Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135372e302f32342d3234203d3e20323633343530.roa
File:                     3136382e3233322e3135372e302f32342d3234203d3e20323633343530.roa (raw, json)
Hash identifier:          RagpS/Sh51CNDxTuKzDSnTSXPisYO7B0Em8D7kj7kuQ=
Subject key identifier:   F0:68:40:05:FA:02:FD:37:1A:B8:53:A5:55:AD:5F:E6:68:03:65:88
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       0F8F8EA721654CDC024E18186775345A71874AC7
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135372e302f32342d3234203d3e20323633343530.roa
Signing time:             Wed 24 Apr 2024 19:07:48 +0000
ROA not before:           Wed 24 Apr 2024 19:02:48 +0000
ROA not after:            Wed 23 Apr 2025 19:07:48 +0000
asID:                     263450
IP address blocks:        168.232.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8f:8e:a7:21:65:4c:dc:02:4e:18:18:67:75:34:5a:71:87:4a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Apr 24 19:02:48 2024 GMT
            Not After : Apr 23 19:07:48 2025 GMT
        Subject: CN=F0684005FA02FD371AB853A555AD5FE668036588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:27:91:7a:1a:49:80:6b:e4:e9:f2:c8:1f:
                    51:fa:0d:0a:09:99:9e:a2:64:af:a2:ca:33:6e:87:
                    2e:c4:30:b1:08:50:bb:36:21:b8:1b:1b:77:fd:b7:
                    e9:af:3d:d5:dd:5d:21:b3:77:73:11:5b:c0:91:f2:
                    dd:ea:92:02:78:cd:c0:e5:9e:5c:cc:47:ee:95:72:
                    6f:ec:8d:6e:73:81:eb:a8:be:dd:1d:0f:3a:b2:de:
                    55:ea:f9:6e:b3:4d:c9:ca:ea:08:5e:06:b0:e0:bd:
                    31:eb:a9:8e:28:56:e3:16:cb:31:ad:9a:30:e4:3b:
                    aa:d0:d7:e1:79:51:27:83:ba:c0:1e:32:8b:cd:db:
                    cf:2f:15:08:db:ad:8a:ae:bf:89:c9:1b:33:31:c3:
                    0d:ac:27:80:e0:fc:06:5a:8c:69:5f:53:25:fc:b1:
                    cc:84:9b:98:4c:83:ac:1c:fd:60:aa:8e:66:0c:0c:
                    e5:3c:1a:01:f4:c9:9e:63:ee:1e:69:e7:a3:aa:53:
                    d9:5e:57:50:eb:ff:b8:c0:c0:51:9b:45:3c:12:76:
                    d6:26:89:0a:d8:a0:71:82:bd:84:88:4a:76:39:cc:
                    4a:19:db:26:d4:04:2b:99:64:e2:dd:3c:d3:74:ed:
                    49:05:2a:3e:32:a7:3b:bf:a2:0c:90:e7:47:bd:93:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:68:40:05:FA:02:FD:37:1A:B8:53:A5:55:AD:5F:E6:68:03:65:88
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135372e302f32342d3234203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:f1:a9:41:82:00:6a:20:c2:5d:aa:e7:e8:40:39:e5:c1:
         0c:4f:6d:49:dc:73:a6:ee:4a:45:3f:71:70:67:ae:42:b7:51:
         54:17:d4:36:ca:7a:ba:bb:32:11:0b:b3:9f:e1:c1:5b:f5:b1:
         a4:3e:49:9c:27:dd:8b:ab:67:d0:40:ff:df:e7:eb:13:0e:74:
         57:79:a6:41:2b:73:39:3b:f0:a5:61:31:63:f9:e1:9b:4d:03:
         53:c2:9e:8e:d8:f1:04:5c:44:1e:0d:d4:56:2a:29:84:db:70:
         b6:5b:15:59:7a:c5:c7:79:a4:31:34:a1:e0:57:fd:73:5c:8a:
         99:13:e1:db:f7:c3:58:77:f3:5b:9b:2c:f9:f0:dd:4c:02:9d:
         f4:76:31:6f:bd:91:1a:bd:63:42:2e:49:92:76:47:99:a8:51:
         89:e9:26:d2:16:75:82:af:fd:68:4c:34:c9:c3:df:13:d9:d1:
         1c:4f:8f:49:ea:1d:d0:53:d5:eb:37:d2:1d:c8:58:82:80:e1:
         3a:f4:e4:7a:01:3a:3c:a2:37:d8:50:c6:c0:34:b2:cb:d6:42:
         8f:70:5f:c5:45:16:90:a8:34:35:51:da:34:d3:48:ec:b6:bd:
         89:72:c8:fb:5f:4a:b3:7f:04:eb:bf:fe:a8:0b:05:7d:4b:97:
         30:ed:2a:48
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD4+OpyFlTNwCThgYZ3U0WnGHSscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0
NjY1N0M3MTAeFw0yNDA0MjQxOTAyNDhaFw0yNTA0MjMxOTA3NDhaMDMxMTAvBgNV
BAMTKEYwNjg0MDA1RkEwMkZEMzcxQUI4NTNBNTU1QUQ1RkU2NjgwMzY1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULyeRehpJgGvk6fLIH1H6DQoJ
mZ6iZK+iyjNuhy7EMLEIULs2IbgbG3f9t+mvPdXdXSGzd3MRW8CR8t3qkgJ4zcDl
nlzMR+6Vcm/sjW5zgeuovt0dDzqy3lXq+W6zTcnK6gheBrDgvTHrqY4oVuMWyzGt
mjDkO6rQ1+F5USeDusAeMovN288vFQjbrYquv4nJGzMxww2sJ4Dg/AZajGlfUyX8
scyEm5hMg6wc/WCqjmYMDOU8GgH0yZ5j7h5p56OqU9leV1Dr/7jAwFGbRTwSdtYm
iQrYoHGCvYSISnY5zEoZ2ybUBCuZZOLdPNN07UkFKj4ypzu/ogyQ50e9k4jhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8GhABfoC/TcauFOlVa1f5mgDZYgwHwYDVR0j
BBgwFoAUXoJwX/hXMkmE4Qh6r8zmvUZlfHEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD
LzAvNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0NjY1N0M3MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RTgyNzA1RkY4NTczMjQ5ODRF
MTA4N0FBRkNDRTZCRDQ2NjU3QzcxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9a
Umk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVDLzAvMzEz
NjM4MmUzMjMzMzIyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKjonTANBgkqhkiG9w0BAQsFAAOCAQEAK6TxqUGC
AGogwl2q5+hAOeXBDE9tSdxzpu5KRT9xcGeuQrdRVBfUNsp6ursyEQuzn+HBW/Wx
pD5JnCfdi6tn0ED/3+frEw50V3mmQStzOTvwpWExY/nhm00DU8KejtjxBFxEHg3U
ViophNtwtlsVWXrFx3mkMTSh4Ff9c1yKmRPh2/fDWHfzW5ss+fDdTAKd9HYxb72R
Gr1jQi5JknZHmahRiekm0hZ1gq/9aEw0ycPfE9nRHE+PSeod0FPV6zfSHchYgoDh
OvTkegE6PKI32FDGwDSyy9ZCj3BfxUUWkKg0NVHaNNNI7La9iXLI+19Ks38E67/+
qAsFfUuXMO0qSA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org