Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32332d3233203d3e20323637353330.roa
File:                     3230312e3138322e3139322e302f32332d3233203d3e20323637353330.roa (raw, json)
Hash identifier:          AziphDW9cOGHML7WCWzN4TTiZ0S3PJhhbAZPgZYh1JY=
Subject key identifier:   2A:5C:6C:1F:54:A4:45:67:5F:28:03:12:C7:B2:F0:58:0A:CF:FD:17
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       39AF934D4CF1F1217FD830C1F338A45F62538481
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32332d3233203d3e20323637353330.roa
Signing time:             Wed 24 Apr 2024 12:14:09 +0000
ROA not before:           Wed 24 Apr 2024 12:09:09 +0000
ROA not after:            Wed 23 Apr 2025 12:14:09 +0000
asID:                     267530
IP address blocks:        201.182.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:af:93:4d:4c:f1:f1:21:7f:d8:30:c1:f3:38:a4:5f:62:53:84:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Apr 24 12:09:09 2024 GMT
            Not After : Apr 23 12:14:09 2025 GMT
        Subject: CN=2A5C6C1F54A445675F280312C7B2F0580ACFFD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:9c:93:31:e5:1b:f0:30:c7:9f:5a:8c:75:
                    20:48:e1:bb:ba:a0:d4:ef:02:a3:7e:07:ba:ed:9c:
                    c9:a2:40:81:43:96:91:bd:63:26:04:51:48:d7:15:
                    06:8e:57:80:84:7b:b6:47:0f:65:b9:f4:10:5b:14:
                    87:1a:73:be:e6:50:1b:53:c1:2c:84:65:2b:16:cb:
                    4c:92:2c:1f:51:b9:7c:ad:67:b4:4e:cd:4d:7d:d6:
                    30:ed:97:dd:cc:49:87:1d:49:a0:07:0b:6e:89:97:
                    ca:87:ce:32:d8:20:1f:f3:56:a6:7d:2a:72:25:b2:
                    54:10:18:66:bd:5d:31:8d:64:bb:cc:0a:23:da:b2:
                    fc:18:87:0f:1e:73:17:04:2d:3a:48:3c:e7:85:69:
                    bf:cd:e3:29:8f:ff:89:0e:56:4c:a1:b7:d6:3c:ac:
                    0f:2b:83:e7:f7:a7:18:d6:12:69:82:2a:45:26:b8:
                    79:fd:ab:ab:55:fa:99:ee:bc:33:5e:61:90:17:6a:
                    4f:1c:73:1c:db:3b:5d:68:61:7b:d4:19:bb:1d:81:
                    26:f2:09:75:8b:af:91:0d:d5:71:b7:4a:ae:7c:93:
                    ed:b1:fb:d1:4c:d4:53:0c:eb:f1:37:fc:74:68:66:
                    da:28:b7:ba:41:c1:7a:e0:40:9b:62:a6:6b:36:ec:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5C:6C:1F:54:A4:45:67:5F:28:03:12:C7:B2:F0:58:0A:CF:FD:17
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32332d3233203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:76:68:b2:8a:39:d3:50:04:1c:9c:28:93:89:5d:3d:f0:c0:
         f3:95:50:ca:77:70:35:6a:ed:ec:1a:d8:74:ad:60:a5:14:d4:
         03:49:cf:6f:cc:f5:da:32:fb:e0:b4:85:77:bc:3e:47:ba:c6:
         76:cd:c5:92:f2:11:9f:60:8b:7a:2c:52:8c:72:c0:c7:34:f2:
         e4:a3:82:03:47:ab:6e:b6:51:4d:fb:ec:48:b9:60:08:32:b1:
         3f:0b:78:6e:f8:31:28:0e:11:39:da:5d:34:45:61:75:10:04:
         9b:90:32:14:78:e5:1b:5f:66:1b:15:42:1c:b0:1e:f7:5d:be:
         e6:06:9b:7a:12:33:12:b4:ff:74:d9:48:6e:b0:b2:5e:e1:d5:
         d7:d5:18:9b:cf:aa:57:7c:ba:c1:b9:f1:c6:89:f8:59:c2:9f:
         8c:18:c7:4e:8d:bb:6b:1c:96:59:d4:57:8c:ae:43:75:c8:4a:
         06:d6:27:44:2f:1e:79:7f:d5:a3:15:67:74:36:2b:01:d4:0e:
         7a:0d:dd:45:c9:59:41:3b:3c:73:09:dc:c7:ec:3d:8b:3b:cf:
         b8:8c:59:39:ee:e6:1f:a3:2b:3f:37:84:b8:64:73:51:3a:d2:
         86:24:61:f2:b1:b5:79:a7:de:4d:01:00:f0:74:7a:78:35:67:
         be:51:bb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org