Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32332d3233203d3e20323633343530.roa
File:                     3136382e3233322e3135382e302f32332d3233203d3e20323633343530.roa (raw, json)
Hash identifier:          LyBOV9stfx7pfFctUaALfMQu+1iTBiQwQhvbKcDqx5w=
Subject key identifier:   BC:88:44:43:64:2D:9E:43:98:34:A5:BE:0B:57:34:82:6F:AA:3C:81
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       78AE009EECAD51967B2059DF6D880437AA37FF09
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32332d3233203d3e20323633343530.roa
Signing time:             Wed 24 Apr 2024 19:07:51 +0000
ROA not before:           Wed 24 Apr 2024 19:02:51 +0000
ROA not after:            Wed 23 Apr 2025 19:07:51 +0000
asID:                     263450
IP address blocks:        168.232.158.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ae:00:9e:ec:ad:51:96:7b:20:59:df:6d:88:04:37:aa:37:ff:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Apr 24 19:02:51 2024 GMT
            Not After : Apr 23 19:07:51 2025 GMT
        Subject: CN=BC884443642D9E439834A5BE0B5734826FAA3C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:5a:a9:d2:cc:26:96:ed:6e:53:b9:72:0d:
                    ff:42:68:c2:45:da:d2:60:22:ec:87:c0:ae:99:c9:
                    33:c3:df:55:18:c7:17:d2:82:2e:dd:5b:a0:17:5e:
                    99:9c:31:04:05:34:7f:97:15:d8:d9:28:69:fc:8e:
                    92:48:75:4c:40:be:31:c8:7d:80:51:f1:b0:0e:8c:
                    86:40:e8:a1:ff:0c:4e:c9:c7:bd:15:0d:96:07:cd:
                    35:fd:d0:65:12:3c:75:e6:0f:85:ce:0b:04:0a:0f:
                    d7:df:11:1a:d2:32:19:46:dc:d3:cd:14:e1:40:05:
                    13:b0:76:06:d1:8a:54:5e:e2:55:a2:b4:e4:f2:01:
                    98:78:18:9d:7e:43:2a:46:f7:7d:ea:f3:74:aa:d8:
                    09:f6:c2:6f:93:54:39:ee:87:65:83:68:65:ba:72:
                    71:ea:fd:41:b2:87:e5:9a:99:c1:28:df:6b:ef:78:
                    f3:cc:1a:13:87:b2:8e:fb:eb:f3:33:dd:94:75:9c:
                    21:06:47:f5:87:47:5d:85:75:67:1b:58:a8:14:46:
                    fc:15:17:56:85:f9:f4:83:54:29:90:3b:f8:7b:df:
                    90:d6:d7:1a:dd:6a:2d:32:f6:67:5b:55:23:90:4b:
                    12:55:59:5d:8a:95:6b:59:66:ca:43:c9:b7:56:8b:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:44:43:64:2D:9E:43:98:34:A5:BE:0B:57:34:82:6F:AA:3C:81
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32332d3233203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:20:1e:37:7a:70:d6:c1:0f:43:c4:ee:0f:42:d2:36:0e:96:
         01:f4:65:60:3e:db:6a:d4:c1:91:72:2e:97:71:47:11:78:bb:
         d3:73:a1:3c:3d:49:de:79:b1:e3:41:6b:ac:32:93:f2:4c:07:
         ea:3f:80:14:0b:48:30:13:74:30:79:f7:53:0c:77:df:80:d8:
         95:43:1a:c1:5a:ce:a1:0d:bc:da:1c:b3:66:a0:4b:76:c2:7f:
         c0:5f:6c:5e:09:94:f6:87:d9:a1:7b:cb:30:5e:ac:41:82:13:
         16:1b:f6:96:93:3e:52:b1:28:79:5b:9e:c9:9c:2d:fb:d7:00:
         1a:66:89:27:18:29:71:63:08:c3:1e:51:d0:87:df:65:c9:f2:
         cb:87:c4:ab:0f:e0:0e:6f:c3:6f:67:77:5d:8c:ec:e5:2b:2f:
         bb:7d:4c:ae:b6:e1:bf:b0:da:d0:b1:75:00:f8:aa:db:da:d6:
         7c:5e:b6:e1:25:42:b1:25:96:e5:dc:b4:48:6f:9f:b1:99:34:
         bb:5e:ee:a9:c1:bf:44:f5:00:20:04:c8:e2:b7:8b:32:6f:38:
         91:7d:62:57:96:bf:bb:06:72:4a:39:3c:46:40:78:2c:38:bb:
         32:ca:4b:67:96:84:90:cd:05:2f:f0:2b:2f:f7:6f:90:85:69:
         5a:14:cf:1d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeK4AnuytUZZ7IFnfbYgEN6o3/wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0
NjY1N0M3MTAeFw0yNDA0MjQxOTAyNTFaFw0yNTA0MjMxOTA3NTFaMDMxMTAvBgNV
BAMTKEJDODg0NDQzNjQyRDlFNDM5ODM0QTVCRTBCNTczNDgyNkZBQTNDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIe1qp0swmlu1uU7lyDf9CaMJF
2tJgIuyHwK6ZyTPD31UYxxfSgi7dW6AXXpmcMQQFNH+XFdjZKGn8jpJIdUxAvjHI
fYBR8bAOjIZA6KH/DE7Jx70VDZYHzTX90GUSPHXmD4XOCwQKD9ffERrSMhlG3NPN
FOFABROwdgbRilRe4lWitOTyAZh4GJ1+QypG933q83Sq2An2wm+TVDnuh2WDaGW6
cnHq/UGyh+WamcEo32vvePPMGhOHso776/Mz3ZR1nCEGR/WHR12FdWcbWKgURvwV
F1aF+fSDVCmQO/h735DW1xrdai0y9mdbVSOQSxJVWV2KlWtZZspDybdWi8azAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUvIhEQ2QtnkOYNKW+C1c0gm+qPIEwHwYDVR0j
BBgwFoAUXoJwX/hXMkmE4Qh6r8zmvUZlfHEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD
LzAvNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0NjY1N0M3MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RTgyNzA1RkY4NTczMjQ5ODRF
MTA4N0FBRkNDRTZCRDQ2NjU3QzcxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9a
Umk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVDLzAvMzEz
NjM4MmUzMjMzMzIyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MzM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAajonjANBgkqhkiG9w0BAQsFAAOCAQEAdiAeN3pw
1sEPQ8TuD0LSNg6WAfRlYD7batTBkXIul3FHEXi703OhPD1J3nmx40FrrDKT8kwH
6j+AFAtIMBN0MHn3Uwx334DYlUMawVrOoQ282hyzZqBLdsJ/wF9sXgmU9ofZoXvL
MF6sQYITFhv2lpM+UrEoeVueyZwt+9cAGmaJJxgpcWMIwx5R0IffZcnyy4fEqw/g
Dm/Db2d3XYzs5Ssvu31Mrrbhv7Da0LF1APiq29rWfF624SVCsSWW5dy0SG+fsZk0
u17uqcG/RPUAIATI4reLMm84kX1iV5a/uwZySjk8RkB4LDi7MspLZ5aEkM0FL/Ar
L/dvkIVpWhTPHQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:45:36 2025 by rpki-client