Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e322e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          hbNpMNAyT1p8AaVWj0p+vjQIx6IHgqB0WPYQ/0QbJC4=
Subject key identifier:   93:AE:E9:00:6D:77:9F:51:AC:B4:E3:E8:13:43:52:8A:96:F0:13:83
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       1D05AEB7582AD035E9E1EBAD0CEB1B8ED2D9EE9E
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e322e302f32332d3233203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        189.89.2.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:05:ae:b7:58:2a:d0:35:e9:e1:eb:ad:0c:eb:1b:8e:d2:d9:ee:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=93AEE9006D779F51ACB4E3E81343528A96F01383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:82:d1:2f:c5:b7:e3:ed:30:ba:a8:30:00:
                    ec:b9:ea:84:62:98:5a:75:cd:3e:ac:b1:93:8d:33:
                    42:3d:59:59:a4:4e:0f:b9:ba:e8:44:88:35:1f:67:
                    3a:ca:27:1a:36:d1:46:09:51:0a:76:7a:07:4b:db:
                    f0:fb:11:c6:81:54:70:8d:6a:5c:cd:9f:f9:19:6b:
                    27:91:e8:7c:57:7f:fd:8b:b6:ad:7d:a8:c8:ea:e8:
                    d8:d6:c6:ae:6c:f7:4f:dd:fb:6e:a0:30:ab:0b:0c:
                    23:fc:d0:1e:d6:27:5f:a9:39:f6:d6:54:98:11:7a:
                    ea:63:75:b0:18:db:d6:a7:c3:8b:5b:10:06:c0:5d:
                    63:46:2e:81:0b:8d:92:96:ca:6a:1e:0c:a3:bf:ec:
                    af:b6:66:27:53:08:7b:33:af:07:9e:9f:4e:bd:37:
                    d6:8b:3d:95:d0:5b:fe:67:6c:dd:1f:76:9c:d5:d3:
                    32:5c:2a:53:6a:ed:95:df:40:22:b9:3a:da:35:64:
                    ce:c6:7f:0a:60:e6:6a:55:28:e8:dc:f7:d8:26:01:
                    9f:46:a1:dc:fd:f0:4c:2d:ff:e2:7d:f6:3c:7e:28:
                    24:7a:ea:ba:3e:c6:1b:3e:50:bf:b7:cf:2b:27:b3:
                    b2:c7:e3:06:61:6d:a7:93:7f:ad:13:30:bb:09:3d:
                    4c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:E9:00:6D:77:9F:51:AC:B4:E3:E8:13:43:52:8A:96:F0:13:83
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e322e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:6a:c4:3d:56:f6:05:20:a5:72:62:69:a1:a8:7e:c0:a4:70:
         36:d4:e8:54:ba:75:48:10:01:f8:8f:dd:94:56:49:84:ed:13:
         65:cf:c7:e3:10:1f:4d:f2:b5:a8:65:b9:d4:c9:62:9d:3c:a4:
         68:8d:cf:10:50:de:c1:60:de:5a:3f:ea:d8:a7:e1:cb:be:b4:
         dc:93:eb:85:e4:27:48:af:eb:23:80:7c:06:ee:78:19:04:b9:
         b2:b3:98:db:44:75:d1:a1:20:d6:04:98:39:3e:78:a7:9a:fa:
         d8:59:29:fb:ca:f7:19:41:68:61:74:51:69:5a:b1:35:2b:30:
         0f:14:ef:2a:fb:6c:b2:21:27:47:80:97:d5:25:7e:d4:40:0c:
         05:ac:f4:b2:f0:cf:b9:e1:07:dd:84:8a:35:59:25:f6:f3:71:
         89:d9:51:3d:7c:f7:27:35:d9:db:71:f9:02:39:11:5d:84:f8:
         57:e4:7d:e0:c1:c8:5d:ce:fe:7e:97:04:79:bb:23:87:75:08:
         f5:e8:06:d7:a2:cf:9e:9d:9b:cc:51:f1:56:42:9c:31:68:3c:
         51:13:3a:5d:31:89:86:6a:72:6c:ae:e0:6a:ed:d4:7a:6b:f4:
         30:da:6c:96:4a:82:bf:36:fd:ef:6d:eb:82:a4:68:b4:20:28:
         f8:d3:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org