Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231302e302f32332d3233203d3e20323633333937.roa
File:                     3137372e3232322e3231302e302f32332d3233203d3e20323633333937.roa (raw, json)
Hash identifier:          XQHUcxs+MrccZ7M1yS04647aAt3dJUeFFkb1AOqzArQ=
Subject key identifier:   19:6F:06:E5:2A:57:8C:0B:FB:8B:1C:6C:98:C1:DF:62:DE:DD:9E:A0
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       2A056EDCC9D694D783EAC2AF7C5F2222C79F532F
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231302e302f32332d3233203d3e20323633333937.roa
Signing time:             Thu 18 Apr 2024 18:02:27 +0000
ROA not before:           Thu 18 Apr 2024 17:57:27 +0000
ROA not after:            Thu 17 Apr 2025 18:02:27 +0000
asID:                     263397
IP address blocks:        177.222.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:05:6e:dc:c9:d6:94:d7:83:ea:c2:af:7c:5f:22:22:c7:9f:53:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:57:27 2024 GMT
            Not After : Apr 17 18:02:27 2025 GMT
        Subject: CN=196F06E52A578C0BFB8B1C6C98C1DF62DEDD9EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:02:10:55:61:e1:c9:f4:74:1f:57:e7:86:
                    7d:1a:8f:07:bb:9b:ed:ef:c9:9b:8a:b0:77:79:8a:
                    46:05:98:74:00:89:72:95:df:c8:6a:7a:83:9e:09:
                    38:a2:c0:1e:d0:72:75:55:ee:c8:f4:08:86:61:53:
                    1c:5a:d4:2a:4b:df:c9:21:b2:9d:af:86:7b:3c:0e:
                    ec:3a:4f:36:b4:e5:34:24:79:e3:6d:44:ee:3a:99:
                    aa:4a:48:ab:b0:15:60:ff:45:3a:6c:c4:7e:97:25:
                    d9:fe:b7:17:af:4d:fa:bd:a4:a4:6d:77:ad:88:9b:
                    d2:e6:c0:d9:c0:af:60:98:9a:0f:14:b8:b4:54:8d:
                    52:74:d3:39:2b:cb:8f:1a:f3:90:6b:f5:24:2b:b7:
                    18:13:ec:85:d3:13:47:6c:3f:71:d7:89:cb:4c:77:
                    78:97:72:0d:00:a9:bb:18:67:cf:b7:27:a7:ba:1b:
                    5d:d5:6f:9a:2b:0c:06:36:d5:b5:76:5e:7f:9d:62:
                    73:7e:9a:67:cd:ba:b7:a0:c4:f7:f7:15:2f:d1:97:
                    c8:25:bc:fd:26:92:74:b0:cc:87:f5:b3:95:b0:98:
                    84:d0:fb:00:83:df:ef:c7:7a:4b:fa:be:c7:e5:03:
                    97:3f:22:d8:05:70:ec:ca:14:e7:43:7f:16:82:84:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6F:06:E5:2A:57:8C:0B:FB:8B:1C:6C:98:C1:DF:62:DE:DD:9E:A0
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231302e302f32332d3233203d3e20323633333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:bc:4a:f0:13:21:6a:56:9c:e5:77:d7:04:a8:df:e4:bd:eb:
         e4:42:8f:ee:b2:94:92:66:5c:67:93:0e:6f:0f:66:d9:cc:68:
         0a:61:ae:de:6f:90:18:8a:d4:17:dd:97:ec:20:6c:83:10:84:
         40:70:8c:0f:bb:55:77:28:e3:f1:b6:dd:83:81:ee:30:f9:b3:
         21:e8:1c:d1:2f:37:b2:b2:d2:6c:3c:55:ef:b0:bd:c9:ab:f3:
         2d:2f:cc:02:2f:34:e5:9a:d7:1b:76:ed:4b:48:a6:f4:2c:fe:
         81:9e:04:81:2f:5c:d5:4d:f7:65:b8:75:73:39:b5:3f:eb:b5:
         e3:60:7d:c5:f7:35:ef:41:b0:28:49:e5:bc:82:e8:7b:e3:d2:
         0e:ae:a3:8c:4b:f3:7c:56:0e:43:86:8f:f8:53:0c:59:c3:b4:
         d6:d2:4d:f6:19:3b:8e:79:53:4d:40:78:ae:29:ab:3b:26:fb:
         51:dc:82:3b:0f:9c:f7:26:46:11:9c:b3:97:bb:d0:21:5c:3b:
         2f:d0:f9:b5:8e:bf:3a:e8:30:9c:2b:33:24:55:60:b8:31:11:
         3d:d4:f1:27:3b:12:69:a3:96:13:5b:c0:25:b3:f1:9a:c5:b4:
         87:cb:b1:6e:45:99:a7:93:33:b2:cb:c6:fd:6e:4f:0f:e6:28:
         53:7e:33:d3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKgVu3MnWlNeD6sKvfF8iIsefUy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA0MTgxNzU3MjdaFw0yNTA0MTcxODAyMjdaMDMxMTAvBgNV
BAMTKDE5NkYwNkU1MkE1NzhDMEJGQjhCMUM2Qzk4QzFERjYyREVERDlFQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdpAIQVWHhyfR0H1fnhn0ajwe7
m+3vyZuKsHd5ikYFmHQAiXKV38hqeoOeCTiiwB7QcnVV7sj0CIZhUxxa1CpL38kh
sp2vhns8Duw6Tza05TQkeeNtRO46mapKSKuwFWD/RTpsxH6XJdn+txevTfq9pKRt
d62Im9LmwNnAr2CYmg8UuLRUjVJ00zkry48a85Br9SQrtxgT7IXTE0dsP3HXictM
d3iXcg0AqbsYZ8+3J6e6G13Vb5orDAY21bV2Xn+dYnN+mmfNuregxPf3FS/Rl8gl
vP0mknSwzIf1s5WwmITQ+wCD3+/Hekv6vsflA5c/ItgFcOzKFOdDfxaChC4VAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGW8G5SpXjAv7ixxsmMHfYt7dnqAwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzNzM3MmUzMjMyMzIyZTMyMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbHe0jANBgkqhkiG9w0BAQsFAAOCAQEAsrxK
8BMhalac5XfXBKjf5L3r5EKP7rKUkmZcZ5MObw9m2cxoCmGu3m+QGIrUF92X7CBs
gxCEQHCMD7tVdyjj8bbdg4HuMPmzIegc0S83srLSbDxV77C9yavzLS/MAi805ZrX
G3btS0im9Cz+gZ4EgS9c1U33Zbh1czm1P+u142B9xfc170GwKEnlvILoe+PSDq6j
jEvzfFYOQ4aP+FMMWcO01tJN9hk7jnlTTUB4rimrOyb7UdyCOw+c9yZGEZyzl7vQ
IVw7L9D5tY6/OugwnCszJFVguDERPdTxJzsSaaOWE1vAJbPxmsW0h8uxbkWZp5Mz
ssvG/W5PD+YoU34z0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org