Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31352e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31352e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          mj062CrH48DbXazEElO9ZVxnt5iiW1Y15E8BwqHk7tc=
Subject key identifier:   A6:65:7C:45:A5:A9:D6:2C:A2:8E:C1:5E:C9:93:F4:05:99:03:B7:92
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       1B4AD97B3DB5C465CEE0E842533621831CC1AD63
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31352e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:48 +0000
ROA not before:           Wed 17 Apr 2024 11:34:48 +0000
ROA not after:            Wed 16 Apr 2025 11:39:48 +0000
asID:                     28182
IP address blocks:        189.89.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4a:d9:7b:3d:b5:c4:65:ce:e0:e8:42:53:36:21:83:1c:c1:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:48 2024 GMT
            Not After : Apr 16 11:39:48 2025 GMT
        Subject: CN=A6657C45A5A9D62CA28EC15EC993F4059903B792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:d6:e4:7d:c0:26:8d:d3:1b:38:0e:d9:55:
                    b9:31:78:81:00:04:8d:ea:51:68:7f:a6:8a:cc:af:
                    68:9f:d3:24:a3:33:9e:82:b2:86:35:36:da:15:49:
                    08:db:fb:04:d0:e2:e0:68:51:fd:53:b5:ec:7a:63:
                    9d:5a:54:33:fa:e1:4d:d8:ee:ca:a3:c4:57:ea:e1:
                    87:50:d6:14:fc:b4:4f:88:dc:f3:5d:eb:f9:91:c4:
                    5d:d3:5f:33:15:78:90:83:c5:ae:72:b9:63:33:97:
                    7c:04:e8:0a:b6:08:b8:41:08:8f:31:19:22:3f:35:
                    c0:25:73:9d:81:19:91:12:58:6b:b2:21:33:48:c6:
                    ea:a4:24:05:e1:ab:f3:c4:11:3c:0b:e3:69:9e:3b:
                    69:05:e1:b6:45:18:ef:b4:4b:bd:ce:90:24:23:73:
                    0e:b9:06:0e:62:b1:45:e1:7b:2b:35:f0:32:af:bd:
                    13:68:34:a4:9a:a5:0c:ac:49:c0:90:27:d3:ea:e6:
                    6e:cd:92:2f:72:f8:21:27:72:e1:cc:17:0e:a9:d7:
                    f7:8c:b6:53:76:b3:dd:42:37:c6:78:27:43:03:ff:
                    fc:1b:19:26:b6:24:8a:ed:08:64:8b:38:ed:19:08:
                    6f:94:46:f5:af:ef:7b:bd:10:ec:28:85:00:1f:5c:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:65:7C:45:A5:A9:D6:2C:A2:8E:C1:5E:C9:93:F4:05:99:03:B7:92
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31352e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:36:b3:41:20:c1:5e:3f:a1:35:0d:de:6d:5d:0b:28:da:
         e5:7d:81:ef:80:a9:28:b6:18:c1:fc:2f:67:8b:d6:ec:cb:fd:
         c7:00:6e:c8:00:20:68:ff:d2:9b:97:e4:be:cc:b1:a5:99:68:
         f0:bc:01:22:83:d5:86:37:d0:20:66:95:2c:36:7e:c1:c0:a7:
         ec:89:67:bd:36:e6:d8:f0:28:d5:45:67:2a:0a:b8:6c:40:13:
         d5:1b:33:c3:00:6a:2f:4c:ee:09:c1:24:6b:83:36:bc:11:60:
         be:11:4e:b9:8b:6c:34:99:12:a4:7b:04:f0:e6:b3:87:65:b7:
         c6:75:50:17:dd:aa:55:49:b0:76:56:90:76:0d:6f:40:21:f2:
         34:10:31:03:a5:3b:10:6e:9a:18:2f:a0:14:00:01:3a:64:fe:
         d2:6f:c1:8e:68:89:5c:68:be:6d:83:1d:e9:8c:0c:49:11:bf:
         a1:cf:f6:c5:9d:1c:d2:51:bf:fc:c5:87:4c:3a:d4:bc:27:d7:
         d0:e7:e7:94:b7:71:e0:99:58:83:20:d9:51:a9:17:74:34:29:
         14:e5:d6:75:de:2f:4f:ea:7e:bf:9a:4a:6d:32:3d:74:b9:41:
         5b:e7:ed:7e:d3:2a:02:0b:dc:e7:64:c1:88:dc:71:cd:cc:b0:
         96:2d:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org