Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3132302e302f32322d3232203d3e203238323133.roa
File:                     3138392e3131332e3132302e302f32322d3232203d3e203238323133.roa (raw, json)
Hash identifier:          hHgD41E647DRPxq3Is7Ml+GWqQ+rVWgQQY9VHh1kaaE=
Subject key identifier:   5D:9E:41:A5:7E:8E:AC:93:CF:DE:2D:B2:EC:29:E5:29:19:4E:91:61
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       4E1D5CA0645E9F6CF6F833F82518AB3A4FCDEB7C
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3132302e302f32322d3232203d3e203238323133.roa
Signing time:             Thu 13 Jun 2024 13:48:42 +0000
ROA not before:           Thu 13 Jun 2024 13:43:42 +0000
ROA not after:            Thu 12 Jun 2025 13:48:42 +0000
asID:                     28213
IP address blocks:        189.113.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 12:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:5c:a0:64:5e:9f:6c:f6:f8:33:f8:25:18:ab:3a:4f:cd:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 13 13:43:42 2024 GMT
            Not After : Jun 12 13:48:42 2025 GMT
        Subject: CN=5D9E41A57E8EAC93CFDE2DB2EC29E529194E9161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:0d:86:ff:6d:bd:df:1a:c8:b6:96:0a:4e:
                    48:35:9c:a9:85:cc:91:31:76:cf:48:f1:5e:40:06:
                    04:06:4b:0c:6a:41:c9:86:97:de:9c:f7:32:24:c3:
                    3f:87:b7:ba:87:d0:be:bb:9e:fc:33:79:b4:d2:41:
                    3f:d8:da:ac:61:f5:51:a9:2f:88:d0:51:30:a1:b8:
                    06:36:12:5e:45:dd:08:ae:14:fa:c3:cd:51:83:f8:
                    d9:04:b9:84:69:df:2e:45:4d:4b:66:fc:d9:e3:ae:
                    d9:4c:71:1d:fa:dc:fb:d9:20:42:51:8d:b9:96:73:
                    79:16:c5:89:83:a8:ca:69:6f:fb:28:d7:5c:37:69:
                    26:8b:9e:c3:b1:cc:b3:13:4f:dc:9d:ef:15:a0:a3:
                    a4:3f:3f:88:76:e9:1b:ea:ac:2e:83:8e:21:2e:39:
                    d9:ac:79:5d:14:c0:f9:97:4d:8e:f5:73:cb:e3:e2:
                    b6:2a:9d:c5:67:10:74:0d:5e:7f:a7:b1:48:97:f8:
                    a1:fe:4f:56:14:33:da:5f:fd:cc:88:62:10:0e:e5:
                    1a:cc:3b:58:4c:42:92:45:4b:ad:13:13:b5:f0:0e:
                    a4:9a:de:fd:1f:56:7d:e4:b3:4f:20:0a:34:5e:9e:
                    f6:38:ff:08:fe:44:69:d5:e8:e0:8a:7a:6a:a1:63:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9E:41:A5:7E:8E:AC:93:CF:DE:2D:B2:EC:29:E5:29:19:4E:91:61
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3132302e302f32322d3232203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:46:d5:0a:49:17:d3:70:08:06:38:a4:0d:4b:65:bb:11:56:
