Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e34392e3139322e302f32302d3230203d3e203238323230.roa
File:                     3138372e34392e3139322e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          cG2sUnP5Q8bHEN/X6otK8u8R5eW6MbFC0F6+gHD1PT0=
Subject key identifier:   F1:B6:37:96:A0:E8:A6:59:4E:62:B9:DB:70:B0:F6:C3:9B:9B:7D:D6
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       1E953ECFC8464E21AFC477EB675F0FFD676FB4BC
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e34392e3139322e302f32302d3230203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:22 +0000
ROA not before:           Mon 08 Apr 2024 20:00:22 +0000
ROA not after:            Mon 07 Apr 2025 20:05:22 +0000
asID:                     28220
IP address blocks:        187.49.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:95:3e:cf:c8:46:4e:21:af:c4:77:eb:67:5f:0f:fd:67:6f:b4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:22 2024 GMT
            Not After : Apr  7 20:05:22 2025 GMT
        Subject: CN=F1B63796A0E8A6594E62B9DB70B0F6C39B9B7DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:55:d9:ce:7d:25:06:8a:88:c4:22:9a:a5:
                    6a:27:30:56:c4:07:4b:2a:84:d0:71:10:2d:de:6e:
                    9c:7c:f8:f1:99:d9:c4:85:3e:16:6c:6a:6b:0e:91:
                    67:cc:80:7a:0c:b8:22:65:7a:e8:fa:b0:cf:2c:06:
                    8b:0d:39:ce:46:1e:21:5c:08:3d:bd:a6:87:87:b1:
                    4e:47:3b:23:92:68:3f:64:38:75:03:70:51:69:5a:
                    d9:27:fc:ed:f6:ea:44:6c:4d:12:7e:93:68:0b:83:
                    d6:8e:14:8b:a4:5b:81:a2:ab:19:60:72:64:2a:dd:
                    83:43:53:4c:b7:10:b2:ea:bf:d0:59:54:d4:09:04:
                    f5:f7:cf:b2:bd:21:ac:e9:05:3d:5a:36:aa:0a:9c:
                    a3:cf:34:76:51:51:5e:29:eb:b8:f3:8d:c1:85:0f:
                    05:74:45:e5:fb:c4:4f:49:04:4c:07:9e:43:c3:6a:
                    78:41:49:31:27:36:bc:a5:a9:7e:b0:5f:16:60:ea:
                    11:f5:b2:cc:34:08:08:73:a8:32:a4:d9:b7:64:86:
                    82:29:53:8c:69:57:0d:b7:b4:95:f4:0e:98:8b:05:
                    51:02:89:cd:a8:cf:e8:ec:98:00:f1:c6:70:f8:60:
                    5e:3b:d6:e6:d5:e0:bc:3a:fb:c6:64:45:04:6b:c3:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B6:37:96:A0:E8:A6:59:4E:62:B9:DB:70:B0:F6:C3:9B:9B:7D:D6
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e34392e3139322e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:64:83:85:41:c1:19:b8:6a:d3:07:76:3c:14:06:51:c3:
         a4:67:f6:e0:c3:a3:70:64:c5:b7:3f:9f:75:96:88:02:56:4f:
         be:85:bf:45:70:42:66:f2:09:f0:55:32:0f:94:2d:cf:92:ce:
         f4:d8:47:aa:50:e3:9a:2d:6d:e3:d0:69:27:35:b2:27:28:79:
         1b:5f:fc:0c:52:a5:7f:8d:31:88:85:fa:81:7f:e5:a9:c8:40:
         e5:ec:81:88:27:10:61:90:29:62:41:44:b5:58:2e:fb:c4:ec:
         c1:09:a9:7a:72:f3:ed:78:93:1b:5c:d4:a1:75:d8:f8:d2:41:
         dc:3b:87:75:67:12:c3:ba:e8:38:6d:7d:1c:79:7d:ee:b4:ed:
         87:96:c3:83:8f:68:fe:c2:3b:2b:10:29:85:c3:e1:d9:73:4c:
         7b:c9:54:b9:4d:53:dd:20:7e:bf:e6:57:d4:bf:a6:5f:84:1b:
         36:48:9a:ef:af:30:ee:42:c5:0e:73:a0:79:43:cd:4e:6c:c3:
         47:70:5e:c4:2f:c8:1d:7b:8f:51:76:ec:76:8b:40:09:d9:74:
         fa:0b:8f:48:b8:62:0d:ba:45:45:57:b8:dc:24:e7:3d:03:28:
         a6:75:01:85:1b:e6:a4:5a:54:8a:5c:6f:62:81:c8:fd:00:6a:
         6a:5b:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 00:28:31 2024 by rpki-client on console.sobornost.net