Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131382e302f32332d3233203d3e203238323133.roa
File:                     3138392e3131332e3131382e302f32332d3233203d3e203238323133.roa (raw, json)
Hash identifier:          Y6SHFccHjy9SeVbMwXI82DZQ/lI+C+gLgJmNckc+7Fg=
Subject key identifier:   06:1A:4D:C5:3C:C2:03:7A:0B:88:72:0C:72:09:3C:E0:F8:8B:A4:BD
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       328A9200821D6DED71FA4C2974884D28275B7149
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131382e302f32332d3233203d3e203238323133.roa
Signing time:             Thu 13 Jun 2024 13:48:32 +0000
ROA not before:           Thu 13 Jun 2024 13:43:32 +0000
ROA not after:            Thu 12 Jun 2025 13:48:32 +0000
asID:                     28213
IP address blocks:        189.113.118.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 19:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8a:92:00:82:1d:6d:ed:71:fa:4c:29:74:88:4d:28:27:5b:71:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 13 13:43:32 2024 GMT
            Not After : Jun 12 13:48:32 2025 GMT
        Subject: CN=061A4DC53CC2037A0B88720C72093CE0F88BA4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:8c:a3:f3:22:10:0a:80:84:4a:61:dd:cb:
                    ce:1c:74:cb:a8:70:7c:84:25:15:43:ed:18:60:59:
                    93:d6:aa:3e:f1:64:ca:f0:78:3f:70:14:0d:61:2e:
                    5d:ae:9f:9c:1f:4c:56:65:d4:07:10:78:47:60:87:
                    4a:76:e3:82:d3:62:00:77:ef:84:20:3d:33:76:66:
                    8f:f6:5c:30:02:4b:9b:4d:b6:4d:b9:f3:33:98:65:
                    09:97:98:27:ef:78:ca:48:48:59:cc:a1:e9:d3:af:
                    38:3f:0b:b3:44:73:72:c3:12:e9:54:ab:d1:ce:01:
                    ef:b2:f8:d6:f4:d7:01:c7:db:b5:40:ee:9f:10:f0:
                    6b:87:4d:63:cb:6e:04:69:09:ff:d9:aa:75:7d:90:
                    c5:93:8c:97:d5:15:e6:33:b4:a2:89:05:36:37:88:
                    4a:48:87:8c:7d:b0:0e:3e:d8:b5:04:d9:8a:2e:cc:
                    df:ac:15:81:89:0d:2a:3e:c0:7a:bd:cd:83:00:9c:
                    4d:51:ca:45:7a:e3:a5:96:d6:22:b8:2b:b2:a8:16:
                    a9:39:1b:12:b2:b7:88:ec:0d:a4:e6:ba:27:b2:45:
                    28:4d:74:74:47:88:59:62:0a:dc:c6:88:98:da:d8:
                    ee:38:41:ac:84:78:e6:40:8b:67:f7:69:5b:ea:8d:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1A:4D:C5:3C:C2:03:7A:0B:88:72:0C:72:09:3C:E0:F8:8B:A4:BD
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131382e302f32332d3233203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:72:25:b0:c9:9b:82:6d:93:e5:8a:4e:d0:8d:08:3f:37:a6:
         eb:c4:b6:e7:a3:f1:41:7d:0a:bf:c2:c9:55:3b:26:fc:b3:29:
         a7:26:24:4d:4d:cb:0f:95:47:88:2c:a6:0a:93:a0:3b:09:36:
         b1:02:24:0d:21:6d:e6:38:a5:4a:5d:1f:e7:cc:01:7b:13:4d:
         48:ba:3a:de:98:8e:6c:68:59:40:09:1f:1b:4a:8e:00:49:13:
         01:18:31:4d:6b:81:1d:82:e6:4c:a5:66:88:3d:1a:68:2a:94:
         c2:32:35:2d:21:95:4e:93:db:8b:b6:a8:6a:0e:85:75:f9:59:
         cd:05:5b:48:ad:1e:31:f2:bf:5c:e8:6c:2e:55:71:12:3c:eb:
         bb:f3:c0:13:53:d1:1b:72:8b:e2:2d:d6:b4:02:f2:f4:d3:10:
         6e:2f:3c:24:af:d1:72:db:ae:b5:40:cd:20:6b:26:ed:f2:a6:
         fe:1b:75:b3:6d:43:ca:1b:b6:75:7b:83:3c:fb:6c:8c:40:49:
         a3:85:1c:ae:2f:b4:26:e2:5c:5a:c7:a9:db:52:9a:92:29:ec:
         ae:4c:82:1d:a2:02:f9:80:46:93:44:68:b1:50:0f:06:4b:5e:
         f1:c5:a8:eb:56:e5:fd:b9:77:a7:98:2f:ec:63:17:f7:f8:40:
         26:f6:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----