Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e203532353336.roa
File:                     3133312e302e3230382e302f32322d3232203d3e203532353336.roa (raw, json)
Hash identifier:          xIdcoLjN1n4OHtHvL5QZmfzFt8DQOCgjZeX6fnCl8/w=
Subject key identifier:   17:DB:D9:12:FB:DB:21:A5:52:7A:FA:2F:BA:37:5A:7F:12:9D:B4:9E
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       5A2C80EDFCB4EDC0FC09340BE452B28A7646A3DB
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e203532353336.roa
Signing time:             Thu 18 Apr 2024 18:01:11 +0000
ROA not before:           Thu 18 Apr 2024 17:56:11 +0000
ROA not after:            Thu 17 Apr 2025 18:01:11 +0000
asID:                     52536
IP address blocks:        131.0.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2c:80:ed:fc:b4:ed:c0:fc:09:34:0b:e4:52:b2:8a:76:46:a3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:11 2024 GMT
            Not After : Apr 17 18:01:11 2025 GMT
        Subject: CN=17DBD912FBDB21A5527AFA2FBA375A7F129DB49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:b0:91:42:16:b3:05:a5:6d:10:ae:b6:90:
                    44:12:b3:42:40:56:22:89:05:26:de:e2:e7:33:b0:
                    7d:96:fb:6e:d3:16:49:07:1c:94:bb:7b:bf:3b:82:
                    1a:b2:1d:8f:52:d5:ae:aa:bf:c9:bf:ed:3b:fb:ce:
                    ff:87:5a:ae:60:d5:c3:b2:a0:9d:90:79:ad:26:9f:
                    21:a0:aa:28:a7:57:11:1f:f3:39:40:24:67:f8:79:
                    d1:00:63:1c:f6:87:d0:a3:6c:5d:e0:d7:c6:03:3f:
                    a2:41:cc:4f:d2:29:dd:db:ad:7c:cd:0a:58:89:69:
                    79:86:6f:52:aa:14:c6:e9:4c:6d:40:55:b8:7d:e7:
                    a3:5c:f0:f4:dd:2c:45:fc:d4:d3:b5:c9:d0:99:e9:
                    5d:bb:cd:39:62:e6:72:e8:57:c3:a4:14:58:a8:2f:
                    29:e1:69:af:43:74:73:ff:02:35:1c:9e:ed:f9:f6:
                    50:fc:30:6f:ed:d3:5d:2d:cf:5a:22:81:e4:81:b4:
                    4f:e0:35:2f:cc:2b:95:4f:1e:72:dd:a0:73:4a:d9:
                    1c:f1:1a:aa:d8:df:02:2a:a7:02:8d:0f:28:c4:81:
                    94:d9:6e:9b:a7:db:59:05:c8:bf:c8:90:43:0f:ae:
                    7e:f5:a9:ed:7d:05:17:99:21:ec:1d:b2:cc:bd:44:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:D9:12:FB:DB:21:A5:52:7A:FA:2F:BA:37:5A:7F:12:9D:B4:9E
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e302e3230382e302f32322d3232203d3e203532353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:02:8f:4f:1f:b0:35:c1:23:b4:b0:a7:81:47:b9:a1:f2:92:
         8c:cb:0d:ff:97:79:54:44:6b:7d:ac:c5:12:d9:e9:83:6f:16:
         05:4a:a4:a8:6e:76:22:46:ae:cf:74:4a:d3:3f:8d:18:90:6b:
         fd:f9:7a:01:6b:1a:29:80:40:84:25:9f:2d:85:24:b0:41:c4:
         8f:3a:8c:4e:38:9d:9a:99:1b:94:00:8d:d1:b7:f7:83:40:84:
         a4:7c:d4:13:8f:7c:ea:95:55:c6:98:7b:4d:0b:ab:89:1c:2b:
         95:67:4e:21:3c:9d:6c:49:19:6e:8b:9f:c2:0e:5b:9d:46:7a:
         31:5b:b5:ff:b1:d7:39:60:15:a2:34:b4:d0:80:90:05:35:c7:
         55:0f:4c:d1:e6:79:5a:a1:6a:8b:6c:d1:46:c8:6f:57:4e:ba:
         db:e3:04:38:0a:e4:07:58:25:a5:e3:d8:73:be:5f:b9:86:d2:
         4e:58:2b:87:12:ed:33:e7:e7:e4:af:fa:fc:b2:52:68:9a:cc:
         3a:d9:1e:9c:3a:4a:9a:6e:d9:58:13:52:2f:9f:04:b9:7b:bc:
         b0:02:b6:85:ab:68:c0:56:38:a8:6a:c4:58:98:74:fc:bf:6c:
         c3:3f:aa:fb:e2:f0:b0:69:84:f7:66:62:6e:65:10:ee:99:d7:
         0c:cd:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org