Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3230382e302f32332d3233203d3e20323733333039.roa
File:                     3137372e3232322e3230382e302f32332d3233203d3e20323733333039.roa (raw, json)
Hash identifier:          i+WKTq4mWn1NEK6mMSTk8893T3NM+CX7f17rEeF1uCs=
Subject key identifier:   B5:E2:87:B4:EE:C5:19:61:78:34:F2:1F:C5:39:47:EF:23:BD:26:E0
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       5F5BC8E641CC7C031F5BDE38C1A182BD8B457822
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3230382e302f32332d3233203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:31:45 +0000
ROA not before:           Thu 09 May 2024 13:26:45 +0000
ROA not after:            Thu 08 May 2025 13:31:45 +0000
asID:                     273309
IP address blocks:        177.222.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:c8:e6:41:cc:7c:03:1f:5b:de:38:c1:a1:82:bd:8b:45:78:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:26:45 2024 GMT
            Not After : May  8 13:31:45 2025 GMT
        Subject: CN=B5E287B4EEC519617834F21FC53947EF23BD26E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:bd:24:e6:2f:e6:e2:d3:c9:ce:87:08:c1:
                    87:7c:5c:6d:9a:51:97:db:72:c3:9b:70:66:29:d1:
                    1c:12:7b:d5:92:05:ac:82:f1:9a:90:b6:1a:4e:9a:
                    1f:88:7d:41:62:3c:ed:6a:23:fc:97:e4:d7:c7:41:
                    98:f8:80:f2:81:8a:d9:64:c4:80:cf:ac:4a:c3:d7:
                    1f:3f:45:52:ed:eb:0f:89:36:21:69:a9:ac:f5:67:
                    9f:de:ef:0a:8c:f3:72:03:3e:93:d7:83:b9:07:9e:
                    ed:31:4a:cd:4a:90:5f:7d:54:1b:14:df:63:40:4e:
                    ef:50:3f:bb:78:f4:0b:5c:b7:40:4f:d8:36:e5:5b:
                    d1:d2:25:b1:36:9d:db:77:2b:1a:c5:c6:ce:0b:f7:
                    75:10:27:d0:5a:73:19:b9:d4:a2:59:a3:40:fe:3c:
                    eb:d9:6b:65:7d:07:7a:51:a6:8c:60:e6:9a:2f:ed:
                    30:33:cc:41:99:96:a0:9a:6b:bc:4b:b0:25:c8:ab:
                    52:be:49:25:e1:24:fa:0e:d1:50:f9:15:4a:9d:3b:
                    be:2c:2e:50:e5:07:d6:86:c9:43:ef:1c:e5:1d:11:
                    b2:ee:a9:1f:7c:98:28:89:fa:ae:c9:d8:0a:a5:37:
                    d9:6c:24:f5:f1:fb:61:b3:9d:ce:44:0c:31:2b:da:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E2:87:B4:EE:C5:19:61:78:34:F2:1F:C5:39:47:EF:23:BD:26:E0
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3230382e302f32332d3233203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:3e:3b:95:a9:27:5e:de:96:99:5a:67:d3:e5:2d:0b:87:76:
         9b:34:f5:8d:16:a1:74:b9:a1:56:fd:ea:22:88:8f:13:6c:0e:
         5c:90:52:13:3a:cd:1b:00:c3:a5:87:41:df:cd:28:a0:1b:6a:
         67:18:f5:25:23:2e:57:ac:5d:71:d6:16:2c:ec:0e:02:61:9d:
         dc:bb:dd:1e:ae:d6:c0:86:0f:98:39:60:aa:77:ec:cf:df:af:
         df:21:b2:8b:60:83:9c:10:97:c2:5c:e6:f4:1d:dc:2d:39:6d:
         cb:c0:86:8a:cc:80:1b:5a:38:35:e9:fe:59:2a:c7:4b:42:50:
         c7:d2:eb:eb:73:29:09:26:3e:c9:17:8f:f6:50:fa:61:da:c3:
         a9:81:c1:63:52:b3:ea:b0:89:d6:ea:be:f6:ec:d1:69:13:e6:
         bc:f5:42:30:f3:62:ab:7e:35:81:42:8f:26:6f:30:d4:0d:b4:
         46:16:54:7d:6a:16:02:3c:45:bc:2e:46:5d:d9:63:f0:3e:70:
         27:db:c7:7a:cc:e9:bc:6d:d2:01:28:31:59:b1:78:a5:65:bd:
         09:94:bf:5c:3c:16:5f:85:f5:20:fe:df:1e:81:35:67:aa:d2:
         3f:3a:7f:fe:d7:eb:b4:21:82:12:d2:c9:c2:24:46:58:f5:94:
         14:38:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org