Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323633393333.roa
File:                     3133382e3231392e34382e302f32322d3232203d3e20323633393333.roa (raw, json)
Hash identifier:          3CDyiFmhc4iWPpQRDDi3jzW8hl01HCAwZZXhRye9DTY=
Subject key identifier:   CC:69:46:91:E0:86:63:1E:2D:F1:BB:BA:AD:08:AD:48:AB:A2:13:09
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       314F0A1952BCF0D5CBDD7198DDAE18232D737EB6
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323633393333.roa
Signing time:             Thu 18 Apr 2024 18:03:29 +0000
ROA not before:           Thu 18 Apr 2024 17:58:29 +0000
ROA not after:            Thu 17 Apr 2025 18:03:29 +0000
asID:                     263933
IP address blocks:        138.219.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:0a:19:52:bc:f0:d5:cb:dd:71:98:dd:ae:18:23:2d:73:7e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:58:29 2024 GMT
            Not After : Apr 17 18:03:29 2025 GMT
        Subject: CN=CC694691E086631E2DF1BBBAAD08AD48ABA21309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:a7:14:2c:8f:02:64:50:c0:6c:05:e9:e3:
                    86:27:5a:4e:14:a8:07:81:a5:cd:d2:e6:99:01:eb:
                    d6:bd:79:de:16:1a:25:f5:f7:d9:eb:87:8b:47:b9:
                    13:f2:a2:ef:85:73:eb:40:cc:d6:a2:2b:64:11:4e:
                    67:d2:7f:0a:0f:60:02:aa:20:b6:0f:ac:ab:35:08:
                    2f:c7:2d:96:e2:6d:a0:6f:6a:aa:ea:a6:ed:fd:a9:
                    4c:e1:ea:c7:3b:bb:80:56:30:ab:8a:c0:f7:27:97:
                    b8:58:7d:fe:c4:b8:0a:ad:48:b7:17:0e:12:19:f3:
                    98:1b:35:77:cb:d1:a3:e4:af:17:50:aa:e7:53:84:
                    e0:c0:94:c9:1c:cb:35:6f:0d:00:63:16:d8:61:32:
                    83:1e:3b:8e:ca:3d:00:fa:7a:ce:85:4d:cb:6e:4e:
                    5d:85:eb:aa:3e:71:6d:bc:db:8c:16:cf:7a:05:ee:
                    af:86:d2:a3:a5:a7:34:79:87:05:bc:07:5c:4a:f1:
                    1d:86:be:db:7d:60:72:a4:3c:96:29:ea:b1:6a:fd:
                    07:ff:04:b5:b7:d8:8e:7b:86:79:2b:b5:99:75:45:
                    69:e8:19:69:12:78:c7:49:3e:62:be:c2:81:fb:5b:
                    41:75:d4:3e:2e:08:78:7d:ff:fd:2e:57:d8:74:2b:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:69:46:91:E0:86:63:1E:2D:F1:BB:BA:AD:08:AD:48:AB:A2:13:09
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323633393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:36:d2:3a:13:1a:7c:0c:ed:b2:d9:29:5a:53:92:4a:31:ed:
         58:60:b1:e8:4a:57:d5:22:da:5d:0b:94:00:ca:7e:8d:e7:b0:
         49:fa:54:e1:26:1c:d7:57:3f:64:d3:04:1b:c7:e5:e1:4c:4a:
         a2:38:0c:b3:c4:81:c0:20:62:c9:0c:77:80:64:65:00:4c:3a:
         1b:12:7c:92:37:38:01:fb:c8:6a:61:b9:61:d3:99:7d:43:b2:
         f7:35:30:5a:83:b1:2e:ff:cd:0a:d9:0f:08:ea:81:8b:74:8d:
         2a:fa:9a:4b:1a:34:91:5d:03:3c:10:87:1c:88:8b:b6:76:92:
         8e:4a:b0:54:86:03:7d:6c:8c:8b:99:72:1e:42:64:dc:1f:b9:
         ce:1f:d8:fb:76:7c:35:de:56:67:6f:3f:c2:b8:ee:44:b9:22:
         28:95:9c:58:32:0e:f8:bc:5e:ad:5e:4b:cc:f6:d7:f3:dc:15:
         4f:14:d4:11:de:ad:d9:4f:7e:20:55:19:23:9c:d8:73:b4:9d:
         43:4f:43:24:1c:30:c5:39:42:74:63:06:15:82:6a:2d:00:e7:
         76:b9:02:f5:4b:a0:8d:fe:30:f5:e8:c4:87:a1:b9:63:40:30:
         42:76:47:53:42:b9:51:eb:50:fa:4e:42:bb:f0:6b:07:fd:9a:
         ef:08:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org