Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3232203d3e20323733333039.roa
File:                     3136382e3232382e32342e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          QFgaJw3vCi05V3UNtM7r94lDOjwj6WHrZK6uyoWCiOw=
Subject key identifier:   32:0C:29:CC:01:E3:80:D7:BF:6E:EE:3C:9B:8D:1F:AB:36:23:D8:30
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       5DF989BC4C77B81B218F718CBA588A90F83BAC63
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3232203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 17:58:55 +0000
ROA not before:           Wed 08 May 2024 17:53:55 +0000
ROA not after:            Wed 07 May 2025 17:58:55 +0000
asID:                     273309
IP address blocks:        168.228.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f9:89:bc:4c:77:b8:1b:21:8f:71:8c:ba:58:8a:90:f8:3b:ac:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 17:53:55 2024 GMT
            Not After : May  7 17:58:55 2025 GMT
        Subject: CN=320C29CC01E380D7BF6EEE3C9B8D1FAB3623D830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:d3:0d:b6:51:b3:3e:13:07:49:df:7f:e2:
                    cb:27:c5:bb:83:a9:46:b9:e4:81:0d:a1:a5:95:3a:
                    78:1a:69:df:bc:c7:a6:34:6f:69:dd:b4:46:2e:5d:
                    eb:57:fd:e4:fe:66:80:8e:0c:42:83:61:d7:5f:00:
                    6d:26:e7:d8:d6:5b:9e:97:b2:55:66:ad:4d:d9:23:
                    4b:98:26:8d:65:15:4e:19:e0:83:f6:a9:02:8b:95:
                    ab:ae:19:36:1a:c1:04:0a:98:54:ac:77:d8:64:de:
                    a8:1f:e1:2e:1f:99:76:c7:8c:ec:5f:63:8d:0f:f9:
                    4d:83:ef:66:9a:5e:28:6a:52:75:a9:24:38:e3:06:
                    5e:4c:04:35:db:58:a7:fe:91:cb:ea:06:d5:b9:28:
                    06:7c:6a:7a:93:a1:c6:f3:de:97:b8:7e:7d:43:d3:
                    ce:ad:1d:75:0a:1a:e0:e9:ae:31:ee:d6:02:c8:af:
                    55:af:ce:1b:a5:29:a0:56:10:fe:d1:0f:f4:99:f7:
                    eb:38:d8:10:87:25:ba:4b:1d:59:2f:7a:cb:71:f2:
                    af:fc:d8:17:79:cb:a3:0e:5a:c5:51:b3:21:de:f2:
                    1e:b1:3a:e5:af:be:6d:e0:dc:59:4d:09:85:04:55:
                    1d:cd:37:48:b2:9c:4d:5d:88:0f:50:de:f7:3a:72:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:29:CC:01:E3:80:D7:BF:6E:EE:3C:9B:8D:1F:AB:36:23:D8:30
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:f3:82:c4:63:c6:8f:e8:88:47:de:62:44:ff:f1:01:3b:bf:
         00:05:81:e0:0c:47:86:07:bc:67:a8:fd:4f:64:f6:76:a6:72:
         4e:5c:c5:e8:de:7a:b5:04:c7:51:e1:e8:b0:10:d3:4e:c6:11:
         a5:87:f5:0e:a9:af:56:62:d7:78:59:6f:b9:b7:3d:1f:28:04:
         bc:af:97:5f:de:43:f3:9c:87:ef:ec:e9:aa:94:5f:80:ea:77:
         26:3e:54:d5:27:0e:6e:00:fa:ec:55:ed:63:da:7f:b4:11:40:
         79:65:9d:98:02:c8:7e:69:a1:14:e0:b4:8d:d7:11:9c:5b:47:
         ef:8b:cb:69:92:9f:67:63:a1:2c:de:96:bb:0c:1d:a7:41:c6:
         1a:c0:53:9e:cc:39:60:57:46:4d:9c:8f:fc:d0:42:4c:51:bc:
         28:62:95:5b:f9:5f:de:e7:3d:a8:6c:c5:59:7c:57:78:ab:53:
         69:cf:8e:e9:4f:8a:92:3b:e9:bd:97:a8:3c:86:c2:17:ec:3d:
         2f:97:99:45:08:94:6a:f3:3a:cf:9e:e1:5d:4b:31:25:4d:f4:
         67:a3:df:2b:90:29:ca:b9:67:9e:6e:5f:de:89:1d:d7:3a:50:
         04:48:d5:24:62:05:7f:ad:69:13:11:b2:8e:2c:b0:3f:d9:ac:
         41:85:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org