Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3136382e3138312e342e302f32322d3332203d3e203238323133.roa
File:                     3136382e3138312e342e302f32322d3332203d3e203238323133.roa (raw, json)
Hash identifier:          OusFjQKLKtXslBxb9qwq/VIi/XxXccnhE0Q2vYTu4Zg=
Subject key identifier:   FC:FE:15:30:28:C8:99:8B:7A:3E:46:67:52:27:C8:2C:D6:2F:BE:3A
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       32B4D9A9F2B64BF8EF1A1D4DA9A71430C016593A
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3136382e3138312e342e302f32322d3332203d3e203238323133.roa
Signing time:             Mon 15 Jul 2024 14:57:44 +0000
ROA not before:           Mon 15 Jul 2024 14:52:44 +0000
ROA not after:            Mon 14 Jul 2025 14:57:44 +0000
asID:                     28213
IP address blocks:        168.181.4.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 12:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b4:d9:a9:f2:b6:4b:f8:ef:1a:1d:4d:a9:a7:14:30:c0:16:59:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jul 15 14:52:44 2024 GMT
            Not After : Jul 14 14:57:44 2025 GMT
        Subject: CN=FCFE153028C8998B7A3E46675227C82CD62FBE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:c3:63:f0:97:a9:74:cf:35:d5:1b:50:e9:
                    1e:14:b0:79:5e:93:d5:25:1c:c2:7f:47:be:60:b2:
                    ab:96:cd:24:c3:1c:25:28:42:14:89:31:73:16:a3:
                    79:75:3e:69:00:73:1d:4b:5c:cf:54:3a:38:34:8a:
                    48:ca:7c:6d:70:0e:71:b4:81:bc:92:2d:18:30:a0:
                    de:a2:7d:f6:a9:78:10:2e:03:9d:87:f8:af:2f:26:
                    0a:d6:1d:f0:79:aa:e2:cf:47:b2:55:37:31:a9:4f:
                    f6:45:e3:1d:d3:88:c0:99:7d:71:69:f2:ad:82:06:
                    74:a6:64:61:61:86:cf:ac:34:0a:ec:72:8b:c1:cc:
                    09:03:b4:a4:b9:9f:2e:26:19:24:53:de:b0:7b:2c:
                    42:2a:2a:51:f3:f4:ec:a9:14:23:d2:9f:82:13:cf:
                    03:42:e0:ba:e9:3b:d0:2a:33:22:a4:47:7f:7c:b7:
                    e3:9b:ff:11:15:8e:49:09:84:94:ff:4c:f0:b7:6a:
                    f1:53:eb:af:55:37:87:cf:03:99:1e:9b:ba:3d:40:
                    09:c7:a3:bd:44:b9:53:e2:f3:46:d8:d6:d4:06:90:
                    db:44:42:c9:5b:35:6d:8c:89:7c:c4:f2:37:e3:79:
                    a9:40:f8:a8:31:fe:1d:66:67:ab:65:a7:2c:8f:02:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FE:15:30:28:C8:99:8B:7A:3E:46:67:52:27:C8:2C:D6:2F:BE:3A
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3136382e3138312e342e302f32322d3332203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:25:b6:b9:58:e0:43:ed:bf:21:ad:f4:4b:2a:b5:84:a8:28:
         50:1a:d6:e0:90:ea:95:53:8d:de:68:e8:d0:e1:54:07:1a:98:
