Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32332d3233203d3e203631383130.roa
File:                     3230312e3135382e35362e302f32332d3233203d3e203631383130.roa (raw, json)
Hash identifier:          YkXl473dVQTi9YOOE0W0brzQBMr3CgCwFVPwd4e6aIs=
Subject key identifier:   3D:5A:2C:C2:6D:81:AE:5B:B2:3D:0B:F3:E3:D5:16:94:57:E3:1E:23
Certificate issuer:       /CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
Certificate serial:       57ADA519640A4882BB430F4304538B8E9065C4A0
Authority key identifier: C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32332d3233203d3e203631383130.roa
Signing time:             Fri 19 Apr 2024 17:01:58 +0000
ROA not before:           Fri 19 Apr 2024 16:56:58 +0000
ROA not after:            Fri 18 Apr 2025 17:01:58 +0000
asID:                     61810
IP address blocks:        201.158.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ad:a5:19:64:0a:48:82:bb:43:0f:43:04:53:8b:8e:90:65:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
        Validity
            Not Before: Apr 19 16:56:58 2024 GMT
            Not After : Apr 18 17:01:58 2025 GMT
        Subject: CN=3D5A2CC26D81AE5BB23D0BF3E3D5169457E31E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:ef:63:40:8c:b5:5b:21:0e:ac:19:21:63:
                    8b:3c:e7:dc:2a:2b:c9:21:3f:3e:5e:d2:4a:6a:d3:
                    bc:18:11:42:ff:c0:32:a0:9f:04:ae:1f:d5:81:f2:
                    4a:93:16:02:e6:6e:0b:95:14:9a:49:1a:46:5d:28:
                    4a:d7:15:0e:d2:22:38:10:52:3a:08:ed:6e:f9:52:
                    13:5f:95:00:ae:58:25:3f:9a:e8:25:4c:3e:8f:b7:
                    95:f5:17:ae:2e:8f:73:b4:b8:8a:e1:d2:d2:46:be:
                    35:65:c3:40:d0:ee:f6:46:a2:a7:50:e6:2c:bf:9b:
                    3e:7c:54:e6:64:ab:5d:b5:30:ac:c0:e6:6d:9d:e0:
                    89:89:b2:5a:28:76:9a:7f:2d:fa:b8:39:c6:e9:3e:
                    10:e5:f9:a9:8f:65:32:27:5f:cd:20:34:30:c7:d4:
                    bf:98:25:e5:26:64:a8:4d:3a:9e:35:08:1d:39:ac:
                    0f:2c:23:91:07:bd:86:18:b0:6e:1f:c3:ee:a6:3b:
                    e0:2e:b0:b9:42:1a:10:1d:93:4d:91:cf:37:17:39:
                    c6:20:87:38:f8:a4:8b:4b:5d:a6:d3:8b:aa:73:fe:
                    34:16:27:be:9d:70:63:26:e5:cc:67:16:e8:ae:d3:
                    a5:d6:48:c4:1a:5a:1f:43:3f:93:14:9c:32:b7:71:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:2C:C2:6D:81:AE:5B:B2:3D:0B:F3:E3:D5:16:94:57:E3:1E:23
            X509v3 Authority Key Identifier:
                keyid:C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32332d3233203d3e203631383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:74:09:ea:a7:1c:5d:f5:e3:94:5d:d4:d2:ac:09:f2:0c:18:
         a9:b7:0b:b3:0d:bd:69:07:cd:58:c4:82:b8:c7:d7:e7:9c:2a:
         cd:39:23:56:96:a3:3c:b5:89:f6:05:7c:f3:c6:24:47:04:9f:
         bd:ae:00:9d:71:f7:81:b4:f6:52:75:e9:2b:8a:75:43:96:5a:
         0c:b0:b2:e4:f1:3c:82:86:f1:69:09:83:cc:82:8b:61:e1:29:
         c6:f3:b4:5c:92:86:01:c5:1d:51:b2:c7:00:75:40:fb:db:5d:
         81:1b:fc:27:b7:66:1e:be:a3:ca:39:b2:96:43:ea:e1:d9:dc:
         08:c4:7f:4b:15:b8:f3:09:19:c5:a0:e5:7b:0a:8a:81:09:73:
         02:c8:24:3e:8f:8f:18:2b:35:21:8d:e9:51:6a:c1:e8:86:d8:
         1c:3f:2d:a0:08:21:99:4e:d3:af:51:cb:6c:c8:b6:0e:33:70:
         1c:e2:8c:bf:54:02:20:a3:9f:df:99:86:0a:00:a7:77:c0:f3:
         a7:02:b1:e7:5c:b7:4b:66:2c:14:b6:07:4f:d3:81:c8:7b:7e:
         39:c7:55:d2:2e:0d:51:57:65:4f:5b:35:61:4e:30:6b:e6:0f:
         b9:0f:9d:e4:33:01:ea:fc:0a:d5:d8:62:e6:da:59:46:c6:86:
         82:e1:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org