Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e342e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          0dhmXGYLgBeqDRJ0L5/pZsd5xxn50AO/i2lk7dmjJHY=
Subject key identifier:   1E:4E:FD:A5:A5:64:80:E3:97:16:33:22:74:44:8C:38:C4:96:6F:AE
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       42206D0D4A802CB25932C73E980B91E68850BF0D
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:49 +0000
ROA not before:           Wed 17 Apr 2024 11:34:49 +0000
ROA not after:            Wed 16 Apr 2025 11:39:49 +0000
asID:                     28182
IP address blocks:        189.89.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:20:6d:0d:4a:80:2c:b2:59:32:c7:3e:98:0b:91:e6:88:50:bf:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:49 2024 GMT
            Not After : Apr 16 11:39:49 2025 GMT
        Subject: CN=1E4EFDA5A56480E39716332274448C38C4966FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:91:71:d4:47:74:95:fc:ff:5f:d3:5b:d6:63:
                    25:f3:89:4c:fb:f3:5f:af:3e:1f:d8:5a:e8:88:af:
                    a4:96:36:54:f5:2c:c6:9d:b1:88:e7:73:8c:7a:b9:
                    0b:0a:fa:e8:48:ba:43:7c:3c:73:fb:44:ed:32:9b:
                    9b:db:61:91:1f:98:a5:b1:a7:2e:c0:56:ee:6c:0f:
                    d6:45:64:d2:1d:f1:14:3f:3b:29:a9:8b:fd:10:6f:
                    2b:c9:5b:77:84:9b:56:bf:60:97:6b:85:26:7a:f3:
                    9b:e5:0a:c2:08:69:aa:5d:f0:99:c8:a0:4d:47:41:
                    2b:c3:ec:d4:4e:e6:7c:33:7c:42:e6:4d:e1:99:d4:
                    e3:5f:8e:0a:c6:a9:27:b3:06:99:a5:62:a8:14:4f:
                    fa:6f:b6:88:d9:8b:c9:bd:7d:7c:46:69:09:a2:a9:
                    9d:10:ae:6c:ef:a9:00:f4:27:9e:5c:5d:c7:f0:f4:
                    3c:3b:3e:ae:97:92:9f:a9:2c:eb:ad:8c:ed:48:16:
                    c2:cb:bd:59:70:c9:10:ef:f1:08:ca:26:1d:ab:c8:
                    c2:37:86:03:29:81:8e:1a:74:b8:eb:3c:9b:a2:c6:
                    7c:13:eb:fd:cf:7e:55:24:58:8f:e4:4f:b4:27:9b:
                    c1:76:b9:d4:17:2b:55:73:7f:a5:f1:30:92:ab:55:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4E:FD:A5:A5:64:80:E3:97:16:33:22:74:44:8C:38:C4:96:6F:AE
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:67:a0:cc:3a:11:67:df:19:3a:dc:81:3a:8d:c4:5a:b0:81:
         ed:76:e1:66:6f:36:fb:c5:e4:b1:c3:45:42:8c:61:f4:91:67:
         0e:8b:28:e3:48:3d:50:b3:e8:81:aa:9d:61:80:99:92:fd:5e:
         61:0a:df:a0:0b:be:06:6f:56:3d:f0:90:c0:8c:38:61:5f:5e:
         bc:9c:6b:fe:ee:3c:bf:91:04:ec:de:41:76:8f:cc:a1:90:2e:
         eb:7a:e5:a1:59:44:9b:93:5b:39:c2:42:08:74:7a:1c:75:ae:
         6f:85:83:25:5f:56:46:27:3e:2c:b3:86:96:b1:de:7c:6e:5f:
         77:2f:3b:d8:dc:6c:1d:18:da:87:4d:3d:76:f2:ca:1f:5c:84:
         fc:35:ff:49:ff:7b:87:54:af:19:cf:3c:62:4d:53:6f:d3:46:
         8b:91:b2:e1:74:bd:a7:b2:95:c5:93:98:48:d5:a7:1f:2e:a9:
         4b:a2:5c:d7:e7:04:82:5d:cd:f4:9e:36:3c:93:e5:34:ce:5f:
         1d:a1:d5:ae:f7:10:df:cf:02:9e:c7:58:55:72:59:c9:3d:37:
         c7:61:0e:dc:5a:33:4f:5e:71:be:58:9c:6c:fc:90:ee:ef:7f:
         f0:9b:dc:07:38:6f:f0:94:b5:99:08:28:6f:1e:80:32:00:69:
         b6:4c:53:dd
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUQiBtDUqALLJZMsc+mAuR5ohQvw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFM0YwQzdCRTRGQTAxNzUyNENFMjI0NEU0QUE4MzYz
NDQ2RkQwRDAeFw0yNDA0MTcxMTM0NDlaFw0yNTA0MTYxMTM5NDlaMDMxMTAvBgNV
BAMTKDFFNEVGREE1QTU2NDgwRTM5NzE2MzMyMjc0NDQ4QzM4QzQ5NjZGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkXHUR3SV/P9f01vWYyXziUz7
81+vPh/YWuiIr6SWNlT1LMadsYjnc4x6uQsK+uhIukN8PHP7RO0ym5vbYZEfmKWx
py7AVu5sD9ZFZNId8RQ/Oympi/0QbyvJW3eEm1a/YJdrhSZ685vlCsIIaapd8JnI
oE1HQSvD7NRO5nwzfELmTeGZ1ONfjgrGqSezBpmlYqgUT/pvtojZi8m9fXxGaQmi
qZ0QrmzvqQD0J55cXcfw9Dw7Pq6Xkp+pLOutjO1IFsLLvVlwyRDv8QjKJh2ryMI3
hgMpgY4adLjrPJuixnwT6/3PflUkWI/kT7Qnm8F2udQXK1Vzf6XxMJKrVQTZAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUHk79paVkgOOXFjMidESMOMSWb64wHwYDVR0j
BBgwFoAUaOPwx75PoBdSTOIkTkqoNjRG/Q0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC82OEUzRjBDN0JFNEZBMDE3NTI0Q0UyMjQ0RTRBQTgzNjM0NDZGRDBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RTNGMEM3QkU0RkEwMTc1
MjRDRTIyNDRFNEFBODM2MzQ0NkZEMEQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzODM5MmUzODM5MmUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMTM4
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC9WQQwDQYJKoZIhvcNAQELBQADggEBAMBnoMw6EWffGTrc
gTqNxFqwge124WZvNvvF5LHDRUKMYfSRZw6LKONIPVCz6IGqnWGAmZL9XmEK36AL
vgZvVj3wkMCMOGFfXryca/7uPL+RBOzeQXaPzKGQLut65aFZRJuTWznCQgh0ehx1
rm+FgyVfVkYnPiyzhpax3nxuX3cvO9jcbB0Y2odNPXbyyh9chPw1/0n/e4dUrxnP
PGJNU2/TRouRsuF0vaeylcWTmEjVpx8uqUuiXNfnBIJdzfSeNjyT5TTOXx2h1a73
EN/PAp7HWFVyWck9N8dhDtxaM09ecb5YnGz8kO7vf/Cb3Ac4b/CUtZkIKG8egDIA
abZMU90=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org