Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32322d3232203d3e20323733333039.roa
File:                     3137372e3135322e3131322e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          YnHGqpI1YQLxJuevQoTrzeT00+HtgVCtmlBQOTUFCAQ=
Subject key identifier:   17:D0:CE:1A:6B:64:DA:26:9B:18:8E:20:40:64:44:CC:A0:CB:75:F4
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       47F704B406370A335D60E7AD7FDC8CCFBCE8DEA4
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:29:46 +0000
ROA not before:           Thu 09 May 2024 13:24:46 +0000
ROA not after:            Thu 08 May 2025 13:29:46 +0000
asID:                     273309
IP address blocks:        177.152.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f7:04:b4:06:37:0a:33:5d:60:e7:ad:7f:dc:8c:cf:bc:e8:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:24:46 2024 GMT
            Not After : May  8 13:29:46 2025 GMT
        Subject: CN=17D0CE1A6B64DA269B188E20406444CCA0CB75F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:48:fe:e8:aa:b7:74:f9:69:cc:01:c8:c3:
                    c2:a3:7e:a2:74:d9:06:82:5a:b4:32:f2:41:4b:38:
                    07:66:ef:ad:b3:0a:08:cf:18:10:c6:81:7c:b1:46:
                    24:3e:db:86:5d:50:47:29:b7:5f:c8:aa:18:79:45:
                    4b:74:9b:df:24:9b:64:a8:d1:35:7a:7b:8f:ee:b0:
                    f2:cf:62:0c:42:3b:45:cb:6b:4a:a8:8e:98:ca:ff:
                    fe:13:75:a6:75:1f:7e:c0:1b:e8:fd:4c:78:6e:b7:
                    9b:00:be:28:f1:7f:48:65:1c:ca:66:6f:57:27:8c:
                    18:7b:09:e5:dc:83:cf:00:f1:fd:02:fb:e9:65:78:
                    69:4a:d5:93:cb:16:2e:fd:94:91:f1:c9:3c:3f:85:
                    36:18:6d:ee:a6:57:54:ab:46:e8:96:19:00:8a:5b:
                    2a:fa:96:68:4f:da:6a:45:66:6d:63:67:a8:18:20:
                    80:44:36:e4:be:57:5f:4e:49:e7:0c:c2:15:6f:08:
                    25:5a:98:6a:71:6f:78:16:31:cd:7a:a5:c6:eb:38:
                    1c:46:b2:ba:77:b5:e7:19:3d:66:41:85:21:10:f3:
                    80:e3:25:d1:ae:3d:42:31:f1:15:69:12:95:0e:1f:
                    2d:57:05:af:de:7d:0b:b3:7f:77:2d:1c:12:3d:22:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D0:CE:1A:6B:64:DA:26:9B:18:8E:20:40:64:44:CC:A0:CB:75:F4
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:00:ac:4d:54:97:ec:15:cb:36:ee:69:d7:5a:aa:82:10:
         39:ed:64:07:ba:42:91:0b:38:c0:6d:67:2a:15:b1:74:68:ab:
         12:b7:6e:53:2e:50:62:a8:76:a1:fc:37:f6:d4:04:7c:f1:9c:
         1c:fc:fa:ca:c6:2b:7e:8e:5b:60:83:ec:2f:91:ad:b5:d4:8f:
         b6:3f:c7:a2:3d:e6:3f:af:e7:a6:f1:7f:82:bf:38:c4:62:6b:
         9d:9f:e6:d6:92:83:e0:f0:13:cd:e5:94:a2:e4:b0:1b:de:71:
         30:78:7e:cd:56:8b:d3:a6:5c:d4:f6:cd:bb:b1:47:74:28:84:
         17:00:ab:96:c3:c8:7c:60:f7:10:58:3a:ca:7b:88:84:ef:e5:
         93:fb:5f:72:5f:26:f6:88:78:76:ab:3b:54:34:cc:2c:cb:04:
         75:75:0b:ff:88:05:3d:65:66:86:dd:c9:6f:dd:86:1c:da:b3:
         95:fb:d2:96:c9:80:8e:2c:cd:8f:c6:84:49:b5:54:c5:59:dc:
         1d:3e:dc:ba:55:56:0e:d2:8b:8d:2d:e0:62:9c:b7:72:4d:6d:
         4b:e0:9b:8a:c2:ef:80:4e:5d:54:fc:f8:1e:49:e1:75:3f:40:
         19:ac:4b:4c:8d:c3:01:8a:a7:14:68:d0:ab:01:a2:43:bd:49:
         b0:2a:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org