Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3232342e302f32312d3231203d3e203238323230.roa
File:                     3138372e36312e3232342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          StUmCFlNOKYq1OK7tedLncIiScug3xzBHc6s0q1+33c=
Subject key identifier:   12:26:7F:BC:27:F9:A2:36:DA:32:C4:BC:81:17:E2:51:0E:02:58:72
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       59D6552C60C0ADDEB1FD1CA35A6E50AD342E157D
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3232342e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:27 +0000
ROA not before:           Mon 08 Apr 2024 20:00:27 +0000
ROA not after:            Mon 07 Apr 2025 20:05:27 +0000
asID:                     28220
IP address blocks:        187.61.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 20:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d6:55:2c:60:c0:ad:de:b1:fd:1c:a3:5a:6e:50:ad:34:2e:15:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:27 2024 GMT
            Not After : Apr  7 20:05:27 2025 GMT
        Subject: CN=12267FBC27F9A236DA32C4BC8117E2510E025872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:54:61:27:db:7c:a4:5b:c3:e8:94:33:88:
                    73:f6:85:af:64:25:5f:27:e7:f1:5a:f1:f4:40:1e:
                    f6:f5:d5:8c:8c:09:58:7a:5f:98:68:f1:11:63:f9:
                    78:8f:24:89:52:6f:37:77:6e:4e:d7:41:e3:8c:b7:
                    5e:38:ec:2e:45:6d:3a:c4:93:13:8b:b9:04:98:54:
                    ca:7e:0f:c8:b1:9d:5f:e5:03:50:23:fd:f2:10:eb:
                    92:ec:ba:c7:e2:f1:16:d5:00:0c:89:0f:42:86:44:
                    12:63:7b:aa:21:31:db:8f:71:87:a7:62:b5:68:f7:
                    e1:38:04:00:5a:c0:0c:63:2c:81:dd:b1:35:9b:92:
                    6f:b8:ca:d2:cf:fa:14:eb:83:b8:9a:83:52:30:82:
                    04:e9:7a:87:58:35:9a:4a:1d:e7:dc:0f:08:ef:cf:
                    33:95:24:56:0b:3b:d7:5c:12:26:f1:c1:3d:f4:8b:
                    5f:7d:41:b3:ed:20:98:39:60:af:a8:5a:73:e7:de:
                    ae:37:10:91:2d:80:14:6e:66:f5:fa:e5:9d:9a:9b:
                    4b:91:38:ea:c5:69:7f:25:81:28:01:3d:5c:4b:14:
                    3f:17:6a:f7:37:b8:3b:37:8f:a2:e6:de:03:28:fd:
                    6a:84:fb:08:0a:69:28:28:da:db:41:0b:37:6b:2a:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:7F:BC:27:F9:A2:36:DA:32:C4:BC:81:17:E2:51:0E:02:58:72
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3232342e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:66:4f:80:48:1f:7b:30:58:ed:cd:e9:f4:f6:a4:51:29:
         63:35:ca:e6:5a:f3:95:e5:70:06:26:66:ae:64:4c:72:e0:a9:
         5e:8c:28:09:b2:19:0e:31:37:fb:4b:20:7a:49:aa:87:57:a6:
         fc:7c:69:06:ea:b5:59:06:bf:ad:55:f0:5e:2e:65:f9:d6:7f:
         fa:e2:90:c3:0c:7c:0e:db:d7:46:b0:4d:e5:97:a2:6a:42:53:
         56:2b:ee:b7:b3:bd:cd:7c:47:40:00:2e:4c:a7:9c:af:7c:c6:
         af:68:e1:f5:0e:ac:36:b0:85:8b:1e:6d:91:66:87:74:15:a6:
         10:17:ca:35:6c:95:37:41:91:21:f5:fc:aa:05:f2:14:ca:c2:
         3c:e4:88:82:00:12:92:fc:15:41:23:35:2a:36:79:3e:20:bd:
         23:ee:19:7a:ab:cd:69:ac:8a:00:c5:ee:c5:e4:14:24:d0:c8:
         04:c4:eb:1b:bb:64:3a:c4:f3:c3:fe:1a:e2:0f:b0:c2:04:0e:
         39:43:eb:2a:c3:8f:02:0e:61:bb:04:fc:b9:35:f8:1d:c1:a7:
         78:d4:03:fc:79:9f:5d:57:71:2b:10:a7:34:30:7a:df:3f:a3:
         53:0e:fa:cb:04:9b:de:51:0b:7f:09:36:cb:5e:92:78:e1:fc:
         d9:b7:78:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWdZVLGDArd6x/RyjWm5QrTQuFX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMjdaFw0yNTA0MDcyMDA1MjdaMDMxMTAvBgNV
BAMTKDEyMjY3RkJDMjdGOUEyMzZEQTMyQzRCQzgxMTdFMjUxMEUwMjU4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFVRhJ9t8pFvD6JQziHP2ha9k
JV8n5/Fa8fRAHvb11YyMCVh6X5ho8RFj+XiPJIlSbzd3bk7XQeOMt1447C5FbTrE
kxOLuQSYVMp+D8ixnV/lA1Aj/fIQ65Lsusfi8RbVAAyJD0KGRBJje6ohMduPcYen
YrVo9+E4BABawAxjLIHdsTWbkm+4ytLP+hTrg7iag1IwggTpeodYNZpKHefcDwjv
zzOVJFYLO9dcEibxwT30i199QbPtIJg5YK+oWnPn3q43EJEtgBRuZvX65Z2am0uR
OOrFaX8lgSgBPVxLFD8Xavc3uDs3j6Lm3gMo/WqE+wgKaSgo2ttBCzdrKrRvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEiZ/vCf5ojbaMsS8gRfiUQ4CWHIwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzNjMxMmUzMjMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDuz3gMA0GCSqGSIb3DQEBCwUAA4IBAQBLNWZPgEgf
ezBY7c3p9PakUSljNcrmWvOV5XAGJmauZExy4KlejCgJshkOMTf7SyB6SaqHV6b8
fGkG6rVZBr+tVfBeLmX51n/64pDDDHwO29dGsE3ll6JqQlNWK+63s73NfEdAAC5M
p5yvfMavaOH1Dqw2sIWLHm2RZod0FaYQF8o1bJU3QZEh9fyqBfIUysI85IiCABKS
/BVBIzUqNnk+IL0j7hl6q81prIoAxe7F5BQk0MgExOsbu2Q6xPPD/hriD7DCBA45
Q+sqw48CDmG7BPy5Nfgdwad41AP8eZ9dV3ErEKc0MHrfP6NTDvrLBJveUQt/CTbL
XpJ44fzZt3hj
-----END CERTIFICATE-----
Generated at Wed Apr 10 00:28:31 2024 by rpki-client on console.sobornost.net