Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32342d3234203d3e20323633343530.roa
File:                     3136382e3233322e3135382e302f32342d3234203d3e20323633343530.roa (raw, json)
Hash identifier:          GPxgg/7SdOoJmO4WRFAGMImiGlTViWpxfrCmErj4cWw=
Subject key identifier:   BB:A9:7A:FC:0C:5F:06:13:9C:9A:B4:B2:01:23:D2:0D:13:BA:DE:9C
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       7F2543774C515DD7789AFB00B26748BF4637B342
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32342d3234203d3e20323633343530.roa
Signing time:             Wed 24 Apr 2024 19:07:53 +0000
ROA not before:           Wed 24 Apr 2024 19:02:53 +0000
ROA not after:            Wed 23 Apr 2025 19:07:53 +0000
asID:                     263450
IP address blocks:        168.232.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:25:43:77:4c:51:5d:d7:78:9a:fb:00:b2:67:48:bf:46:37:b3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Apr 24 19:02:53 2024 GMT
            Not After : Apr 23 19:07:53 2025 GMT
        Subject: CN=BBA97AFC0C5F06139C9AB4B20123D20D13BADE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:5f:b2:e1:c3:76:e4:06:12:40:36:99:cd:
                    ed:cc:69:53:98:3d:56:a6:1f:50:d5:65:81:e9:9d:
                    21:b7:40:3c:21:5b:1f:3e:26:f8:11:f1:69:17:e1:
                    70:de:73:b7:c1:d9:75:7a:99:f3:7f:4b:50:a7:ce:
                    4a:12:2e:0c:c4:97:bf:13:10:01:e3:fa:d2:fc:a3:
                    8c:00:69:d7:41:bb:63:7f:e2:8e:79:91:cf:38:a0:
                    bf:9f:a6:5d:26:25:bd:97:2e:29:b6:50:db:3c:35:
                    b4:26:36:7a:82:18:02:c6:0c:fe:80:36:1f:0d:06:
                    fe:ca:4f:53:e6:26:33:52:65:f5:79:63:a9:97:aa:
                    6d:3f:1d:ee:25:be:9e:0d:68:6f:0a:67:21:64:a8:
                    be:dd:65:5b:be:16:0c:8b:d0:35:91:14:2e:02:a4:
                    2d:87:7a:a7:a6:68:49:41:a9:cc:90:37:52:9c:1c:
                    03:77:88:72:cb:ab:13:41:82:85:3f:be:72:9d:c7:
                    73:fa:32:a7:f9:ef:ab:a0:ac:55:f9:62:1a:ad:a4:
                    24:cc:88:9f:27:da:63:f0:b5:bb:59:ec:1f:39:f1:
                    41:4d:19:86:97:6e:db:07:58:56:62:15:b1:67:33:
                    4f:1a:7f:11:42:3d:de:a8:52:da:3a:22:a7:c2:10:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A9:7A:FC:0C:5F:06:13:9C:9A:B4:B2:01:23:D2:0D:13:BA:DE:9C
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135382e302f32342d3234203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:70:56:76:b2:7d:c2:28:e9:14:b2:1a:91:ca:83:c4:91:dc:
         8c:e2:55:91:df:ec:c2:4c:20:c3:22:6a:4a:af:2f:4d:a5:28:
         5a:78:ce:85:2d:19:f5:91:7d:c0:de:fb:c7:02:98:fa:7b:86:
         be:c3:cc:a8:91:91:83:30:61:31:a0:3f:ec:02:5b:88:60:16:
         10:f5:6b:fb:98:d5:51:22:bb:06:86:19:8f:a0:2c:fc:61:4c:
         5a:43:df:60:b1:61:9b:1a:b8:9f:ef:2f:21:99:fa:ce:b6:03:
         34:75:c9:12:3e:c2:b5:95:84:20:85:b6:fa:31:8f:d0:86:b8:
         67:9b:58:b2:da:aa:ce:06:a8:db:ef:8c:09:95:cb:b3:df:c0:
         ea:4a:fa:95:3c:12:a7:dc:a2:c5:71:8b:1c:47:68:8b:6b:bb:
         0c:fe:d2:4a:40:aa:41:3b:48:97:9f:b9:a4:1c:5f:1a:52:a4:
         52:27:da:37:8d:07:f3:f2:54:5d:37:70:71:6d:5e:8c:f8:12:
         64:8e:42:04:8e:1c:35:a4:80:3b:bf:6c:bf:e6:2d:78:42:d0:
         7c:da:c8:75:88:e0:b0:af:b1:5a:7e:d1:73:47:5b:92:27:e5:
         08:43:56:1e:65:3f:57:9e:f2:2a:b7:09:09:c3:1f:98:14:ad:
         60:a3:91:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfyVDd0xRXdd4mvsAsmdIv0Y3s0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0
NjY1N0M3MTAeFw0yNDA0MjQxOTAyNTNaFw0yNTA0MjMxOTA3NTNaMDMxMTAvBgNV
BAMTKEJCQTk3QUZDMEM1RjA2MTM5QzlBQjRCMjAxMjNEMjBEMTNCQURFOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/F+y4cN25AYSQDaZze3MaVOY
PVamH1DVZYHpnSG3QDwhWx8+JvgR8WkX4XDec7fB2XV6mfN/S1CnzkoSLgzEl78T
EAHj+tL8o4wAaddBu2N/4o55kc84oL+fpl0mJb2XLim2UNs8NbQmNnqCGALGDP6A
Nh8NBv7KT1PmJjNSZfV5Y6mXqm0/He4lvp4NaG8KZyFkqL7dZVu+FgyL0DWRFC4C
pC2HeqemaElBqcyQN1KcHAN3iHLLqxNBgoU/vnKdx3P6Mqf576ugrFX5YhqtpCTM
iJ8n2mPwtbtZ7B858UFNGYaXbtsHWFZiFbFnM08afxFCPd6oUto6IqfCEKpdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUu6l6/AxfBhOcmrSyASPSDRO63pwwHwYDVR0j
BBgwFoAUXoJwX/hXMkmE4Qh6r8zmvUZlfHEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD
LzAvNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0NjY1N0M3MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RTgyNzA1RkY4NTczMjQ5ODRF
MTA4N0FBRkNDRTZCRDQ2NjU3QzcxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9a
Umk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVDLzAvMzEz
NjM4MmUzMjMzMzIyZTMxMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKjonjANBgkqhkiG9w0BAQsFAAOCAQEAAHBWdrJ9
wijpFLIakcqDxJHcjOJVkd/swkwgwyJqSq8vTaUoWnjOhS0Z9ZF9wN77xwKY+nuG
vsPMqJGRgzBhMaA/7AJbiGAWEPVr+5jVUSK7BoYZj6As/GFMWkPfYLFhmxq4n+8v
IZn6zrYDNHXJEj7CtZWEIIW2+jGP0Ia4Z5tYstqqzgao2++MCZXLs9/A6kr6lTwS
p9yixXGLHEdoi2u7DP7SSkCqQTtIl5+5pBxfGlKkUifaN40H8/JUXTdwcW1ejPgS
ZI5CBI4cNaSAO79sv+YteELQfNrIdYjgsK+xWn7Rc0dbkiflCENWHmU/V57yKrcJ
CcMfmBStYKORLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org