Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232302e302f32322d3232203d3e203532383635.roa
File:                     3138362e3232362e3232302e302f32322d3232203d3e203532383635.roa (raw, json)
Hash identifier:          ZNx1awMvJqNVdER+L/mjnheJIXhAaOIIqsnqmsdzLy0=
Subject key identifier:   11:C7:59:D8:57:39:0A:07:14:BC:CB:25:7E:A7:81:1E:2D:98:BB:F6
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       63AFCA67C7EEC787833F17CB43E7A9A029D0D6C1
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232302e302f32322d3232203d3e203532383635.roa
Signing time:             Thu 18 Apr 2024 18:02:13 +0000
ROA not before:           Thu 18 Apr 2024 17:57:13 +0000
ROA not after:            Thu 17 Apr 2025 18:02:13 +0000
asID:                     52865
IP address blocks:        186.226.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:af:ca:67:c7:ee:c7:87:83:3f:17:cb:43:e7:a9:a0:29:d0:d6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:57:13 2024 GMT
            Not After : Apr 17 18:02:13 2025 GMT
        Subject: CN=11C759D857390A0714BCCB257EA7811E2D98BBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:73:5e:ee:2a:ed:bd:b4:63:99:1e:a3:82:
                    ae:7c:82:9e:3d:07:3e:8d:e8:a9:13:77:94:7e:ae:
                    85:73:94:02:e1:5e:65:70:92:98:ea:16:7a:ea:c9:
                    89:3d:aa:fd:d9:bb:83:e2:80:50:d6:ff:e7:95:ce:
                    10:98:34:85:bf:74:85:48:c6:d5:44:3f:bb:39:31:
                    51:a7:b1:7d:02:7e:45:97:b6:7b:e7:b3:2c:51:2f:
                    1e:01:d6:33:5a:cf:0d:92:6c:d5:97:5f:54:82:e1:
                    b0:f2:98:4a:b9:bc:82:be:ce:54:30:5f:7c:a3:44:
                    0e:be:69:8f:4b:e4:6c:99:17:5a:f6:d8:3a:40:5a:
                    ae:78:d2:c0:50:d6:5d:f4:b1:5b:0b:7a:ad:94:5f:
                    6c:fc:31:8a:96:e8:26:22:0a:40:09:12:05:38:5e:
                    bb:eb:89:13:95:f9:ea:b9:25:29:2e:01:fb:83:be:
                    ca:eb:f0:ff:d9:d2:9f:46:83:cb:f8:fc:e2:68:c3:
                    c3:c7:fe:30:b6:db:bc:8c:23:18:39:88:63:21:ec:
                    48:bd:1b:f5:3b:55:10:4a:77:41:7d:f4:9a:5b:7e:
                    ec:8a:ff:f7:03:e0:ea:51:3d:b9:88:1d:5a:9d:2a:
                    27:bc:d7:b4:4d:f1:db:59:eb:60:54:5c:3e:54:f8:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C7:59:D8:57:39:0A:07:14:BC:CB:25:7E:A7:81:1E:2D:98:BB:F6
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232302e302f32322d3232203d3e203532383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:da:88:56:f8:0f:e9:de:46:80:e7:16:d4:c3:5b:43:d3:
         37:8b:fa:42:90:e1:71:aa:f3:b0:5d:2f:8d:a9:86:00:86:c4:
         26:a7:8c:34:03:b9:c6:b9:36:10:c1:c7:19:a3:1b:23:13:2b:
         76:ce:f5:92:c4:a9:3f:92:c1:9d:53:d2:98:26:b3:00:2e:1c:
         10:a8:ab:0f:19:e1:92:c9:8a:a5:15:b8:20:1d:62:1f:ca:d7:
         fd:a3:5e:3b:3c:55:01:72:c3:c8:e0:34:43:5a:2b:e3:9a:b2:
         2e:21:05:96:04:d4:de:6c:2e:cb:76:b7:c5:33:c0:db:d3:dd:
         e6:97:10:2f:e5:