Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32342d3234203d3e203631383130.roa
File:                     3230312e3135382e35362e302f32342d3234203d3e203631383130.roa (raw, json)
Hash identifier:          YneKtPrVPE6dJliAK8oFN93H/X1yxO+WzLKeuO4pTtc=
Subject key identifier:   1F:60:A2:26:95:3B:39:28:DA:7C:E0:4F:73:56:12:DB:D1:9C:88:AD
Certificate issuer:       /CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
Certificate serial:       6B4027AB3E97BB6EE1888DDC9E04F834BD89A7F9
Authority key identifier: C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32342d3234203d3e203631383130.roa
Signing time:             Fri 19 Apr 2024 17:02:01 +0000
ROA not before:           Fri 19 Apr 2024 16:57:01 +0000
ROA not after:            Fri 18 Apr 2025 17:02:01 +0000
asID:                     61810
IP address blocks:        201.158.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:40:27:ab:3e:97:bb:6e:e1:88:8d:dc:9e:04:f8:34:bd:89:a7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
        Validity
            Not Before: Apr 19 16:57:01 2024 GMT
            Not After : Apr 18 17:02:01 2025 GMT
        Subject: CN=1F60A226953B3928DA7CE04F735612DBD19C88AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:72:57:d5:1a:46:68:1b:4e:57:3b:e2:cc:
                    85:75:69:fd:79:55:ac:ee:e6:07:9c:60:38:af:62:
                    d4:fa:88:fa:c3:55:d5:b0:96:24:93:31:99:d6:d1:
                    ca:6a:bb:e7:67:88:c1:82:c1:f4:34:4d:96:3d:24:
                    4a:33:97:1e:32:49:7c:27:82:ff:16:fc:01:13:b3:
                    bd:d4:ea:e6:5a:50:1c:ca:aa:a3:a5:9d:9b:08:9f:
                    5b:e1:fc:6d:54:94:84:37:d6:63:b8:fa:b3:7f:90:
                    f9:95:5f:16:39:56:01:4a:aa:01:9e:3a:b3:ff:fb:
                    b5:bb:2c:e1:08:7b:40:8f:7a:b4:01:7b:d4:82:7d:
                    5e:dd:b8:95:65:23:7b:84:30:1f:07:39:34:bc:a6:
                    d2:24:75:5e:87:94:02:80:bd:e4:6b:ee:2c:26:32:
                    12:0b:8b:a1:c8:ab:31:c1:e4:4d:c6:ec:6a:a9:7e:
                    be:df:59:55:7b:3c:08:eb:e5:6e:d3:bd:5c:43:63:
                    9b:66:77:bd:56:06:ab:82:16:67:0c:5f:c2:91:77:
                    1e:d3:c8:eb:b5:8b:75:71:1a:97:e2:da:69:b9:88:
                    86:5f:be:b3:b8:f9:cf:b6:f6:b5:92:24:39:1f:e4:
                    ec:9a:3f:e9:84:21:d3:62:b9:3c:f9:a2:61:21:b6:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:60:A2:26:95:3B:39:28:DA:7C:E0:4F:73:56:12:DB:D1:9C:88:AD
            X509v3 Authority Key Identifier:
                keyid:C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32342d3234203d3e203631383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:7d:ab:f1:15:e8:02:ac:97:d0:11:c6:be:65:12:dc:9a:
