Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3132342e3138352e302f32342d3234203d3e203532383635.roa
File:                     3137372e3132342e3138352e302f32342d3234203d3e203532383635.roa (raw, json)
Hash identifier:          c9rUqQVF506vYj2iN2BQA2CTvpCXeZEO3zkOtswiRCI=
Subject key identifier:   6D:CE:78:D9:A3:1B:C7:80:6A:6E:9C:34:6D:B2:03:8F:49:79:4E:69
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       0D9B4D94E08344D7E66CAA52AD837DD952344A9B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3132342e3138352e302f32342d3234203d3e203532383635.roa
Signing time:             Thu 18 Apr 2024 18:01:36 +0000
ROA not before:           Thu 18 Apr 2024 17:56:36 +0000
ROA not after:            Thu 17 Apr 2025 18:01:36 +0000
asID:                     52865
IP address blocks:        177.124.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9b:4d:94:e0:83:44:d7:e6:6c:aa:52:ad:83:7d:d9:52:34:4a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:56:36 2024 GMT
            Not After : Apr 17 18:01:36 2025 GMT
        Subject: CN=6DCE78D9A31BC7806A6E9C346DB2038F49794E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:cb:e5:38:17:ee:23:94:df:ad:e0:0a:c0:
                    23:22:82:51:e6:95:77:1a:dc:49:0b:d5:4e:fd:44:
                    62:6f:70:f9:19:28:8b:af:09:26:a5:86:1c:24:7e:
                    8f:5d:a0:ea:37:b3:ec:d9:d9:71:ec:a1:3b:1b:95:
                    50:93:27:c2:a4:4e:cf:52:43:8a:6d:2a:ef:c4:9e:
                    67:7d:ef:45:3a:5b:5d:ec:66:3c:85:2c:b9:93:c0:
                    3f:fb:88:a2:41:8b:2a:07:fc:6e:c6:00:98:93:ac:
                    ac:9e:1d:60:be:d3:aa:1c:e1:a6:82:2c:c7:6b:0f:
                    fc:1c:2d:43:74:0c:34:58:e9:c9:a7:4a:72:b5:cd:
                    bf:9e:9a:15:42:5d:15:a5:c2:7a:db:ed:d4:fe:e2:
                    05:c4:44:3f:6a:17:fc:a1:a8:05:26:9c:c0:90:30:
                    06:15:20:54:14:5b:ce:70:cb:48:49:dd:26:80:d0:
                    ba:1e:82:7c:b3:cf:48:33:67:a8:fe:47:b0:6c:c5:
                    56:da:87:f2:38:ed:f0:5a:f5:7d:7a:12:0f:e7:bd:
                    83:13:5f:3c:c1:05:37:38:94:64:59:43:93:23:aa:
                    29:4c:69:5d:36:79:57:c3:a1:a9:73:79:2c:76:fe:
                    57:7a:a9:36:0e:73:08:01:cb:a4:34:4a:fa:b3:d3:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CE:78:D9:A3:1B:C7:80:6A:6E:9C:34:6D:B2:03:8F:49:79:4E:69
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3132342e3138352e302f32342d3234203d3e203532383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:50:2d:2f:3b:ae:c0:c7:33:95:f6:a6:18:37:17:24:a2:e7:
         1b:db:c0:bb:ba:e6:d9:b1:26:c7:cd:7e:01:e3:a1:c9:e8:f5:
         8b:22:e7:ac:9e:d2:13:c6:c3:11:8f:61:3e:ad:88:0d:c9:f5:
         ae:ec:32:a4:5d:44:23:ff:fb:85:fe:b0:16:3b:22:85:9c:08:
         59:fe:2e:73:d5:53:bd:ed:47:4d:d4:8c:f1:53:72:b2:c5:a9:
         b6:73:d2:b0:93:5c:d2:5d:b7:51:09:aa:d3:f7:4e:6d:43:7a:
         0c:16:9f:eb:23:3f:31:6a:28:98:38:b9:23:6d:9a:83:2e:dc:
         1e:63:c8:a5:02:3b:da:87:1b:c1:a0:cf:28:f2:5e:99:d7:68:
         44:45:1a:94:80:c7:df:43:16:da:bf:88:c2:8a:b0:9e:41:24:
         99:e7:92:04:17:6e:44:04:07:81:7f:ae:6d:ff:d6:bc:4d:ed:
         58:e7:29:9e:d4:f4:37:62:54:64:b0:ed:fa:e7:98:22:a2:3c:
         46:74:52:60:f6:03:cf:8f:bb:df:15:95:78:fe:08:74:c3:87:
         88:a6:ce:e7:b6:cb:2d:54:77:63:b9:66:c8:56:9d:27:b9:d1:
         d5:45:af:b4:d9:5e:3f:fe:84:e0:f2:bc:5b:4d:5a:a2:d3:e3:
         a1:c2:94:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDZtNlOCDRNfmbKpSrYN92VI0SpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA0MTgxNzU2MzZaFw0yNTA0MTcxODAxMzZaMDMxMTAvBgNV
BAMTKDZEQ0U3OEQ5QTMxQkM3ODA2QTZFOUMzNDZEQjIwMzhGNDk3OTRFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53MvlOBfuI5TfreAKwCMiglHm
lXca3EkL1U79RGJvcPkZKIuvCSalhhwkfo9doOo3s+zZ2XHsoTsblVCTJ8KkTs9S
Q4ptKu/Enmd970U6W13sZjyFLLmTwD/7iKJBiyoH/G7GAJiTrKyeHWC+06oc4aaC
LMdrD/wcLUN0DDRY6cmnSnK1zb+emhVCXRWlwnrb7dT+4gXERD9qF/yhqAUmnMCQ
MAYVIFQUW85wy0hJ3SaA0Loegnyzz0gzZ6j+R7BsxVbah/I47fBa9X16Eg/nvYMT
XzzBBTc4lGRZQ5MjqilMaV02eVfDoalzeSx2/ld6qTYOcwgBy6Q0Svqz09dXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbc542aMbx4Bqbpw0bbIDj0l5TmkwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzNzM3MmUzMTMyMzQyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzODM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxfLkwDQYJKoZIhvcNAQELBQADggEBADBQLS87
rsDHM5X2phg3FySi5xvbwLu65tmxJsfNfgHjocno9Ysi56ye0hPGwxGPYT6tiA3J
9a7sMqRdRCP/+4X+sBY7IoWcCFn+LnPVU73tR03UjPFTcrLFqbZz0rCTXNJdt1EJ
qtP3Tm1DegwWn+sjPzFqKJg4uSNtmoMu3B5jyKUCO9qHG8GgzyjyXpnXaERFGpSA
x99DFtq/iMKKsJ5BJJnnkgQXbkQEB4F/rm3/1rxN7VjnKZ7U9DdiVGSw7frnmCKi
PEZ0UmD2A8+Pu98VlXj+CHTDh4imzue2yy1Ud2O5ZshWnSe50dVFr7TZXj/+hODy
vFtNWqLT46HClPU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org