Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139342e302f32342d3234203d3e20323637353330.roa
File:                     3230312e3138322e3139342e302f32342d3234203d3e20323637353330.roa (raw, json)
Hash identifier:          zq50bst7lQL5uPP6OH6LwVBAvTqeiiS3lj3hoWxC1v8=
Subject key identifier:   59:BD:C8:D4:95:12:04:86:D6:62:2B:04:7B:7F:48:50:3D:19:11:EB
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       4B492E3B89984BAB57287E3C31686ED1194F6DCF
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139342e302f32342d3234203d3e20323637353330.roa
Signing time:             Wed 24 Apr 2024 12:14:21 +0000
ROA not before:           Wed 24 Apr 2024 12:09:21 +0000
ROA not after:            Wed 23 Apr 2025 12:14:21 +0000
asID:                     267530
IP address blocks:        201.182.194.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:49:2e:3b:89:98:4b:ab:57:28:7e:3c:31:68:6e:d1:19:4f:6d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Apr 24 12:09:21 2024 GMT
            Not After : Apr 23 12:14:21 2025 GMT
        Subject: CN=59BDC8D495120486D6622B047B7F48503D1911EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:71:ec:4a:3a:b7:03:96:61:7f:d6:07:ea:
                    0a:fe:38:dc:0a:52:cc:4e:b5:a3:65:83:26:58:c4:
                    ac:fb:cd:96:2f:62:a2:eb:ce:ac:f8:0d:60:fb:59:
                    9b:27:91:ea:c0:3f:a4:ad:1a:b5:ea:5f:83:78:6d:
                    2d:b6:94:87:b7:41:d6:9b:84:d4:39:d7:7f:45:3e:
                    21:f6:03:d8:78:ed:14:79:b1:b7:57:a8:67:09:bb:
                    21:0d:bf:48:47:60:73:2c:5f:c6:fc:ba:74:32:b1:
                    d5:12:47:00:3c:13:b8:52:72:bb:03:23:84:f5:bc:
                    43:23:13:7f:1b:b0:18:07:c2:37:d1:38:29:29:3d:
                    13:33:13:a0:e5:cc:73:13:79:9a:aa:d7:78:6d:6e:
                    0f:8f:10:d3:4a:2e:67:9a:ff:79:3e:9d:2a:38:b1:
                    73:94:0f:8a:96:b2:0d:6c:33:11:43:2c:0d:ea:a9:
                    c4:cc:88:4a:b3:91:36:9c:06:a1:8a:e1:f6:82:c3:
                    7a:4c:7e:f8:90:fa:5d:58:cb:ec:10:15:f1:cb:95:
                    cd:aa:29:67:98:8f:05:d2:69:a9:43:0e:dc:f9:78:
                    68:fb:48:a5:2e:e1:dc:3c:c4:d7:bb:2e:d1:d3:66:
                    d5:ae:05:74:96:d7:9f:72:3f:e7:68:7e:bb:e9:ab:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:C8:D4:95:12:04:86:D6:62:2B:04:7B:7F:48:50:3D:19:11:EB
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139342e302f32342d3234203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:32:00:c4:a7:e6:2b:a3:e7:7a:98:37:45:31:88:92:a1:
         50:52:7d:e0:ec:00:cf:b7:e4:5d:fc:fe:21:d3:7d:5c:2d:aa:
         de:d0:40:96:fe:fe:e1:bb:33:6a:e0:e5:7a:82:db:13:41:fc:
         d6:b6:18:3c:ba:eb:0a:85:fe:31:4c:51:e9:65:84:9a:cd:ff:
         e7:d5:8f:d7:e3:70:17:75:e5:75:e8:e7:a3:bb:05:b7:5f:7b:
         42:b2:c0:82:66:23:b7:97:28:5d:d4:4b:e5:08:17:ed:0f:13:
         c9:9e:40:79:a3:63:61:8b:d7:0b:0d:dc:ce:9c:eb:9c:72:4b:
         8a:7b:38:50:40:41:d2:ed:54:fd:bf:b4:61:4d:a0:36:39:58:
         f3:06:c8:0c:83:1d:8a:82:b5:48:5d:2c:6c:f5:a5:8f:17:94:
         36:9b:2d:fe:37:f7:d4:67:f4:d4:f9:67:53:fa:93:e2:8a:bd:
         fa:e5:2d:4b:e3:1c:eb:b4:43:42:2f:7a:b6:99:7d:56:d9:1e:
         3e:dd:83:fc:55:0b:43:db:30:f2:13:e2:69:bf:9e:43:30:e6:
         81:bb:29:bb:be:cc:59:a5:77:8f:ed:34:1e:9e:98:c8:a3:39:
         0e:d1:7b:c6:a6:54:91:a5:b6:f6:d0:16:4a:24:47:9a:72:3f:
         cd:4d:2a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:51 2025 by rpki-client