         d8:1e:13:10:d4:5d:d1:54:04:1f:eb:18:38:4f:cd:21:b5:2b:
         c8:70:b7:8d:34:0e:0a:7e:69:be:6a:c6:b8:a4:14:27:2b:93:
         68:1d:86:a6:08:c3:19:f0:9c:ac:8b:70:e4:99:65:17:bf:6c:
         54:11:64:4a:61:4c:01:b8:bc:e8:95:76:73:24:0e:09:54:9b:
         fc:d2:b1:db:09:1c:55:51:03:77:90:39:22:e1:60:d7:4b:f7:
         58:89:80:eb:15:3b:d8:92:f3:ce:40:a7:d0:4d:de:73:39:e6:
         e8:12:76:bd:d3:e5:93:fe:20:af:19:df:fe:3c:f7:9a:c9:7d:
         cc:1d:e5:34:bb:4a:f7:bd:45:be:94:d3:54:51:f4:21:75:0e:
         36:f9:90:f7:ad:41:d7:ea:98:0e:a7:53:31:7c:85:90:6c:35:
         8b:99:a0:04:71:f9:5b:d6:3c:d5:a7:20:5d:0a:e6:ab:75:d2:
         43:90:83:3b:92:2e:d4:5a:53:b6:38:78:b3:d5:5d:37:b0:aa:
         fa:a4:fb:a2:f8:02:5a:c1:dd:50:06:b7:5c:a3:52:1e:af:f9:
         56:39:bb:d0:bf:73:b8:2d:4b:a8:dd:ab:97:cd:a1:ed:67:16:
         a1:e4:8d:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTh1coGRen2z2+DP4JRirOk/N63wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVGODE3QzREMzVBQkJDNjk4REQ5NzEyNTNCRDY0NTUx
MzFFNDgzQjAeFw0yNDA2MTMxMzQzNDJaFw0yNTA2MTIxMzQ4NDJaMDMxMTAvBgNV
BAMTKDVEOUU0MUE1N0U4RUFDOTNDRkRFMkRCMkVDMjlFNTI5MTk0RTkxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqQ2G/2293xrItpYKTkg1nKmF
zJExds9I8V5ABgQGSwxqQcmGl96c9zIkwz+Ht7qH0L67nvwzebTSQT/Y2qxh9VGp
L4jQUTChuAY2El5F3QiuFPrDzVGD+NkEuYRp3y5FTUtm/NnjrtlMcR363PvZIEJR
jbmWc3kWxYmDqMppb/so11w3aSaLnsOxzLMTT9yd7xWgo6Q/P4h26RvqrC6DjiEu
OdmseV0UwPmXTY71c8vj4rYqncVnEHQNXn+nsUiX+KH+T1YUM9pf/cyIYhAO5RrM
O1hMQpJFS60TE7XwDqSa3v0fVn3ks08gCjRenvY4/wj+RGnV6OCKemqhYyeNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXZ5BpX6OrJPP3i2y7CnlKRlOkWEwHwYDVR0j
BBgwFoAUXvgXxNNau8aY3ZcSU71kVRMeSDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0wxNTh6VW5HQ0JDTml0b1FZYVpHakRydzJqcW5zcUQ3TnlTeDlUZ2VM
UnUvMS81RUY4MTdDNEQzNUFCQkM2OThERDk3MTI1M0JENjQ1NTEzMUU0ODNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFRjgxN0M0RDM1QUJCQzY5
OEREOTcxMjUzQkQ2NDU1MTMxRTQ4M0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NMMTU4elVuR0NCQ05pdG9RWWFaR2pEcncyanFuc3FEN055U3g5VGdlTFJ1LzEv
MzEzODM5MmUzMTMxMzMyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9cXgwDQYJKoZIhvcNAQELBQADggEBAAJG1QpJ
F9NwCAY4pA1LZbsRVtgeExDUXdFUBB/rGDhPzSG1K8hwt400Dgp+ab5qxrikFCcr
k2gdhqYIwxnwnKyLcOSZZRe/bFQRZEphTAG4vOiVdnMkDglUm/zSsdsJHFVRA3eQ
OSLhYNdL91iJgOsVO9iS885Ap9BN3nM55ugSdr3T5ZP+IK8Z3/4895rJfcwd5TS7
Sve9Rb6U01RR9CF1Djb5kPetQdfqmA6nUzF8hZBsNYuZoARx+VvWPNWnIF0K5qt1
0kOQgzuSLtRaU7Y4eLPVXTewqvqk+6L4AlrB3VAGt1yjUh6v+VY5u9C/c7gtS6jd
q5fNoe1nFqHkjZA=
-----END CERTIFICATE-----
Generated at Thu Jul 18 16:37:40 2024 by rpki-client on console-fra.rpki-client.org