Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3232203d3e203532383635.roa
File:                     3133382e3132322e31362e302f32322d3232203d3e203532383635.roa (raw, json)
Hash identifier:          rgY6AoGRJErnplBH8QAooYyIYHbyYeqfc807/Z51oaU=
Subject key identifier:   C8:B2:9B:75:94:B1:76:0F:42:CE:F5:B7:8A:03:09:9D:41:D8:F6:C0
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       709BA350DACAF5F786106F879E13BFC53C180CF8
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3232203d3e203532383635.roa
Signing time:             Thu 18 Apr 2024 18:01:21 +0000
ROA not before:           Thu 18 Apr 2024 17:56:21 +0000
ROA not after:            Thu 17 Apr 2025 18:01:21 +0000
asID:                     52865
IP address blocks:        138.122.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9b:a3:50:da:ca:f5:f7:86:10:6f:87:9e:13:bf:c5:3c:18:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:21 2024 GMT
            Not After : Apr 17 18:01:21 2025 GMT
        Subject: CN=C8B29B7594B1760F42CEF5B78A03099D41D8F6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:67:d6:06:8b:56:f9:ab:b6:34:f9:02:da:
                    47:f3:ba:92:ba:e9:5f:4f:f9:55:24:b6:05:f5:7c:
                    09:c2:0c:23:fc:d0:5d:eb:bb:53:f0:c5:71:1e:72:
                    5b:cc:67:30:1a:99:95:62:77:e3:a1:1b:24:b0:75:
                    e5:69:17:13:6d:22:d5:b2:6f:b5:7d:23:e8:1d:b0:
                    2a:a4:21:83:ec:ac:22:cc:69:fe:c3:cf:bf:a4:7c:
                    74:d9:fb:e9:49:be:5f:01:c6:54:5f:7f:be:99:8e:
                    72:03:55:fb:c0:95:c2:51:b5:10:c0:7d:d5:e8:40:
                    f5:f4:0e:81:57:79:0a:0e:b2:76:10:ba:91:20:d0:
                    62:64:45:6a:6b:cb:b9:e4:6e:00:44:a4:e4:61:86:
                    79:c0:b7:06:9d:cc:43:a1:7b:f4:ee:58:18:ce:fa:
                    a7:af:d4:4a:03:c1:0f:48:06:d7:f8:9a:6b:c1:5d:
                    e4:bb:c1:cd:d8:f3:fc:91:ef:19:b5:00:21:8c:c9:
                    cd:94:d1:89:be:59:f7:48:5f:6f:28:fa:a0:d3:e2:
                    63:dc:3b:e7:47:c3:69:14:0b:96:81:2c:9f:a8:50:
                    50:28:56:48:51:25:69:13:7d:6f:b9:3c:7b:3a:b8:
                    a1:c5:0a:75:8d:23:f3:70:2c:ab:55:1c:3e:ff:93:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B2:9B:75:94:B1:76:0F:42:CE:F5:B7:8A:03:09:9D:41:D8:F6:C0
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32322d3232203d3e203532383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:78:88:a9:99:8e:5d:91:3e:20:89:5d:10:7f:32:97:1e:99:
         66:59:e5:50:78:2a:de:98:64:37:14:9a:4b:94:da:24:f5:b0:
         a1:84:ca:00:2d:31:63:2e:92:5a:3c:ce:6e:e0:f7:2c:b5:68:
         5f:1a:e4:bc:9f:8d:85:ff:96:a8:e1:bc:47:58:7f:16:91:d7:
         ae:4e:29:50:5b:f5:88:c4:9b:ff:d4:1b:63:cd:42:58:c3:91:
         6e:a9:7e:74:8d:11:cf:59:ed:6c:9f:1c:84:c7:96:8a:67:c3:
         d2:30:13:48:6b:93:3b:b6:42:13:ce:e8:78:3f:cc:27:e2:f9:
         3d:79:d9:9b:89:ae:a1:b2:b1:01:ab:6f:17:e0:6e:5a:6b:a5:
         c1:55:b5:be:9e:5f:01:11:24:c2:e8:d3:c9:63:7d:91:ab:ad:
         a4:67:ea:1b:fd:0e:24:59:3e:88:de:28:87:f6:50:c5:95:60:
         2e:aa:1a:7b:a2:55:54:f7:b1:48:f2:32:3d:91:7b:5b:6a:96:
         07:4e:c0:61:c9:87:b5:eb:e3:85:33:72:67:c2:8a:17:ad:ef:
         33:d3:eb:e9:6d:cd:c1:2b:28:ee:25:29:af:09:c0:63:95:8f:
         02:8b:c2:4b:65:3e:5d:86:81:97:e1:31:84:ab:09:32:34:30:
         39:6b:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org