Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139352e302f32342d3234203d3e20323637353330.roa
File:                     3230312e3138322e3139352e302f32342d3234203d3e20323637353330.roa (raw, json)
Hash identifier:          AcL9aPVUJG1C8Usp9NsOP3gVstSZjaEBm55s/fe/F88=
Subject key identifier:   09:F6:89:4A:98:55:50:77:2F:C3:30:4F:F3:10:51:C7:DC:19:20:15
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       3842A06B81405F80150711B5CDD4EE244F04564B
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139352e302f32342d3234203d3e20323637353330.roa
Signing time:             Wed 24 Apr 2024 12:14:25 +0000
ROA not before:           Wed 24 Apr 2024 12:09:25 +0000
ROA not after:            Wed 23 Apr 2025 12:14:25 +0000
asID:                     267530
IP address blocks:        201.182.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:42:a0:6b:81:40:5f:80:15:07:11:b5:cd:d4:ee:24:4f:04:56:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Apr 24 12:09:25 2024 GMT
            Not After : Apr 23 12:14:25 2025 GMT
        Subject: CN=09F6894A985550772FC3304FF31051C7DC192015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c4:32:79:43:41:e9:58:c1:92:e3:f7:aa:87:
                    d3:07:61:dd:93:ed:47:b3:bf:60:c4:2c:0b:ca:bb:
                    c4:0b:08:3d:61:0e:f7:11:85:b2:f9:d5:b2:c2:4c:
                    8e:f3:fc:73:1a:09:5f:18:48:c0:8f:88:5f:ef:18:
                    14:4b:97:57:a0:a5:68:52:0f:82:7b:7a:d7:2e:fd:
                    96:27:79:eb:13:12:ea:fe:c6:5c:26:99:4b:a6:99:
                    57:ef:dc:aa:5f:0a:33:b4:28:67:d2:79:b9:67:81:
                    03:5e:be:ce:f6:97:28:b8:5d:70:0e:a2:cb:f7:52:
                    52:f6:13:f9:49:2b:d9:b2:34:98:16:e9:68:84:67:
                    7d:20:06:c7:a4:e2:c0:ee:70:52:b9:49:07:c4:1d:
                    03:9d:9b:9a:99:70:35:5d:89:0a:fd:c3:27:2a:7f:
                    80:b7:6a:7e:83:6c:6f:fe:ef:7c:98:5c:c2:24:ef:
                    d1:39:63:54:fe:f3:df:94:1f:1f:cb:9a:de:26:cb:
                    c3:a5:c9:f4:be:3b:20:99:ca:2c:36:e5:31:ef:e5:
                    cd:5c:c4:73:1f:8e:e3:44:ce:81:ba:c0:71:97:93:
                    49:de:11:25:14:a1:a8:65:df:30:b1:88:26:80:d2:
                    68:b1:4a:e3:87:aa:a0:c2:87:cc:d8:86:60:24:b3:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:89:4A:98:55:50:77:2F:C3:30:4F:F3:10:51:C7:DC:19:20:15
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139352e302f32342d3234203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e9:f1:00:50:ff:01:6a:d4:93:5c:02:55:0a:75:f8:71:f0:
         39:ae:f7:c3:a6:4a:47:aa:c4:e9:56:ce:b5:64:b3:60:7a:ec:
         a7:2c:dc:c9:5a:ab:6c:2e:22:53:4f:63:53:b2:41:00:1e:35:
         89:68:16:5e:ba:fb:a8:f4:d5:03:18:c0:6b:74:2f:4a:8b:93:
         55:53:a4:e4:d0:a6:f3:41:3d:22:52:32:46:3b:f7:52:57:e6:
         c9:cd:c0:b5:c6:8c:ed:67:1e:73:79:0c:3c:f7:f3:76:1c:b0:
         ca:e1:a6:a2:61:e1:f8:56:20:af:22:03:51:c6:aa:06:bc:f9:
         2b:12:69:46:df:33:e5:d1:90:2a:76:22:44:06:c3:08:f4:5c:
         e4:90:e7:ad:85:cf:61:0a:9f:39:44:41:87:52:33:17:96:fb:
         74:50:b4:71:2b:cc:47:f2:ce:8d:1c:84:0c:69:23:dd:91:4d:
         89:0f:aa:52:07:fe:60:02:25:7b:dd:df:1c:d8:dc:89:58:d5:
         98:f7:66:d3:ef:e0:27:01:40:5b:1d:01:66:10:cb:fa:1c:a5:
         ff:d7:5f:b4:74:f8:2e:aa:21:da:60:2a:c3:f7:8e:d2:7d:2e:
         7e:05:62:58:d6:37:ed:0e:b6:3f:f7:8d:ff:ca:cd:a5:9f:da:
         90:70:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org