         4d:1d:fa:14:ce:98:5c:2f:cb:44:75:f5:b7:36:f9:ab:9e:c7:
         46:7f:e5:4a:9a:05:77:0b:a2:8e:94:3b:67:9a:80:0a:94:36:
         0c:07:1b:03:86:40:d5:20:1c:ff:dc:c0:e6:a7:62:36:92:5a:
         a7:c7:35:02:72:ce:eb:4c:c4:12:9e:cd:3d:05:00:b9:98:d1:
         48:b9:a6:d5:d2:76:76:76:3f:b0:8d:e4:58:3d:b7:fe:c3:12:
         d2:17:3b:b0:d6:c7:b9:28:d2:02:c2:ad:ad:11:3c:b8:2c:3f:
         12:85:6e:8c:7b:27:5e:c1:20:2f:03:e4:42:c3:f9:0c:1f:b1:
         d3:ec:ae:0b:a3:3b:99:fe:99:97:86:40:74:cb:c6:24:fe:c7:
         a5:f6:92:3f:20:28:ce:e0:c3:eb:e6:a9:5f:b7:eb:4f:00:7c:
         8d:74:f6:46:b8:95:0f:d5:61:33:3e:64:e3:9c:69:68:b9:f6:
         71:a7:ca:0f:a3:7e:73:ea:59:25:cf:34:49:49:47:a3:e2:96:
         ed:0e:23:97:18:36:b7:ca:7e:f6:b7:a8:5e:2f:c8:16:97:6e:
         d4:11:c4:fc:c9:32:eb:47:01:b6:ee:e3:13:77:66:ac:03:45:
         2a:6d:b7:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa0Anqz6Xu27hiI3cngT4NL2Jp/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFEN0I0RDQ3NzY1MDNFQUQwNjNDMUYyQjc0OTg4MTRD
QzI1OThCRTAeFw0yNDA0MTkxNjU3MDFaFw0yNTA0MTgxNzAyMDFaMDMxMTAvBgNV
BAMTKDFGNjBBMjI2OTUzQjM5MjhEQTdDRTA0RjczNTYxMkRCRDE5Qzg4QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0C3JX1RpGaBtOVzvizIV1af15
Vazu5gecYDivYtT6iPrDVdWwliSTMZnW0cpqu+dniMGCwfQ0TZY9JEozlx4ySXwn
gv8W/AETs73U6uZaUBzKqqOlnZsIn1vh/G1UlIQ31mO4+rN/kPmVXxY5VgFKqgGe
OrP/+7W7LOEIe0CPerQBe9SCfV7duJVlI3uEMB8HOTS8ptIkdV6HlAKAveRr7iwm
MhILi6HIqzHB5E3G7Gqpfr7fWVV7PAjr5W7TvVxDY5tmd71WBquCFmcMX8KRdx7T
yOu1i3VxGpfi2mm5iIZfvrO4+c+29rWSJDkf5OyaP+mEIdNiuTz5omEhtryZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUH2CiJpU7OSjafOBPc1YS29GciK0wHwYDVR0j
BBgwFoAUwde01HdlA+rQY8Hyt0mIFMwlmL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFUbmltQTc1QXpQbVhON1NTMzZQYnphZ29GbmdoVnhqaVJ1eDJNS0Vu
ZkMvMC9DMUQ3QjRENDc3NjUwM0VBRDA2M0MxRjJCNzQ5ODgxNENDMjU5OEJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxRDdCNEQ0Nzc2NTAzRUFE
MDYzQzFGMkI3NDk4ODE0Q0MyNTk4QkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhVG5pbUE3NUF6UG1YTjdTUzM2UGJ6YWdvRm5naFZ4amlSdXgyTUtFbmZDLzAv
MzIzMDMxMmUzMTM1MzgyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyZ44MA0GCSqGSIb3DQEBCwUAA4IBAQBf7n2r8RXo
AqyX0BHGvmUS3JpNHfoUzphcL8tEdfW3NvmrnsdGf+VKmgV3C6KOlDtnmoAKlDYM
BxsDhkDVIBz/3MDmp2I2klqnxzUCcs7rTMQSns09BQC5mNFIuabV0nZ2dj+wjeRY
Pbf+wxLSFzuw1se5KNICwq2tETy4LD8ShW6MeydewSAvA+RCw/kMH7HT7K4LozuZ
/pmXhkB0y8Yk/sel9pI/ICjO4MPr5qlft+tPAHyNdPZGuJUP1WEzPmTjnGloufZx
p8oPo35z6lklzzRJSUej4pbtDiOXGDa3yn72t6heL8gWl27UEcT8yTLrRwG27uMT
d2asA0UqbbdV
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org