:6e:a3:06:f0:1e:77:8d:be:6f:47:
         1a:e6:d1:a7:d4:7c:11:21:4a:96:dc:6d:0f:4c:da:90:9c:a8:
         c5:f3:44:3b:85:76:64:a7:9d:70:1a:4f:80:10:fd:ba:4b:4f:
         11:e4:ce:f0:52:00:37:6f:e2:4c:70:c3:e7:e8:bd:46:6e:f4:
         07:49:a2:f0:9e:d9:27:4b:8c:e2:3c:b9:91:4c:4b:41:35:2e:
         7d:3d:d6:5b:26:41:0b:af:4a:40:99:f8:0e:fa:48:62:29:ed:
         99:ae:56:24:65:8d:a0:f7:ac:23:e4:7c:02:4f:3c:59:1d:d3:
         f3:f7:96:d8:39:a7:bb:c8:48:d4:94:44:82:28:47:82:8e:c0:
         6a:8d:a9:1d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWhGrLhUtqdpme6ucHEMuPSZqUQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NTBaFw0yNTA0MTYxMTM5NTBaMDMxMTAvBgNV
BAMTKEYzMDYxQzVGMjM0OTY4NDkxNUE4MEJCRDMzNDhGNDE1RkFFRTNGODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY57f7hNq4iakxWsWTkYlIQ6Yx
VS6sS931YHfCtlmB7kbZO3QVsqXVu2FlxGhLNNJcsTuH4XLytGYgt2lA0vLmIV4S
tHVGJX/EESx3j/CHQev6b/HGLXAeOSYLDvuljSAQUsuhJP+pv1VIlV8ZTuNBA75l
geHYdbivIEgH06DMsZKE6l1l7bY6dGvpNXPYVMC6Clfye3CyjMD1dx17/CKDDVy1
ZNm6kvJp4NnysB2a2+tLI9iZPi95c/+Uc6PWNtUuBStL98YDhtcQx1BhlykpjGbn
tZ3KNWlmu5lLVa6LBwrlHvCVIJVctoDfwetQf2+xCo8wMnWkyB1y5CMSgxIHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8wYcXyNJaEkVqAu9M0j0FfruP4AwHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzODM5MmUzODM5MmUzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZDjANBgkqhkiG9w0BAQsFAAOCAQEASC5jkDKJCRZR
SnSEqnJEigoUKQU+w8gpJ3DbZchpHzrOkiVMmDa5TrRimMguI9akRE8vVAu+JjUp
kUSkFWsWO+7sNu49KTyCfcdWBLVHLNDmdxaEdD8ZT6Ml6D7iX9bzZpm4xNabg3AW
EscDdfAhYo13TypuowbwHneNvm9HGubRp9R8ESFKltxtD0zakJyoxfNEO4V2ZKed
cBpPgBD9uktPEeTO8FIAN2/iTHDD5+i9Rm70B0mi8J7ZJ0uM4jy5kUxLQTUufT3W
WyZBC69KQJn4DvpIYintma5WJGWNoPesI+R8Ak88WR3T8/eW2Dmnu8hI1JREgihH
go7Aao2pHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org