Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3230382e302f32312d3231203d3e20323733333039.roa
File:                     3137372e3232322e3230382e302f32312d3231203d3e20323733333039.roa (raw, json)
Hash identifier:          IhHDGWoO4D3YbVVgs7msmeT2zJC3NqRnuWQavAR4v1I=
Subject key identifier:   E2:46:9E:F4:7C:FE:DC:F8:3D:4C:E2:8E:D2:10:1A:F3:22:DD:5E:FB
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       3DB6EF32202782EF7A445AB6A2263855A9346389
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3230382e302f32312d3231203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:30:44 +0000
ROA not before:           Thu 09 May 2024 13:25:44 +0000
ROA not after:            Thu 08 May 2025 13:30:44 +0000
asID:                     273309
IP address blocks:        177.222.208.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b6:ef:32:20:27:82:ef:7a:44:5a:b6:a2:26:38:55:a9:34:63:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:25:44 2024 GMT
            Not After : May  8 13:30:44 2025 GMT
        Subject: CN=E2469EF47CFEDCF83D4CE28ED2101AF322DD5EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:45:47:df:8b:67:7a:ea:e1:a6:25:fb:0a:
                    40:87:55:36:1d:3b:c4:20:27:f2:17:98:53:9a:af:
                    fd:70:b1:61:50:ec:5b:27:e6:84:b4:48:16:8c:65:
                    0d:b7:34:6d:7e:ab:3d:9b:61:bc:2a:c0:26:aa:26:
                    08:20:45:9a:59:7d:7c:cd:d2:97:bb:46:3e:e3:66:
                    0c:00:c5:22:b9:db:18:57:25:8d:f4:65:75:dc:9b:
                    d6:41:67:41:81:9d:f4:11:f6:c4:f6:b2:4e:0d:d1:
                    c2:96:b4:38:0e:fe:a5:95:c9:ec:92:fd:73:9e:b8:
                    e2:8d:31:56:7d:82:be:2a:67:86:b5:e2:07:f2:02:
                    57:da:d9:12:ea:f7:b0:6d:a0:bd:81:be:ac:bd:55:
                    d5:af:40:c6:6a:31:c6:94:90:d6:17:a2:9f:c7:20:
                    a8:02:c8:ec:89:a6:d7:20:f3:22:2c:c3:73:35:ef:
                    cb:34:41:0b:c0:02:6e:d9:f3:e4:a5:cc:a5:61:5e:
                    41:22:f5:5f:ed:a4:49:b6:cd:dd:7e:d5:38:2b:34:
                    d9:dc:b5:58:70:fb:5b:6c:76:d4:ee:9e:48:c4:73:
                    56:4f:ea:fe:51:a8:a4:7d:2c:49:01:db:49:90:99:
                    b1:7e:33:b9:72:3b:cb:9c:4d:31:8c:d5:4a:11:24:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:9E:F4:7C:FE:DC:F8:3D:4C:E2:8E:D2:10:1A:F3:22:DD:5E:FB
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3230382e302f32312d3231203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d0:c5:81:25:b4:d8:cc:08:43:91:9c:92:dd:1e:f8:e2:d1:22:
         52:fc:cc:7f:85:e4:56:68:67:99:49:95:0b:70:90:85:00:13:
         d1:33:e4:43:16:23:60:f6:2e:a9:b3:cb:9f:f7:d1:68:63:ce:
         cb:52:30:09:82:5b:7e:2f:8d:50:31:25:06:b6:e6:5d:6c:1d:
         31:bd:2c:df:9d:6d:85:91:b1:c7:11:b3:3d:44:b5:41:ab:7a:
         75:0d:5c:16:94:e8:94:4d:a7:4e:2d:18:ff:39:a3:96:e8:97:
         c6:e6:77:e4:c8:2b:13:34:6e:5b:cc:45:88:16:cb:f0:92:61:
         0c:97:ad:45:10:d3:74:54:4a:0e:51:2a:52:18:e0:c3:01:db:
         0f:9a:ff:d8:d1:34:25:32:af:6d:a0:e7:1f:7f:65:d9:f1:0c:
         8b:9b:a0:e5:cb:a8:56:37:ca:5b:ed:0a:64:af:86:9e:88:b3:
         ee:24:30:61:06:05:0d:92:86:de:03:2f:1f:e3:92:58:ba:00:
         64:9b:54:77:4a:59:e3:0f:f7:69:81:3c:76:71:a1:c3:a3:bb:
         4a:84:b3:22:00:0b:18:9a:6b:46:a8:dc:51:44:75:ef:14:43:
         cf:fe:2f:8f:3a:ae:68:7f:15:fa:2e:08:56:73:cb:b8:ef:36:
         b6:47:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org