Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33332e302f32342d3234203d3e20323732373936.roa
File:                     3136382e39302e33332e302f32342d3234203d3e20323732373936.roa (raw, json)
Hash identifier:          uji5GNEthV2BWVjjm3OiNJXuygTF/L1dRut/vijtwyI=
Subject key identifier:   3E:0B:2F:7E:DD:94:71:30:82:94:CB:29:04:1C:43:39:D8:B4:EE:BD
Certificate issuer:       /CN=CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4
Certificate serial:       11CD50B74A0C3598B5D5E5173BEF4AEFC56B3D1B
Authority key identifier: CC:C3:D7:2C:E0:5B:E2:79:4F:FD:02:00:FF:10:F4:A3:0F:87:4C:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33332e302f32342d3234203d3e20323732373936.roa
Signing time:             Thu 04 Apr 2024 01:31:45 +0000
ROA not before:           Thu 04 Apr 2024 01:26:45 +0000
ROA not after:            Thu 03 Apr 2025 01:31:45 +0000
asID:                     272796
IP address blocks:        168.90.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Apr 2024 19:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cd:50:b7:4a:0c:35:98:b5:d5:e5:17:3b:ef:4a:ef:c5:6b:3d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4
        Validity
            Not Before: Apr  4 01:26:45 2024 GMT
            Not After : Apr  3 01:31:45 2025 GMT
        Subject: CN=3E0B2F7EDD9471308294CB29041C4339D8B4EEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:a6:da:c9:79:2d:b1:0e:18:d0:bd:d0:40:
                    ce:29:85:c9:b0:12:8d:db:77:91:2f:91:8d:01:50:
                    25:f6:c1:d6:ff:c8:8e:e6:6b:e6:78:40:30:34:b5:
                    4d:5e:de:c8:0b:c9:ad:41:05:8a:80:4a:10:0c:28:
                    65:e6:a2:9b:9d:7f:4d:e8:ff:be:7c:a9:a7:ac:fa:
                    9d:44:6d:be:38:3e:ac:99:f7:4e:b5:a9:80:28:35:
                    91:4e:1b:05:57:2e:e6:61:e7:e1:20:6c:a6:77:72:
                    99:76:1d:b7:40:5b:47:00:69:e0:a8:d9:59:5e:dc:
                    a3:44:45:1b:15:54:6c:79:68:29:f4:94:20:59:7f:
                    0c:0b:2e:1a:2c:45:28:98:69:21:17:60:7f:f8:0d:
                    40:0f:1d:24:83:aa:be:4e:69:a4:ea:59:ce:e4:7a:
                    c9:45:cf:7e:08:22:25:3a:74:27:29:49:d7:bb:e6:
                    eb:00:7e:cc:8b:16:ef:57:1d:b7:5d:e4:90:b8:97:
                    4e:86:02:cb:fc:53:59:93:49:b4:39:3f:8f:6b:26:
                    b3:26:8d:81:a7:98:29:65:1b:0a:cc:63:33:ea:2b:
                    21:a2:69:d0:2e:70:18:d7:c4:9f:8d:0b:ef:1d:88:
                    dd:3b:14:24:79:75:bd:2e:ff:5d:b9:d5:80:76:18:
                    4d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0B:2F:7E:DD:94:71:30:82:94:CB:29:04:1C:43:39:D8:B4:EE:BD
            X509v3 Authority Key Identifier:
                keyid:CC:C3:D7:2C:E0:5B:E2:79:4F:FD:02:00:FF:10:F4:A3:0F:87:4C:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCC3D72CE05BE2794FFD0200FF10F4A30F874CE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/3136382e39302e33332e302f32342d3234203d3e20323732373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:98:9e:03:11:34:5b:e4:93:b3:31:9e:b9:c7:3a:f9:8f:7d:
         a6:85:dd:b9:93:d1:4d:f5:0b:c9:1a:2c:b6:c4:31:f0:eb:5b:
         e8:76:64:bf:9d:0e:08:13:af:9a:a9:da:43:c1:59:17:f2:d2:
         08:5b:ae:bb:1d:3d:4d:60:52:b3:14:f1:43:93:e5:95:fd:44:
         29:17:9f:53:65:38:d3:3f:4b:a2:0d:68:b9:c0:89:0e:a8:f2:
         0d:50:4e:35:93:88:75:01:b8:8e:2a:65:e6:1f:65:f2:70:6d:
         cd:06:85:48:4a:e0:d9:09:74:ff:3f:58:ff:0d:91:5c:0e:f2:
         85:ec:d1:fa:e7:f5:c3:d8:4e:04:9a:72:4b:76:57:c3:b6:6e:
         25:4a:cd:4e:54:3f:1f:2f:a4:64:69:7f:0e:5b:9f:16:16:04:
         94:bd:cc:a6:00:98:17:35:3a:1e:77:f2:88:16:97:03:37:a1:
         5e:dd:86:49:0c:b7:98:8a:91:9d:5b:93:2b:56:b8:78:98:90:
         cb:04:d2:a9:66:b1:0c:0e:4c:38:e3:47:91:e9:1c:1b:a7:64:
         72:b1:66:c3:54:fc:df:e2:f8:e8:2d:29:37:72:c8:36:7a:ec:
         fd:73:19:10:a4:d7:fd:cc:8c:9b:fe:10:9e:b9:1c:ef:92:85:
         82:e9:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org