Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa
File:                     3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa (raw, json)
Hash identifier:          8r1Nm82LGoN1LoWUmIwm8lJzIaElXDtzCPWYJewAhf0=
Subject key identifier:   9E:5D:83:85:5F:C5:FA:97:F7:38:F5:57:71:6D:75:30:09:DE:78:57
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       059A20DE6888351157AD13BC926BBD5D72F0ECA2
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa
Signing time:             Wed 24 Apr 2024 12:14:13 +0000
ROA not before:           Wed 24 Apr 2024 12:09:13 +0000
ROA not after:            Wed 23 Apr 2025 12:14:13 +0000
asID:                     267530
IP address blocks:        201.182.192.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9a:20:de:68:88:35:11:57:ad:13:bc:92:6b:bd:5d:72:f0:ec:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Apr 24 12:09:13 2024 GMT
            Not After : Apr 23 12:14:13 2025 GMT
        Subject: CN=9E5D83855FC5FA97F738F557716D753009DE7857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:fb:90:6a:7e:d1:0a:da:84:b6:a8:9b:52:
                    c2:9a:43:0b:c0:44:e6:d8:26:60:b6:fd:de:44:c8:
                    02:aa:6d:18:48:c3:6a:ba:32:3f:bf:b3:c1:30:92:
                    35:22:52:81:49:44:54:57:08:3b:2b:10:eb:27:c0:
                    68:04:55:a4:c0:f4:38:bf:90:24:cf:1c:33:f9:1e:
                    74:bd:05:0f:4c:a9:54:c3:91:8c:e0:78:3d:64:83:
                    67:27:b2:86:98:4b:be:52:dd:bb:e8:a8:a5:3e:4c:
                    e6:23:21:d0:de:30:6b:dc:3f:55:e6:eb:c2:0c:22:
                    ec:6a:97:8d:4c:40:f4:cc:56:c3:cc:d8:0d:71:a6:
                    50:3f:95:95:40:dc:dd:eb:e1:f8:08:05:fa:f2:c1:
                    00:8c:44:25:d7:a4:6d:be:ab:cb:56:99:d7:f7:e6:
                    78:f3:25:0d:d2:64:dd:cf:36:de:bb:81:76:a1:02:
                    6a:22:c8:b1:e6:d3:5b:14:f3:6d:29:a4:6b:58:21:
                    9d:73:e2:39:ea:33:11:57:82:5e:fa:7f:18:72:af:
                    ac:2d:00:e9:66:85:86:90:cc:0f:8e:d1:ba:9e:d0:
                    e4:71:45:71:cf:68:a1:f7:8f:e4:75:2e:98:20:83:
                    35:e6:e6:15:05:3c:c7:02:18:51:b0:e5:50:03:6d:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:83:85:5F:C5:FA:97:F7:38:F5:57:71:6D:75:30:09:DE:78:57
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:92:6d:4d:fa:c4:4e:09:a0:dd:97:d3:c2:2d:9c:0f:f4:ff:
         80:aa:c0:c7:9a:2b:6e:50:f6:ec:ae:46:6e:7c:4a:c7:b4:71:
         69:c0:79:02:e6:c8:94:30:c7:43:bd:83:4f:1a:47:b8:9d:0e:
         07:75:4d:cb:8e:fa:71:9c:cb:56:d2:01:47:85:f5:4b:71:11:
         cb:eb:16:f9:7c:db:b9:fe:f5:f1:e4:63:43:48:2b:e5:2d:4d:
         cc:fe:8e:8a:ae:b5:f5:fd:ef:87:c0:99:4e:15:36:85:95:b4:
         e1:7c:56:48:e8:0a:aa:5a:c7:00:dc:46:d9:e2:ad:eb:17:50:
         08:b2:31:9e:87:54:eb:44:a0:3f:08:04:a8:d1:a7:08:53:c9:
         2c:36:c5:41:21:ce:e6:8a:3b:ec:cc:57:0b:e1:72:da:e6:db:
         16:af:f1:b6:c6:de:f9:50:8b:d7:57:6a:18:7f:92:90:aa:6b:
         08:d4:40:e9:2a:89:f8:41:9b:d9:a3:6e:49:ee:dc:f8:18:30:
         05:96:ee:ca:c2:c7:e1:20:cd:3a:98:50:35:4d:01:a6:1c:fe:
         40:78:0a:45:0f:7e:43:ac:53:b2:6c:f6:09:2d:7a:cb:c4:5b:
         87:00:1b:37:cc:5c:e0:4c:e9:d7:57:8d:99:90:07:aa:bb:26:
         3a:26:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:56 2025 by rpki-client