Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e362e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          k9gYIb7hVpCxOewCZ4mEZMmSNN6tFmKyZG9u0XW0S5M=
Subject key identifier:   FA:1D:72:53:0F:41:87:E0:6A:E7:99:CA:35:21:9E:98:02:8B:49:4D
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       7968A39C4366BD0C48DBD015337BEC447273C84B
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32342d3234203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:48 +0000
ROA not before:           Wed 17 Apr 2024 11:34:48 +0000
ROA not after:            Wed 16 Apr 2025 11:39:48 +0000
asID:                     28182
IP address blocks:        189.89.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:a3:9c:43:66:bd:0c:48:db:d0:15:33:7b:ec:44:72:73:c8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:48 2024 GMT
            Not After : Apr 16 11:39:48 2025 GMT
        Subject: CN=FA1D72530F4187E06AE799CA35219E98028B494D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:b8:4b:b5:29:c9:e8:fa:d9:90:02:a7:e5:
                    17:40:8d:bf:30:d3:d0:5c:1c:40:2d:d6:e0:9a:71:
                    05:2e:2f:e7:40:bd:6b:3f:cc:5c:ed:62:2f:99:f6:
                    ff:79:41:ea:75:c2:62:3a:fa:3f:16:a6:f3:57:7c:
                    7c:4d:43:b2:60:ce:16:17:b4:ae:af:8f:f9:03:ec:
                    e8:97:12:b6:a3:6c:20:b0:b6:da:08:e0:fd:b4:fa:
                    71:23:4c:7d:2a:4f:a9:3b:58:09:f0:ad:dd:02:96:
                    50:b7:82:40:18:44:a0:3a:86:9a:27:8b:f2:56:43:
                    5b:a5:9f:6a:f6:b9:e6:f6:59:f1:bd:aa:99:08:45:
                    e5:21:b6:f6:f4:8a:ff:42:e0:89:50:60:fe:c4:52:
                    95:f8:03:5a:22:b1:3f:b0:e4:75:0e:3f:3f:10:3d:
                    e4:0f:b5:38:6a:5c:ef:13:ab:db:6a:de:fb:4a:f3:
                    3e:54:36:09:9a:ea:89:0a:42:18:a1:bd:40:92:25:
                    3b:7c:f1:9c:1d:c3:80:45:b5:4f:5f:be:db:ef:d5:
                    7f:d2:f2:b5:5d:f5:b6:b9:ab:09:e1:35:03:8b:5f:
                    ba:fe:b9:0c:25:09:49:dc:3c:bf:e7:1a:e0:29:06:
                    d3:4e:95:48:eb:80:65:73:31:a2:1c:2b:11:ee:37:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1D:72:53:0F:41:87:E0:6A:E7:99:CA:35:21:9E:98:02:8B:49:4D
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:1d:a2:b1:b0:e3:6e:a1:58:f8:c1:f8:b7:77:54:be:12:
         9c:28:21:47:f5:65:df:e8:3f:6c:58:eb:c4:6d:ea:ca:f5:19:
         d9:1e:8b:08:a7:dc:3a:39:9e:d0:18:66:cd:d4:72:21:06:4e:
         64:54:5a:98:0d:66:26:86:38:b9:f4:30:c7:da:cb:be:91:8b:
         32:a1:35:d6:37:33:b8:f3:c9:d1:ef:75:6f:7e:69:42:27:1c:
         bd:65:30:28:ec:05:52:d6:86:d0:9f:09:91:4d:d4:60:ca:0a:
         c2:6c:08:1c:57:d2:ba:fd:03:0c:69:b2:54:1f:bd:63:dc:4a:
         28:4c:aa:eb:eb:dc:f6:96:db:d6:d6:b2:35:d0:a3:4e:ca:93:
         a5:91:b2:17:1d:36:3a:d7:6a:7b:22:9f:15:09:e7:c5:4b:49:
         8f:be:eb:3a:33:cb:e7:c7:5c:2f:e5:4e:3a:29:67:8a:a5:15:
         33:d7:b5:e6:37:44:ff:c4:1e:4f:90:68:12:f6:75:d7:97:f9:
         58:d6:35:9e:da:48:af:71:67:c1:2c:6f:1b:fb:46:79:19:3f:
         0a:6a:86:0b:4d:03:69:5a:db:c1:c5:11:07:18:45:fa:85:f6:
         df:63:e1:14:19:52:39:bf:44:a0:c3:e2:61:7f:cc:a3:6b:a1:
         b0:6e:46:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org