Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa
File:                     3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          vMN638TLpD1aZCXF2Tfnnk48td5UaN5awpqZxYYtluc=
Subject key identifier:   3F:63:D9:71:C9:99:82:59:E1:EB:26:7E:4C:4D:A4:09:BE:59:8A:86
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       5F01F94DECEAD080918668D2010048388DBEC5D8
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:27:34 +0000
ROA not before:           Thu 09 May 2024 13:22:34 +0000
ROA not after:            Thu 08 May 2025 13:27:34 +0000
asID:                     273309
IP address blocks:        138.219.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:f9:4d:ec:ea:d0:80:91:86:68:d2:01:00:48:38:8d:be:c5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:22:34 2024 GMT
            Not After : May  8 13:27:34 2025 GMT
        Subject: CN=3F63D971C9998259E1EB267E4C4DA409BE598A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:7e:6e:74:fe:ee:a2:f7:0c:b8:dd:9d:1b:
                    93:ec:36:63:b9:18:20:13:13:77:e8:ad:3d:aa:a7:
                    7b:fa:b6:21:8b:9e:2a:37:3a:41:c9:20:0c:ff:d4:
                    e4:65:e4:99:b9:4e:2f:36:c4:c7:32:6e:f4:52:cf:
                    25:5d:e4:0e:cd:b3:71:34:23:8b:84:ef:0f:09:c2:
                    7f:63:f5:21:61:e8:aa:4a:f4:93:79:c1:38:90:c9:
                    b1:50:98:88:f2:4e:a5:ff:c2:83:44:02:be:a3:a3:
                    5f:a9:fd:e1:3f:6b:e3:79:d7:0a:53:10:c5:9a:6d:
                    d3:cb:72:db:51:00:93:2a:5f:70:f5:aa:80:9d:f2:
                    c1:7b:0e:72:41:c8:48:9a:43:a8:ab:41:67:21:1e:
                    d6:bc:60:27:07:50:ed:ee:05:e7:cc:3f:38:6c:78:
                    1d:21:f3:54:99:d8:d4:31:52:d1:70:46:d3:26:20:
                    2c:31:1d:86:78:91:17:39:3b:c4:49:ef:bc:b1:a0:
                    33:36:08:da:81:a9:1b:55:1f:7f:ad:34:1d:50:41:
                    f0:d7:e5:3a:b7:89:b2:60:d3:09:39:f7:bf:ef:03:
                    28:f1:9f:d3:88:03:a5:da:c8:07:ef:14:9e:51:13:
                    f8:9c:49:d6:ae:cf:6f:22:dc:e7:87:9f:28:a2:b5:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:63:D9:71:C9:99:82:59:E1:EB:26:7E:4C:4D:A4:09:BE:59:8A:86
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:b0:ee:7b:21:82:bd:a1:8e:af:d4:f7:a4:4e:aa:19:fb:66:
         86:e7:81:c1:58:7f:7a:55:0e:ca:6d:c1:a0:96:43:5e:ab:e9:
         26:3a:3c:15:55:f0:33:15:b3:14:0b:7c:4a:cc:ff:7e:6a:65:
         f4:f4:8d:7d:c1:07:63:f7:e1:0c:9a:fb:df:ed:34:cd:da:04:
         f8:79:e7:69:5e:d7:f2:2e:35:84:50:87:68:d4:04:05:8a:9f:
         2e:10:db:14:1e:3d:ad:d7:2f:0c:1b:5f:76:ff:d5:64:0b:1f:
         37:e3:ad:63:24:e9:af:00:09:f5:9b:bb:5f:da:f9:72:25:13:
         e5:c8:c7:d4:24:9e:ee:d8:9a:8d:bf:c7:fe:33:c7:06:57:ce:
         4f:1c:91:0b:4f:7a:d5:64:7e:46:eb:a4:86:3f:17:08:76:43:
         87:e4:26:e4:9d:f4:89:8a:55:c5:12:01:54:28:3f:c7:ab:6e:
         78:5c:c7:84:b8:8e:e6:07:00:d0:5f:4c:a0:0d:75:22:10:fc:
         e1:2a:d5:2e:30:ef:d3:37:c2:85:9a:35:16:4f:e3:0e:1d:7a:
         6f:64:ae:14:ec:82:90:e9:39:cb:da:c7:40:89:a0:4f:6a:f6:
         29:0b:cf:d0:6f:42:1a:73:69:0e:7e:68:aa:e4:b4:40:ed:96:
         98:9c:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org