         ce:66:44:5f:94:1a:0a:8b:88:95:bc:93:8a:7a:e8:27:47:b8:
         d8:fe:5c:dd:a1:f4:c8:33:39:d6:9f:91:fd:37:55:81:c1:b9:
         a2:12:ec:cd:c7:2b:ce:07:19:6a:03:23:a3:df:92:3b:81:47:
         bc:68:63:ec:3b:5b:72:48:40:50:10:75:bc:c7:de:b2:85:48:
         c8:38:83:aa:fb:f5:7b:83:12:ab:be:f2:0c:26:b2:00:56:09:
         e6:1b:4c:40:13:66:dd:80:bf:a6:bb:31:38:4f:a6:a3:19:e8:
         9f:d0:8b:ef:3b:68:f6:af:65:62:e0:de:c9:f4:85:2a:72:f4:
         5a:66:f1:9a:33:b6:65:a0:c2:7b:b1:cf:73:7e:01:2e:32:e9:
         08:bb:2f:82:0a:a4:09:dc:f6:fe:34:0a:51:b1:79:a3:c6:e9:
         ce:62:b9:dc:69:8b:8c:ac:af:0e:ef:21:6f:2e:b1:02:cc:f0:
         7c:c3:38:62:58:a6:62:96:10:3f:d4:40:79:85:d5:5a:c8:6b:
         5b:b1:5b:8c:a8:a3:f5:3c:db:00:af:c6:0e:63:fc:80:24:40:
         76:4b:37:7d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMrTZqfK2S/jvGh1NqacUMMAWWTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVGODE3QzREMzVBQkJDNjk4REQ5NzEyNTNCRDY0NTUx
MzFFNDgzQjAeFw0yNDA3MTUxNDUyNDRaFw0yNTA3MTQxNDU3NDRaMDMxMTAvBgNV
BAMTKEZDRkUxNTMwMjhDODk5OEI3QTNFNDY2NzUyMjdDODJDRDYyRkJFM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAR8Nj8JepdM811RtQ6R4UsHle
k9UlHMJ/R75gsquWzSTDHCUoQhSJMXMWo3l1PmkAcx1LXM9UOjg0ikjKfG1wDnG0
gbySLRgwoN6iffapeBAuA52H+K8vJgrWHfB5quLPR7JVNzGpT/ZF4x3TiMCZfXFp
8q2CBnSmZGFhhs+sNArscovBzAkDtKS5ny4mGSRT3rB7LEIqKlHz9OypFCPSn4IT
zwNC4LrpO9AqMyKkR398t+Ob/xEVjkkJhJT/TPC3avFT669VN4fPA5kem7o9QAnH
o71EuVPi80bY1tQGkNtEQslbNW2MiXzE8jfjealA+Kgx/h1mZ6tlpyyPAjX/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/P4VMCjImYt6PkZnUifILNYvvjowHwYDVR0j
BBgwFoAUXvgXxNNau8aY3ZcSU71kVRMeSDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0wxNTh6VW5HQ0JDTml0b1FZYVpHakRydzJqcW5zcUQ3TnlTeDlUZ2VM
UnUvMS81RUY4MTdDNEQzNUFCQkM2OThERDk3MTI1M0JENjQ1NTEzMUU0ODNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFRjgxN0M0RDM1QUJCQzY5
OEREOTcxMjUzQkQ2NDU1MTMxRTQ4M0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NMMTU4elVuR0NCQ05pdG9RWWFaR2pEcncyanFuc3FEN055U3g5VGdlTFJ1LzEv
MzEzNjM4MmUzMTM4MzEyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzODMy
MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqi1BDANBgkqhkiG9w0BAQsFAAOCAQEAASW2uVjgQ+2/
Ia30Syq1hKgoUBrW4JDqlVON3mjo0OFUBxqYzmZEX5QaCouIlbyTinroJ0e42P5c
3aH0yDM51p+R/TdVgcG5ohLszccrzgcZagMjo9+SO4FHvGhj7DtbckhAUBB1vMfe
soVIyDiDqvv1e4MSq77yDCayAFYJ5htMQBNm3YC/prsxOE+moxnon9CL7zto9q9l
YuDeyfSFKnL0WmbxmjO2ZaDCe7HPc34BLjLpCLsvggqkCdz2/jQKUbF5o8bpzmK5
3GmLjKyvDu8hby6xAszwfMM4YlimYpYQP9RAeYXVWshrW7FbjKij9TzbAK/GDmP8
gCRAdks3fQ==
-----END CERTIFICATE-----
Generated at Thu Jul 18 16:37:40 2024 by rpki-client on console-fra.rpki-client.org