Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32342d3234203d3e20323633343530.roa
File:                     3136382e3233322e3135362e302f32342d3234203d3e20323633343530.roa (raw, json)
Hash identifier:          BSjH48YO8noFiZVr6JTf8MmFY+cQoc2PFq31DBGeQkI=
Subject key identifier:   4E:03:67:8D:F8:B6:D7:1D:86:1B:07:73:74:FC:A6:BC:0A:34:78:A6
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       3200A3D01F23EBD1F85597DA9046A26C21205062
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32342d3234203d3e20323633343530.roa
Signing time:             Wed 24 Apr 2024 19:07:46 +0000
ROA not before:           Wed 24 Apr 2024 19:02:46 +0000
ROA not after:            Wed 23 Apr 2025 19:07:46 +0000
asID:                     263450
IP address blocks:        168.232.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:a3:d0:1f:23:eb:d1:f8:55:97:da:90:46:a2:6c:21:20:50:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Apr 24 19:02:46 2024 GMT
            Not After : Apr 23 19:07:46 2025 GMT
        Subject: CN=4E03678DF8B6D71D861B077374FCA6BC0A3478A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:97:bd:73:aa:14:70:8c:36:eb:da:e4:cc:bd:
                    55:05:51:35:2d:63:f1:fe:51:f4:c4:ba:76:f8:b2:
                    81:34:be:a1:84:b3:83:86:e0:4f:45:7a:80:b1:47:
                    e9:c0:c5:dc:4e:4e:df:b8:2c:0b:23:4c:f3:e3:b3:
                    98:6a:3d:0c:fc:2f:7c:20:53:07:a4:b9:dc:f4:cc:
                    af:78:a0:c5:f3:72:99:3f:71:7d:e6:c1:c7:67:79:
                    14:0e:6c:2f:0a:85:15:b5:f5:63:8f:88:77:a6:32:
                    3c:74:14:de:2a:37:b1:50:ec:6a:b9:d7:30:b5:2b:
                    b2:b2:2d:d3:60:2c:4d:96:d4:23:4d:a8:9b:72:48:
                    b1:22:43:c5:1a:26:8c:85:d3:9d:ba:fe:ec:30:5a:
                    f7:e2:4d:a5:32:2d:a2:e7:60:8a:0c:a3:14:a9:af:
                    9b:85:f0:07:91:6a:db:3d:3a:8f:a1:61:86:09:22:
                    f5:3c:2e:dd:98:76:07:f9:6f:1c:57:b3:90:01:e4:
                    32:3d:0e:f7:cd:a8:f0:0c:b8:d7:53:25:76:4e:1a:
                    9c:96:6c:5e:da:de:92:ef:c3:c3:32:a0:03:b9:86:
                    d5:1d:e0:40:b6:dd:d2:f5:e5:88:50:c0:a9:29:85:
                    89:b2:ce:e4:b1:c3:08:27:f6:83:3b:fc:05:02:b0:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:67:8D:F8:B6:D7:1D:86:1B:07:73:74:FC:A6:BC:0A:34:78:A6
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32342d3234203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:06:94:cb:7a:9d:0d:e9:00:40:6d:22:32:83:a0:7a:62:
         ac:3d:b4:81:14:a3:c6:fd:73:7c:ff:e4:27:d9:04:a3:3b:7a:
         52:e6:4a:3c:96:08:e0:26:22:7d:02:95:c4:21:91:e7:82:5d:
         c0:8b:70:6d:e4:31:0a:13:bd:d4:ee:40:59:1d:53:9f:34:ef:
         f7:dd:b2:3a:18:9f:a3:8b:73:25:94:0b:15:07:35:67:1b:c4:
         ca:7e:6b:d8:48:1b:0f:c4:ad:7b:40:61:82:d7:5b:ab:2c:ea:
         96:60:a2:9e:b8:64:1b:53:9f:9a:a6:ad:ac:e5:87:2c:eb:40:
         58:c9:79:6e:29:a1:d1:3d:a5:82:2f:20:37:c5:90:c5:33:43:
         ad:95:ac:4c:34:63:94:96:ec:95:a5:6d:e6:f7:07:b9:0a:0e:
         0e:ae:b5:8d:5e:18:c8:df:0f:0a:69:28:7a:77:a7:96:fe:75:
         da:a5:aa:3b:f7:00:cd:7f:8d:de:4b:46:76:d1:be:13:7c:7e:
         b5:68:03:f0:08:cd:37:dd:61:bf:bc:74:79:76:b5:62:de:d2:
         e4:c1:44:8d:24:cb:66:d4:a0:56:70:3f:60:37:20:bc:31:cd:
         05:6d:c6:b9:17:c5:d9:00:0f:2f:3a:72:9c:3d:5e:6e:80:cf:
         64:21:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org