Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e362e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          DNlr5bOjCai0qiyN/SWe57H+zaOUmFFOniLEM/9D/UY=
Subject key identifier:   0E:BB:E1:1A:61:7D:E6:D3:FF:F8:DC:9D:00:36:3B:CB:31:1D:25:C6
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       57ABEBC3D97BCF0A97D96DB9B413AE3ECD31B0B5
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32332d3233203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:47 +0000
ROA not before:           Wed 17 Apr 2024 11:34:47 +0000
ROA not after:            Wed 16 Apr 2025 11:39:47 +0000
asID:                     28182
IP address blocks:        189.89.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ab:eb:c3:d9:7b:cf:0a:97:d9:6d:b9:b4:13:ae:3e:cd:31:b0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:47 2024 GMT
            Not After : Apr 16 11:39:47 2025 GMT
        Subject: CN=0EBBE11A617DE6D3FFF8DC9D00363BCB311D25C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:05:bd:a8:e4:96:c8:e9:c0:03:e9:2a:9f:
                    f5:85:72:57:1c:e8:5d:46:42:2f:6c:9f:20:30:54:
                    be:92:f3:92:a8:cd:b6:81:ce:b8:56:03:26:79:ae:
                    7c:b3:2d:d1:c3:31:bd:c3:00:da:15:70:1c:a4:a4:
                    af:57:75:4f:79:cf:8c:20:68:f6:2f:54:2b:05:80:
                    90:18:de:ab:81:35:9d:ba:c2:2e:23:36:41:df:d5:
                    52:94:86:43:0d:92:d7:33:ca:48:44:73:a0:1a:35:
                    ca:79:69:0e:1e:2d:28:c7:c7:d3:69:f4:f5:55:78:
                    f1:ec:a0:70:e5:bc:cf:b8:91:7b:b6:61:12:99:02:
                    5f:3b:07:ba:a1:08:6a:66:db:c5:8d:ba:2c:90:80:
                    fc:23:9b:cb:7e:b0:8f:9d:dd:a3:0a:47:ac:44:6d:
                    25:ec:cd:69:cf:84:ac:ab:44:a8:c6:0d:e6:44:71:
                    f3:61:19:62:60:08:4d:c9:d4:1d:c6:ab:4a:e8:57:
                    f4:cb:1b:2e:fc:b2:86:6b:ba:c8:0a:09:d3:45:d4:
                    d8:c8:e2:c0:22:44:00:ac:9e:2d:1c:08:e3:28:37:
                    1f:2f:e7:f1:eb:1f:bb:61:e9:ae:2d:99:1e:bf:d6:
                    60:8b:ef:2b:a0:b2:d8:4c:ff:02:59:fb:e7:a9:bf:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BB:E1:1A:61:7D:E6:D3:FF:F8:DC:9D:00:36:3B:CB:31:1D:25:C6
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:fd:56:eb:64:2c:0d:80:05:e9:39:05:05:19:b0:dd:66:d0:
         2a:fb:6c:4c:b7:06:09:c6:83:57:af:8e:6a:9a:20:a2:53:1a:
         e5:0f:7f:af:1f:0c:5b:b6:c7:cd:56:eb:f3:1c:0b:36:d2:cc:
         03:7b:10:78:6b:65:1d:c9:b6:d2:58:41:08:af:e0:1c:3b:e4:
         e3:9f:a0:00:ad:c6:75:ea:e6:9e:f7:28:ca:82:b5:b6:e7:cb:
         b8:f3:62:f3:94:15:cb:9b:f4:c4:51:11:5b:ae:90:80:9d:09:
         ed:03:82:7c:15:00:5c:07:33:c3:5c:31:9b:92:4e:f1:56:25:
         6a:ba:c3:d9:5e:4a:04:b4:f6:2c:74:13:5e:4c:73:33:d9:43:
         0f:10:53:f2:c9:8b:f4:5c:5e:db:22:c3:e9:eb:89:f8:2a:a9:
         36:63:87:07:e6:c3:42:3a:82:54:f2:7c:18:0c:de:6f:54:fb:
         0f:d6:dc:f6:53:a4:1f:3b:ed:f7:20:9a:af:1f:f8:76:10:cc:
         04:3a:7c:12:d0:cb:98:ba:3c:7f:bf:4a:14:6c:93:8c:71:c2:
         33:ce:14:14:36:4d:50:ce:be:46:41:c8:db:6f:3a:ad:d6:01:
         c5:73:9d:54:f2:35:ec:e8:72:c0:07:14:a0:21:55:e5:dd:d3:
         49:e3:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org