Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3232203d3e203532383635.roa
File:                     3136382e3232382e32342e302f32322d3232203d3e203532383635.roa (raw, json)
Hash identifier:          TeT2XQY1AZVPYHx8jNO2tyaNuptNK0/aRGNlwGMRRtc=
Subject key identifier:   39:E9:00:6B:5F:3A:89:29:02:4E:DE:41:94:DC:25:E4:E9:CF:22:37
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       6A7C275EFEB780772E7A70CA2354995213437ABA
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3232203d3e203532383635.roa
Signing time:             Thu 18 Apr 2024 18:01:23 +0000
ROA not before:           Thu 18 Apr 2024 17:56:23 +0000
ROA not after:            Thu 17 Apr 2025 18:01:23 +0000
asID:                     52865
IP address blocks:        168.228.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 08 May 2024 17:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7c:27:5e:fe:b7:80:77:2e:7a:70:ca:23:54:99:52:13:43:7a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:23 2024 GMT
            Not After : Apr 17 18:01:23 2025 GMT
        Subject: CN=39E9006B5F3A8929024EDE4194DC25E4E9CF2237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:aa:30:32:84:8b:ae:f7:92:3c:84:fe:e3:
                    94:f4:0b:da:5c:8f:1c:64:df:e4:1e:a7:a0:17:cf:
                    12:ea:9b:bb:42:98:63:db:34:70:88:28:b6:ea:a4:
                    e4:ef:79:3c:10:22:e5:a1:2d:2a:80:b4:6f:8e:db:
                    36:9e:be:44:54:9c:87:1e:d2:0e:79:27:a1:22:00:
                    6a:28:f4:9b:b8:bb:4c:9c:e1:04:c4:37:fb:5f:82:
                    e5:68:a4:cf:be:4b:5e:c4:4c:8c:4c:94:fe:ba:d1:
                    7f:91:b6:b3:72:95:f8:8f:47:28:8e:a1:2d:8e:d8:
                    d0:96:f6:13:d6:d7:04:f9:1c:2d:b4:df:49:ba:8f:
                    bb:cd:aa:a4:97:52:b9:6c:9b:39:67:df:fb:bd:f6:
                    8c:94:92:c1:ab:05:a8:0f:7c:91:8a:7a:1f:0f:b6:
                    8f:c8:60:e8:8a:c5:dc:99:fb:f4:b2:45:fa:8a:e3:
                    64:8b:31:c0:fc:07:e6:da:a6:b0:4e:b2:21:05:f7:
                    95:22:de:4f:13:93:c3:d9:a2:ad:dc:cb:fb:01:f7:
                    6b:92:8b:4e:8e:4f:8d:b6:77:6d:9b:d6:b7:df:d1:
                    8f:0e:f5:04:26:d1:7a:c7:43:8e:24:1b:14:57:fd:
                    66:16:e7:1f:8c:6d:49:8d:d9:d9:97:e6:6c:ae:e2:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E9:00:6B:5F:3A:89:29:02:4E:DE:41:94:DC:25:E4:E9:CF:22:37
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32322d3232203d3e203532383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:f4:ab:9f:2b:3a:ac:4e:8d:1c:a1:83:cf:c6:62:f4:e9:f8:
         7c:b6:77:49:86:bd:ee:bc:c2:48:38:af:ea:89:ea:59:44:f4:
         f3:ed:62:77:2b:3e:d4:52:49:48:59:db:88:52:be:6b:09:ee:
         74:d2:c0:4a:29:15:db:31:22:ef:18:c7:b3:f4:86:0d:18:4a:
         4b:b9:af:29:56:9a:27:ef:d3:99:f5:6b:96:4e:72:82:5e:85:
         62:18:89:38:2c:04:f1:50:65:df:ad:ae:c6:14:d1:df:37:f7:
         e2:56:fd:a1:ed:bc:a4:96:c7:88:39:ef:42:f6:ee:32:f1:fc:
         8b:a4:bf:a2:76:f0:bc:91:9e:f5:e1:51:10:f5:d6:29:08:5c:
         85:c2:2d:d5:24:40:19:15:90:8f:91:cf:77:8f:e4:96:8b:ff:
         11:4b:b4:c7:3d:ae:4e:b0:c5:4c:80:83:7a:bd:cc:82:9a:13:
         be:a6:20:df:05:ed:62:3b:87:0c:ee:fb:1e:80:f2:7d:de:d3:
         18:9d:fa:7b:f1:fc:05:22:6a:52:11:4b:67:0c:ab:10:31:c6:
         2b:6c:c9:e5:08:2e:cc:fc:3d:d2:de:9f:8f:cf:fd:f0:ec:df:
         f2:9d:c5:2e:8b:e5:76:9e:d6:a2:b9:d3:5e:5c:04:b6:de:a1:
         54:90:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org