Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35382e302f32332d3233203d3e203631383130.roa
File:                     3230312e3135382e35382e302f32332d3233203d3e203631383130.roa (raw, json)
Hash identifier:          onlTOotObiM57+Tldu6oA/DjGPVqv9u+DLJQFtsIX6o=
Subject key identifier:   A9:64:A1:03:FF:A7:A7:C8:E7:E4:24:8E:A9:7C:C8:0D:C3:FE:0E:B1
Certificate issuer:       /CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
Certificate serial:       079B1BF5E0E92412E6DEF3F557410DEACC6B2211
Authority key identifier: C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35382e302f32332d3233203d3e203631383130.roa
Signing time:             Fri 19 Apr 2024 17:02:04 +0000
ROA not before:           Fri 19 Apr 2024 16:57:04 +0000
ROA not after:            Fri 18 Apr 2025 17:02:04 +0000
asID:                     61810
IP address blocks:        201.158.58.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9b:1b:f5:e0:e9:24:12:e6:de:f3:f5:57:41:0d:ea:cc:6b:22:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1D7B4D4776503EAD063C1F2B7498814CC2598BE
        Validity
            Not Before: Apr 19 16:57:04 2024 GMT
            Not After : Apr 18 17:02:04 2025 GMT
        Subject: CN=A964A103FFA7A7C8E7E4248EA97CC80DC3FE0EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:9a:29:f1:a2:f7:6e:18:a3:44:74:df:46:
                    85:08:29:b3:7a:a1:ce:45:36:c5:7f:06:4d:49:a0:
                    9e:74:83:90:30:b9:89:57:31:c7:75:b6:cc:09:dd:
                    ea:9e:d0:13:d5:02:f9:31:60:3b:84:76:cc:a5:eb:
                    46:b0:4e:bc:76:62:89:7c:d5:29:6c:4f:f0:41:ca:
                    65:9d:e3:bc:8d:88:fb:db:71:7e:86:48:9c:78:9d:
                    3f:35:08:69:22:64:e7:ce:be:e3:ff:d0:8d:9d:27:
                    30:d8:19:c2:b0:d2:5d:42:51:3d:7c:5e:0c:08:3c:
                    6c:15:60:ef:b9:0f:c4:f2:69:59:5d:c9:75:37:92:
                    45:53:ec:0e:b8:80:13:e0:f1:78:0e:69:f6:09:03:
                    e0:c6:5f:02:30:d8:ee:52:51:36:3e:c2:42:d1:67:
                    bd:06:2e:9e:a6:9a:07:51:1a:3f:e9:79:7f:a5:b3:
                    bf:af:41:c7:04:07:12:88:56:2c:a5:53:78:62:fb:
                    30:f9:5a:7e:6f:d7:d4:f2:53:aa:b0:cc:05:bb:93:
                    44:62:e0:54:66:4a:9d:6d:8d:fb:5e:b5:d9:91:3d:
                    42:0a:90:6b:73:97:24:e9:26:7e:12:3c:70:1a:37:
                    42:91:f7:1d:8d:30:9d:4a:95:db:23:8a:c3:87:d5:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:A1:03:FF:A7:A7:C8:E7:E4:24:8E:A9:7C:C8:0D:C3:FE:0E:B1
            X509v3 Authority Key Identifier:
                keyid:C1:D7:B4:D4:77:65:03:EA:D0:63:C1:F2:B7:49:88:14:CC:25:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1D7B4D4776503EAD063C1F2B7498814CC2598BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35382e302f32332d3233203d3e203631383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:ad:69:eb:19:b8:63:e4:bb:fe:ec:6b:30:cf:b9:57:7f:48:
         4a:8d:66:5d:e7:83:0c:db:9c:7d:7c:0c:22:f6:99:84:32:85:
         e4:3c:37:fb:92:21:e2:b1:d2:67:91:37:f9:ba:31:6d:9e:ab:
         e7:84:4b:ca:19:5b:ab:cc:cd:55:63:74:b4:34:7b:62:b8:a6:
         4c:c0:8e:8f:ba:fe:43:94:1a:eb:f2:70:5a:b0:1e:25:06:87:
         7b:98:ac:97:54:5b:40:c1:0e:79:09:fb:b3:ee:7b:b8:29:10:
         6a:78:3e:98:02:ba:57:09:b4:65:36:9d:49:5f:1c:fb:a2:81:
         53:64:ab:ff:ec:e2:80:77:b6:f2:4f:98:b0:91:b0:45:ff:9b:
         16:57:1d:c3:1f:cd:71:4c:85:b9:aa:b3:6b:ef:56:3a:97:24:
         1e:02:78:b6:87:63:1d:d6:dc:91:3e:58:dd:86:31:6f:7b:9a:
         45:3b:68:03:d9:76:92:81:1d:77:6b:cb:48:e1:a3:1c:22:83:
         35:88:36:c7:47:97:50:9b:3b:44:a0:75:3b:ae:50:83:c5:f8:
         0d:2e:50:ea:c5:9f:ae:ad:af:dd:ab:81:f7:91:d1:41:c9:48:
         1b:4d:8a:cb:28:1b:7e:0c:89:17:0f:29:d2:13:d2:0a:be:d8:
         85:b4:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org