Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa
File:                     3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          D8ru6BvpjJN31aDyeSKhnbTMQXaSCddPsjc7uljYK3E=
Subject key identifier:   EE:D3:45:84:9C:AC:A6:EB:A1:A9:99:06:6A:37:32:0C:83:C8:E1:24
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       75261BC150B8FD49C59479DFC74F82D35FB14262
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:27:08 +0000
ROA not before:           Thu 09 May 2024 13:22:08 +0000
ROA not after:            Thu 08 May 2025 13:27:08 +0000
asID:                     273309
IP address blocks:        131.161.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:26:1b:c1:50:b8:fd:49:c5:94:79:df:c7:4f:82:d3:5f:b1:42:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:22:08 2024 GMT
            Not After : May  8 13:27:08 2025 GMT
        Subject: CN=EED345849CACA6EBA1A999066A37320C83C8E124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:fd:6f:f8:e4:58:c6:11:fb:ce:aa:d5:63:
                    c3:ba:cc:8a:6e:4f:cb:62:72:c1:85:e7:1d:7a:8e:
                    b7:71:cc:35:b0:c7:ec:48:96:45:57:8b:8a:97:99:
                    7a:a5:cb:04:fe:59:e9:cf:7d:28:44:62:86:17:a0:
                    ea:48:f4:7e:41:b0:43:c9:8c:1f:94:58:0b:1d:12:
                    77:35:ef:3e:9e:88:96:f6:df:8c:33:2a:3c:e9:5b:
                    a2:50:42:ca:97:c6:23:38:80:13:0c:36:47:4b:1a:
                    99:69:be:f0:26:c3:19:2a:91:7d:7e:3e:50:4d:a4:
                    35:68:d8:46:0d:97:33:e7:35:74:db:71:0f:07:36:
                    8a:4a:0d:48:5d:96:1f:01:80:58:a2:56:d9:be:fa:
                    1e:05:62:31:11:e2:7f:21:ca:09:8e:47:bd:e4:c9:
                    7e:04:36:2b:a1:af:99:01:9a:56:7e:ef:d2:58:95:
                    71:64:09:7e:cb:2a:d1:35:bb:f5:fe:7a:2e:d0:5b:
                    6a:4f:74:54:f8:ef:19:a1:76:af:bd:fe:47:6a:74:
                    84:aa:d9:40:fd:c0:e5:b5:7f:7a:30:93:be:00:ff:
                    a8:39:7e:8b:ae:31:25:ce:96:10:b3:3d:f5:fe:db:
                    f0:90:7e:df:8a:1b:ff:9c:c1:9a:1e:8a:a7:1e:52:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D3:45:84:9C:AC:A6:EB:A1:A9:99:06:6A:37:32:0C:83:C8:E1:24
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e33322e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:7f:1b:4f:a0:8b:91:a2:3c:16:dc:df:fa:de:2a:2b:1b:
         d4:2a:3c:4b:c3:fe:16:f9:1c:e6:87:79:63:76:a9:7d:ea:e6:
         65:74:a8:0e:ea:df:bd:8f:4f:d4:1a:1e:8c:30:68:03:9a:cb:
         07:f9:57:91:0a:4b:ba:17:88:dd:3e:d2:24:6f:bd:32:00:5f:
         45:83:6f:c6:9d:15:00:3c:3e:ad:59:05:eb:0f:55:a9:c2:d5:
         ae:d0:4a:23:b0:62:c3:d8:0f:d6:07:fc:58:dc:64:4a:63:32:
         b4:e2:c3:1b:c2:05:2c:b7:90:78:62:7d:a6:2b:2c:9f:ba:e0:
         85:3b:92:bf:b4:49:36:a6:e8:d3:ea:96:3f:ad:11:37:fc:2c:
         29:6e:50:da:1a:33:41:7a:1f:55:78:db:7a:a0:03:3c:07:a8:
         c2:79:27:c0:4d:8f:ed:50:e1:71:a2:b8:b5:66:83:7b:c7:de:
         7c:af:22:7c:0a:29:2c:5f:20:3e:4d:7c:8b:eb:07:54:85:40:
         b4:64:37:45:20:2c:2f:f9:c6:32:de:1d:cf:08:85:41:08:2e:
         4b:79:bd:77:bf:60:d6:86:e0:02:77:d0:2f:eb:66:da:d0:4f:
         74:88:7b:bb:2e:83:8f:f6:d7:0a:2e:cd:47:ae:5a:65:03:c3:
         e7:ee:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org