Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31352e302f32342d3234203d3e203631393336.roa
File:                     3230312e3135382e31352e302f32342d3234203d3e203631393336.roa (raw, json)
Hash identifier:          LSBvwR4NUXKB4uu0pLp9DfZKsuWIqAig3kQ01uPO2Rc=
Subject key identifier:   E5:3A:4E:5C:A2:D7:AD:19:93:B7:15:1F:96:63:AC:6E:6F:FD:68:0F
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       188A5D0FA50A2B7EAEE317835FE2D8517B2E5ED9
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31352e302f32342d3234203d3e203631393336.roa
Signing time:             Thu 18 Apr 2024 14:39:17 +0000
ROA not before:           Thu 18 Apr 2024 14:34:17 +0000
ROA not after:            Thu 17 Apr 2025 14:39:17 +0000
asID:                     61936
IP address blocks:        201.158.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8a:5d:0f:a5:0a:2b:7e:ae:e3:17:83:5f:e2:d8:51:7b:2e:5e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Apr 18 14:34:17 2024 GMT
            Not After : Apr 17 14:39:17 2025 GMT
        Subject: CN=E53A4E5CA2D7AD1993B7151F9663AC6E6FFD680F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:ba:02:09:57:07:9b:98:ce:6b:50:32:40:
                    6e:ae:90:71:10:ff:39:d4:9e:29:b2:f2:4e:2d:8a:
                    60:a0:b3:29:70:c5:de:da:80:d3:e1:3b:9f:e9:01:
                    aa:c4:27:d4:57:65:60:c1:23:99:c6:c5:51:09:80:
                    8d:51:75:1c:35:93:4d:ed:5b:4e:e5:ff:ef:26:86:
                    bb:7c:b6:92:40:f4:ef:6c:8f:5a:a5:a2:5e:02:1d:
                    4c:9e:c4:22:cd:e5:d4:27:d8:05:ec:1a:2f:98:ea:
                    1c:8f:b3:41:15:3f:a7:26:7f:bc:02:77:39:ec:c1:
                    ce:bb:8a:e7:9a:79:46:bb:ed:ca:d6:8c:ed:09:b5:
                    7d:f8:20:88:44:02:9e:60:8c:bb:f2:a8:a7:d0:7e:
                    db:31:8a:b7:50:6a:7c:48:a7:f5:3a:f1:43:56:eb:
                    4e:fa:36:2f:d7:79:57:37:2d:e1:46:02:00:95:06:
                    93:19:4c:c3:af:3d:2e:9d:9f:e3:ef:ba:06:ac:7d:
                    dc:c5:2a:65:79:fc:29:82:c0:4d:5a:b6:c3:85:0c:
                    b5:bd:13:85:cc:bf:e5:2a:a4:6c:cb:b2:8e:46:4b:
                    85:4e:1e:17:00:a1:a6:9a:75:31:62:eb:38:43:9a:
                    35:14:a0:47:2c:47:5a:03:d1:dd:e8:fb:12:dc:bb:
                    76:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:4E:5C:A2:D7:AD:19:93:B7:15:1F:96:63:AC:6E:6F:FD:68:0F
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31352e302f32342d3234203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:36:62:00:02:bf:8e:22:85:ec:c8:9c:bd:05:7c:8e:81:7b:
         77:85:6b:b1:36:1c:80:83:7d:f1:a2:67:94:4d:4f:14:3f:d7:
         d7:e3:87:46:ca:58:5d:f0:cc:4e:1a:37:61:57:db:c9:90:f3:
         f0:24:46:5e:ed:43:04:5e:f7:25:0c:19:00:47:81:ea:c2:27:
         7b:8c:4d:af:15:f7:84:4b:24:b6:62:2a:e1:40:07:5b:a3:9f:
         e6:f4:c4:2a:0b:fa:fb:df:70:42:a9:15:d8:b9:77:44:f3:92:
         63:1c:c5:58:a3:ab:70:01:16:9c:60:ca:95:4e:6a:2d:9b:04:
         17:1e:82:91:3c:9e:e8:51:ad:b0:b2:2c:03:ca:06:16:b9:0c:
         4a:26:a0:b6:60:d6:d7:82:fd:07:82:e3:f0:8f:9c:00:0b:75:
         65:90:af:d4:83:fa:b6:20:32:e3:df:03:53:95:95:32:d7:c2:
         99:92:f5:92:c0:92:c5:4d:b4:b7:61:60:d1:f6:59:9f:56:95:
         2f:2b:c0:d6:df:29:1b:86:e3:79:a7:c1:28:d3:e6:50:03:f5:
         1d:ad:0b:9d:b3:c0:7a:0e:fd:ed:15:76:0f:6d:b3:ec:6d:ba:
         fb:2e:4b:b0:db:4c:63:5a:32:dd:19:c0:0c:40:11:fc:3c:2d:
         20:a2:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org