Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32342d3234203d3e203532383635.roa
File:                     3136382e3232382e32342e302f32342d3234203d3e203532383635.roa (raw, json)
Hash identifier:          tjsqFwfSO22ivOrzW76uca40EYzaSsPTeNi8ukZeB9E=
Subject key identifier:   E4:19:D2:0E:BF:28:11:A9:A7:FF:E6:60:77:0F:FD:3C:10:4A:51:D5
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       52192FA90A5E99C3538ADC2E1D458568DD063E62
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32342d3234203d3e203532383635.roa
Signing time:             Thu 18 Apr 2024 18:01:25 +0000
ROA not before:           Thu 18 Apr 2024 17:56:25 +0000
ROA not after:            Thu 17 Apr 2025 18:01:25 +0000
asID:                     52865
IP address blocks:        168.228.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:19:2f:a9:0a:5e:99:c3:53:8a:dc:2e:1d:45:85:68:dd:06:3e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:25 2024 GMT
            Not After : Apr 17 18:01:25 2025 GMT
        Subject: CN=E419D20EBF2811A9A7FFE660770FFD3C104A51D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:a8:84:2b:46:6c:31:a8:c7:54:4a:a7:9f:
                    cc:fe:31:03:57:ce:0c:d8:03:b8:ca:bb:0a:da:85:
                    89:01:50:1e:fe:d2:2a:46:5b:23:9f:b8:94:b0:19:
                    22:c0:c7:67:c4:7e:6a:93:8c:06:58:96:c4:dd:35:
                    f4:ff:25:be:de:7a:fd:a8:bf:12:59:d1:72:74:42:
                    10:5f:41:32:75:fc:84:31:66:1a:f1:1d:33:58:b7:
                    cf:e5:c2:14:61:eb:0b:76:1b:d0:26:98:f8:da:54:
                    53:c0:5e:b7:97:90:2a:47:7e:05:05:b6:8c:26:c0:
                    a3:88:b3:6a:26:15:1c:6c:be:73:d6:94:d3:b4:21:
                    2e:41:ae:a0:b8:00:1c:01:97:d9:b4:7e:db:78:77:
                    ef:af:df:21:36:40:03:af:3d:df:04:53:a2:73:ae:
                    df:b3:98:64:da:38:54:be:ad:88:0e:3f:06:eb:3a:
                    6b:42:c2:5a:60:73:a4:7a:5e:c5:e5:9b:c2:9a:94:
                    74:bd:df:b7:15:08:c7:0f:ea:6b:ae:54:39:28:bf:
                    19:83:20:f0:48:fa:f3:dc:fc:fe:ed:62:dd:6d:aa:
                    3d:d8:04:20:cc:6c:cb:da:ed:4c:50:e4:1a:6b:6b:
                    45:09:8b:8c:cb:2f:e3:9e:05:31:56:bc:fb:06:4d:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:19:D2:0E:BF:28:11:A9:A7:FF:E6:60:77:0F:FD:3C:10:4A:51:D5
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3136382e3232382e32342e302f32342d3234203d3e203532383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:98:55:40:b5:38:77:61:a6:60:ab:2b:a2:6f:34:a3:6c:73:
         62:8d:9e:c3:70:06:22:22:0b:ab:1e:1e:29:ee:69:fe:0c:fc:
         17:bb:6c:ed:fc:f3:c9:fd:6b:f1:4a:74:7b:8d:0e:97:93:59:
         18:39:f6:7f:b1:d4:09:40:ee:70:2c:f5:08:d6:28:4d:8e:2d:
         c8:2f:71:7d:94:6b:45:03:e4:15:d3:c5:34:b1:59:96:40:9d:
         6c:c1:d4:9f:b3:1b:3b:5a:60:51:18:19:48:0d:ab:db:45:1b:
         88:ff:90:f4:61:85:c8:5d:70:4f:5e:9a:b5:4b:77:92:3e:a2:
         9b:c0:00:4b:9f:9c:b9:73:61:ff:52:41:70:02:79:6b:a7:0e:
         d1:99:73:ef:0f:32:cd:11:97:e7:05:cb:76:99:b1:06:84:eb:
         ab:85:d1:85:38:b1:54:c5:76:7f:4c:4a:77:f3:48:c3:e0:f8:
         71:5d:d5:de:30:fa:4c:17:44:44:8b:53:ef:01:fd:67:9a:4c:
         ca:c5:99:ac:f0:78:78:85:0f:ad:24:43:6c:29:30:84:93:c8:
         f9:7a:f0:df:d4:26:aa:dc:b0:95:87:bf:49:ba:0f:ef:66:f3:
         23:aa:1e:dd:39:3d:c0:1d:de:4b:e8:16:6a:95:92:22:dd:27:
         5b:87:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org