Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e20323733333039.roa
File:                     3133312e302e3230382e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          9AnfXoxdlm20TEQmUJybLo1agRVNCFYE7iKoQacaFDs=
Subject key identifier:   5B:AA:42:5F:48:1A:BA:84:1B:19:70:24:44:04:C6:6D:69:D9:FF:96
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       509D378DD5A60EBD4D06FDA8AFBDB5DE31D857D7
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:26:37 +0000
ROA not before:           Thu 09 May 2024 13:21:37 +0000
ROA not after:            Thu 08 May 2025 13:26:37 +0000
asID:                     273309
IP address blocks:        131.0.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:37:8d:d5:a6:0e:bd:4d:06:fd:a8:af:bd:b5:de:31:d8:57:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:21:37 2024 GMT
            Not After : May  8 13:26:37 2025 GMT
        Subject: CN=5BAA425F481ABA841B1970244404C66D69D9FF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:bd:2f:87:e0:51:86:c0:2f:88:c6:63:50:
                    0b:0f:ee:d6:8f:e3:e0:38:c9:9f:e6:8c:cb:d7:c0:
                    ee:14:92:b2:58:f7:b9:16:c4:f4:8b:48:e2:46:32:
                    be:b1:95:54:1d:6b:7c:2b:30:af:b9:98:d9:36:47:
                    39:4c:a0:0e:9a:78:86:1b:05:18:7e:c7:10:2f:36:
                    ef:60:d9:b5:d4:0a:10:ad:b4:00:46:cb:f1:fa:84:
                    71:ff:34:80:04:5b:8c:f7:cd:62:f9:a7:ae:8c:03:
                    1e:ae:7c:82:24:c8:8e:dd:ee:0c:1f:0d:f7:a7:2c:
                    38:51:4a:42:f5:6e:84:a6:d7:9e:ba:b3:f0:79:9a:
                    23:32:11:94:e4:c5:bf:5e:e1:36:00:b3:8c:0d:21:
                    0d:98:d1:f4:01:00:b3:47:79:47:1b:f9:c9:7a:b9:
                    4e:12:32:7c:3d:cb:50:42:21:26:98:8a:22:61:fd:
                    5d:24:3d:28:82:ad:ca:ba:80:85:c0:36:6b:db:b2:
                    36:c0:8a:57:e0:f9:fa:4d:97:f5:b4:c7:98:4e:ec:
                    85:c1:62:f1:df:ad:27:af:af:35:8d:b6:05:b7:b4:
                    d6:27:13:c8:06:93:f9:37:5a:ce:7b:81:ec:ea:fc:
                    50:11:0d:dd:69:53:0e:dd:2e:92:40:df:cd:e9:52:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:42:5F:48:1A:BA:84:1B:19:70:24:44:04:C6:6D:69:D9:FF:96
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:44:b1:53:0e:b6:19:46:75:86:be:82:ea:25:e8:87:9e:
         0d:a9:fd:bf:df:18:fe:ba:16:bb:0b:e3:5d:80:8c:d4:20:ce:
         71:b4:f4:7e:99:8a:74:4e:24:b8:be:32:95:1e:ce:dd:9c:f0:
         bb:7a:f0:f4:60:d1:52:a9:64:14:cb:7e:dc:06:62:c7:44:aa:
         22:01:e5:a6:74:5a:2b:6a:2f:c4:27:2d:0b:dc:77:7c:bf:43:
         e2:c1:61:f2:8b:9f:a0:2e:d7:64:9a:9e:70:9d:62:5b:fb:d6:
         2e:7d:f9:3d:5f:12:09:53:28:19:76:d8:9a:ba:14:83:20:8d:
         66:f2:d0:6a:46:6b:e9:5e:79:2e:a5:36:ec:2e:f4:ef:10:33:
         03:2b:56:61:3a:8c:f2:6d:6a:08:69:c9:29:34:9f:c8:bd:5a:
         90:5a:21:50:b0:bc:36:a4:0b:27:1c:7f:25:2e:37:af:74:ca:
         ed:2a:d0:f0:1d:1d:e3:7b:20:d9:bf:c3:86:05:68:d9:d1:4f:
         0a:8e:c1:8b:e8:18:29:19:18:de:e8:0e:ca:f7:3c:a8:4a:5f:
         92:5c:a0:37:d8:cc:58:b2:48:0e:2c:09:79:7a:aa:7c:2a:0e:
         24:4b:b3:66:d6:36:3a:c9:d0:d8:cd:5c:23:55:e8:51:dc:4e:
         26:db:1b:0d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUJ03jdWmDr1NBv2or7213jHYV9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA1MDkxMzIxMzdaFw0yNTA1MDgxMzI2MzdaMDMxMTAvBgNV
BAMTKDVCQUE0MjVGNDgxQUJBODQxQjE5NzAyNDQ0MDRDNjZENjlEOUZGOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1b0vh+BRhsAviMZjUAsP7taP
4+A4yZ/mjMvXwO4UkrJY97kWxPSLSOJGMr6xlVQda3wrMK+5mNk2RzlMoA6aeIYb
BRh+xxAvNu9g2bXUChCttABGy/H6hHH/NIAEW4z3zWL5p66MAx6ufIIkyI7d7gwf
DfenLDhRSkL1boSm1566s/B5miMyEZTkxb9e4TYAs4wNIQ2Y0fQBALNHeUcb+cl6
uU4SMnw9y1BCISaYiiJh/V0kPSiCrcq6gIXANmvbsjbAilfg+fpNl/W0x5hO7IXB
YvHfrSevrzWNtgW3tNYnE8gGk/k3Ws57gezq/FARDd1pUw7dLpJA383pUgujAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUW6pCX0gauoQbGXAkRATGbWnZ/5YwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzMzMxMmUzMDJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMz
MzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCgwDQMA0GCSqGSIb3DQEBCwUAA4IBAQAATkSxUw62
GUZ1hr6C6iXoh54Nqf2/3xj+uha7C+NdgIzUIM5xtPR+mYp0TiS4vjKVHs7dnPC7
evD0YNFSqWQUy37cBmLHRKoiAeWmdForai/EJy0L3Hd8v0PiwWHyi5+gLtdkmp5w
nWJb+9Yuffk9XxIJUygZdtiauhSDII1m8tBqRmvpXnkupTbsLvTvEDMDK1ZhOozy
bWoIackpNJ/IvVqQWiFQsLw2pAsnHH8lLjevdMrtKtDwHR3jeyDZv8OGBWjZ0U8K
jsGL6BgpGRje6A7K9zyoSl+SXKA32MxYskgOLAl5eqp8Kg4kS7Nm1jY6ydDYzVwj
VehR3E4m2xsN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org