Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135392e302f32342d3234203d3e20323633343530.roa
File:                     3136382e3233322e3135392e302f32342d3234203d3e20323633343530.roa (raw, json)
Hash identifier:          Mggi0YNHBEn2ZJ9QAmuUYZ23SCFzymURRwf+j5v++T8=
Subject key identifier:   58:43:22:00:D8:8B:98:E7:2C:9C:98:93:DC:4B:9A:8F:BD:BF:67:CA
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       7ABE7DFD2006F9AF1B73D8ECED940EE1F8C5F757
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135392e302f32342d3234203d3e20323633343530.roa
Signing time:             Wed 24 Apr 2024 19:07:55 +0000
ROA not before:           Wed 24 Apr 2024 19:02:55 +0000
ROA not after:            Wed 23 Apr 2025 19:07:55 +0000
asID:                     263450
IP address blocks:        168.232.159.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:be:7d:fd:20:06:f9:af:1b:73:d8:ec:ed:94:0e:e1:f8:c5:f7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Apr 24 19:02:55 2024 GMT
            Not After : Apr 23 19:07:55 2025 GMT
        Subject: CN=58432200D88B98E72C9C9893DC4B9A8FBDBF67CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:41:40:42:a2:44:d0:91:0f:88:46:ac:d9:
                    42:25:fd:b6:26:0e:98:48:62:1a:55:41:6d:76:77:
                    0f:ce:39:f0:ce:bc:b5:93:54:a2:ad:4a:07:12:5a:
                    d0:78:a0:f3:84:f2:c3:6d:30:84:df:fd:11:74:48:
                    11:ac:9b:39:5c:c8:a2:8a:3a:d3:bb:37:14:20:01:
                    ce:f5:7d:10:6f:f4:56:e2:a1:40:99:09:1b:71:5a:
                    ac:68:ee:f4:b0:ef:e2:09:d1:94:c7:50:a1:eb:ad:
                    c3:02:2c:83:a6:79:67:4e:23:3d:9e:32:b6:96:ab:
                    1a:36:62:21:e1:37:7b:51:35:cc:bc:4f:83:cb:4f:
                    b0:7e:a9:4d:2f:f2:f4:73:df:e8:8e:81:b3:b5:33:
                    b6:e9:66:0b:3f:33:d5:38:ce:cc:be:88:4f:05:54:
                    7e:cb:b0:26:bd:aa:f7:33:ce:01:8a:77:f4:2b:0e:
                    13:18:be:a8:0c:85:5a:eb:6c:04:67:0c:76:bd:63:
                    e5:2a:0e:ee:0c:82:eb:49:12:e5:9c:eb:77:a7:df:
                    b1:e6:ad:0a:4c:4d:a9:b5:18:89:e6:f1:ce:c7:63:
                    40:a3:43:05:53:da:d1:e7:db:6a:1e:eb:80:11:4e:
                    e4:ce:9d:2e:ec:39:53:6e:e5:76:c5:dc:2d:df:e3:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:43:22:00:D8:8B:98:E7:2C:9C:98:93:DC:4B:9A:8F:BD:BF:67:CA
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135392e302f32342d3234203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:e4:4d:a1:b7:8d:61:ea:c3:be:bc:46:72:00:f3:98:b4:
         39:9e:de:94:0f:63:7b:d3:16:2c:7a:6d:f4:04:8f:b3:9c:e8:
         b0:34:6e:0b:f1:29:8d:8c:b9:3d:cf:ad:bc:bd:27:b0:4e:85:
         d1:e6:7f:a2:cf:a7:7a:a8:c0:a6:8b:c8:b9:b5:eb:3e:66:27:
         b2:da:ca:cc:9e:fe:71:34:13:75:72:d6:5b:0e:b0:01:a3:3d:
         68:03:06:2e:81:ec:00:a5:9f:bc:60:8a:a2:0a:00:bd:01:00:
         48:3f:62:71:bc:de:b5:5e:5c:d4:7b:c3:9d:3d:2a:68:e8:9d:
         02:2f:a3:33:75:4d:f9:23:5f:94:82:f4:eb:9c:a6:dc:bb:e4:
         d1:be:d3:7d:3f:ef:e3:71:6a:be:12:b8:c3:2a:93:c3:15:10:
         a8:0e:65:92:f8:fc:ac:9b:a5:df:47:0a:07:7c:69:ff:71:48:
         2d:2f:20:98:a4:7f:10:fc:a2:67:41:4d:29:66:c9:a4:60:cf:
         f3:d1:ec:fb:84:a9:0b:38:16:35:3a:12:df:82:d0:e9:a5:ec:
         fe:b1:f3:66:19:1a:44:4d:9e:93:18:94:25:ce:02:bc:89:4f:
         33:8d:93:f2:40:d2:91:01:ca:b7:32:fb:d2:92:11:3d:31:c2:
         e4:ca:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:37 2025 by rpki-client