Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231322e302f32332d3233203d3e20323633333937.roa
File:                     3137372e3232322e3231322e302f32332d3233203d3e20323633333937.roa (raw, json)
Hash identifier:          agVrkfKAErfNwj6uWQFzqGtat5Rk/VARJjQOIa5iO3I=
Subject key identifier:   9C:E1:CF:82:8E:2E:E8:FA:DE:6E:3B:D3:A7:86:54:2D:13:99:C5:58
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       3C69D3919C69AC49B1E2F1139CB27424AEBF3EC5
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231322e302f32332d3233203d3e20323633333937.roa
Signing time:             Thu 18 Apr 2024 18:03:18 +0000
ROA not before:           Thu 18 Apr 2024 17:58:18 +0000
ROA not after:            Thu 17 Apr 2025 18:03:18 +0000
asID:                     263397
IP address blocks:        177.222.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:d3:91:9c:69:ac:49:b1:e2:f1:13:9c:b2:74:24:ae:bf:3e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:58:18 2024 GMT
            Not After : Apr 17 18:03:18 2025 GMT
        Subject: CN=9CE1CF828E2EE8FADE6E3BD3A786542D1399C558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:56:d4:a3:04:ab:ed:74:93:f6:af:6c:2e:
                    56:71:c2:86:3c:b8:85:ae:a8:d3:5b:8a:aa:50:18:
                    29:78:e7:c1:b7:63:03:7c:0d:43:55:82:d4:0e:87:
                    d2:1d:b5:de:21:80:83:d1:6d:56:c7:04:48:de:cb:
                    2c:76:e2:9c:4c:1e:87:f1:30:7d:bc:76:e3:e9:69:
                    72:ef:51:2f:d4:a9:19:38:08:32:12:42:d5:3c:ef:
                    39:2b:5d:62:c5:c4:93:cd:4d:85:54:69:51:1b:78:
                    ed:0f:ed:95:42:19:8f:08:27:e8:5f:e9:9b:0b:05:
                    dc:48:3c:70:5e:29:fc:57:9b:01:02:b3:65:6c:d8:
                    66:f8:9e:66:d4:24:5f:6d:8f:e4:56:ab:7b:21:21:
                    c3:f1:19:9f:0b:73:85:86:31:14:5d:ae:c2:7c:9c:
                    81:32:b0:22:cf:29:1c:3a:ee:6f:bb:2b:2d:d7:f4:
                    64:99:e2:3a:f9:91:e9:5e:30:bd:d5:59:91:a7:7e:
                    ce:fe:22:3e:ba:04:3c:96:64:92:94:81:73:bf:dd:
                    98:d8:91:e7:e7:18:e1:0f:80:aa:34:5d:a2:53:b1:
                    ea:9e:80:e8:ca:35:83:11:32:3c:c5:49:b1:1c:97:
                    69:b9:39:b5:00:c8:93:b2:8d:a7:78:99:b6:11:f3:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E1:CF:82:8E:2E:E8:FA:DE:6E:3B:D3:A7:86:54:2D:13:99:C5:58
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3232322e3231322e302f32332d3233203d3e20323633333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:66:c8:77:5f:ac:9b:2f:16:0f:86:57:86:18:5e:b4:5f:
         1c:90:9a:3e:90:1e:5e:f0:6f:67:b7:ae:dc:56:9b:be:48:a9:
         ac:5f:3e:dd:bd:fb:91:9d:f9:d2:ad:1d:37:40:21:e7:29:66:
         99:c4:1c:14:ad:de:5e:d7:71:bc:04:94:07:98:a8:41:82:3d:
         3c:c9:0f:12:a2:0b:d7:d8:63:55:a1:e9:9c:cd:84:56:b2:a7:
         cc:00:68:cb:37:ef:db:7a:a5:9f:e8:e9:5b:bc:59:cc:64:c2:
         fb:2a:7b:ce:cc:af:92:5d:18:b7:d3:1a:1c:b9:6c:37:1a:13:
         81:37:49:0a:92:1c:3c:db:56:ec:29:ec:72:a9:5c:bf:98:df:
         82:09:a6:9f:7f:ea:5f:9c:f5:32:3b:50:2d:6a:ad:6f:70:73:
         46:5e:57:6a:df:f9:07:40:f9:d8:c6:d2:a8:cf:d0:8b:1c:40:
         eb:85:17:aa:23:e3:ef:6e:44:a1:23:94:74:3a:bf:9a:60:a9:
         52:0e:ca:79:5c:78:3f:67:fe:af:95:34:2a:01:56:14:98:05:
         8d:0d:f3:b3:e0:ff:f2:34:ae:1d:66:6f:76:be:64:c9:f1:f3:
         99:fc:8f:28:a6:98:a8:70:d1:53:5d:e2:a8:c5:46:9c:f8:c0:
         a8:a5:77:fd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPGnTkZxprEmx4vETnLJ0JK6/PsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA0MTgxNzU4MThaFw0yNTA0MTcxODAzMThaMDMxMTAvBgNV
BAMTKDlDRTFDRjgyOEUyRUU4RkFERTZFM0JEM0E3ODY1NDJEMTM5OUM1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvFbUowSr7XST9q9sLlZxwoY8
uIWuqNNbiqpQGCl458G3YwN8DUNVgtQOh9Idtd4hgIPRbVbHBEjeyyx24pxMHofx
MH28duPpaXLvUS/UqRk4CDISQtU87zkrXWLFxJPNTYVUaVEbeO0P7ZVCGY8IJ+hf
6ZsLBdxIPHBeKfxXmwECs2Vs2Gb4nmbUJF9tj+RWq3shIcPxGZ8Lc4WGMRRdrsJ8
nIEysCLPKRw67m+7Ky3X9GSZ4jr5keleML3VWZGnfs7+Ij66BDyWZJKUgXO/3ZjY
kefnGOEPgKo0XaJTseqegOjKNYMRMjzFSbEcl2m5ObUAyJOyjad4mbYR85YNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnOHPgo4u6PrebjvTp4ZULROZxVgwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzNzM3MmUzMjMyMzIyZTMyMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbHe1DANBgkqhkiG9w0BAQsFAAOCAQEAPQZm
yHdfrJsvFg+GV4YYXrRfHJCaPpAeXvBvZ7eu3FabvkiprF8+3b37kZ350q0dN0Ah
5ylmmcQcFK3eXtdxvASUB5ioQYI9PMkPEqIL19hjVaHpnM2EVrKnzABoyzfv23ql
n+jpW7xZzGTC+yp7zsyvkl0Yt9MaHLlsNxoTgTdJCpIcPNtW7Cnscqlcv5jfggmm
n3/qX5z1MjtQLWqtb3BzRl5Xat/5B0D52MbSqM/QixxA64UXqiPj725EoSOUdDq/
mmCpUg7KeVx4P2f+r5U0KgFWFJgFjQ3zs+D/8jSuHWZvdr5kyfHzmfyPKKaYqHDR
U13iqMVGnPjAqKV3/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org