Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323634333934.roa
File:                     3133312e3136312e33322e302f32322d3232203d3e20323634333934.roa (raw, json)
Hash identifier:          VYhaAFO8OttAHLPFDjA+MphgcRCLdD7Au75FvrWmjKI=
Subject key identifier:   00:C5:E0:09:6E:FF:E2:EF:BA:C3:D0:CF:76:E4:A6:5A:08:3F:B9:67
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       237D15EE03CA1ED7D55865C34ABAB4D5C3423594
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323634333934.roa
Signing time:             Thu 18 Apr 2024 18:02:43 +0000
ROA not before:           Thu 18 Apr 2024 17:57:43 +0000
ROA not after:            Thu 17 Apr 2025 18:02:43 +0000
asID:                     264394
IP address blocks:        131.161.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7d:15:ee:03:ca:1e:d7:d5:58:65:c3:4a:ba:b4:d5:c3:42:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:57:43 2024 GMT
            Not After : Apr 17 18:02:43 2025 GMT
        Subject: CN=00C5E0096EFFE2EFBAC3D0CF76E4A65A083FB967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:23:90:62:96:91:76:ea:ad:b1:18:cf:d0:fd:
                    79:3c:27:22:84:b7:93:ab:1f:4a:d4:d2:4c:0f:8d:
                    bf:f9:ac:bd:8b:70:d5:b3:3f:38:c5:15:e0:73:56:
                    e5:fa:c1:e8:be:d0:63:3d:e3:68:ae:84:fb:10:eb:
                    cc:78:85:02:16:49:ef:df:47:bb:6f:cb:24:50:6d:
                    91:36:d9:07:68:08:ae:f1:a9:ab:76:e6:39:9e:e4:
                    f8:8b:ff:6a:7e:a1:8f:06:31:fe:c9:e8:d2:d5:67:
                    6c:93:12:d6:d9:70:8d:82:ac:20:3d:24:0f:de:88:
                    d3:ea:ff:27:fc:59:ee:41:96:9a:a3:5a:11:bb:55:
                    18:0f:ef:10:92:a0:c0:dd:33:78:16:24:77:19:26:
                    91:a4:c0:59:95:bc:4a:7a:2d:7a:29:3c:a8:9e:b2:
                    14:33:06:c1:d3:59:aa:f3:38:c6:8f:b0:f8:18:4f:
                    e7:0e:08:8f:e2:63:bd:11:30:16:04:94:ce:f6:3d:
                    08:1c:1e:5f:ad:13:a1:dd:ac:73:87:53:b6:fc:b4:
                    ea:7b:97:90:c5:94:b7:02:00:91:45:e7:12:81:57:
                    00:0f:1a:f8:e3:77:66:f1:f1:a7:cd:0d:95:63:90:
                    db:ce:a7:95:f6:01:8f:21:92:e9:a2:95:14:5d:dd:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C5:E0:09:6E:FF:E2:EF:BA:C3:D0:CF:76:E4:A6:5A:08:3F:B9:67
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323634333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:30:1c:13:c7:5b:64:f8:91:b9:87:1a:db:4e:64:04:62:
         eb:89:28:64:5b:ea:9e:42:a3:36:32:eb:33:db:4f:11:42:12:
         4e:1b:8c:e7:70:7a:b2:44:ef:2c:44:5e:f9:18:f3:0a:34:04:
         9a:99:3a:f1:63:f0:e3:0c:17:15:a5:fe:0b:41:d5:cc:32:7e:
         14:86:64:74:d1:87:1e:b1:fb:80:3b:c5:e2:a2:eb:ae:92:19:
         da:13:de:ee:8b:96:f8:85:e7:f6:bf:1e:07:41:6e:e6:6c:37:
         93:54:10:b3:df:57:fb:d1:8b:43:31:69:68:66:f2:b5:f6:22:
         b8:c4:c9:9b:5b:89:63:47:2e:d7:fa:72:57:ee:44:e8:d5:ea:
         fc:41:83:83:ae:d6:5f:ba:44:13:ad:22:f6:e0:c0:7f:4f:20:
         bb:5e:dd:e1:e2:96:a8:64:52:3a:d8:32:39:40:73:3e:ac:73:
         b0:61:08:d2:ab:df:73:2b:ce:77:7e:a3:ac:83:74:ca:df:5e:
         81:20:25:7a:1a:13:d0:8c:0d:54:1e:ed:8b:78:14:48:c7:b9:
         e8:7e:12:d6:55:48:c2:20:ce:33:8d:7c:6d:4d:4b:da:27:4c:
         87:4b:a5:c9:d3:9e:17:d3:85:a5:db:f5:ba:73:64:f3:ad:a5:
         c4:d3:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org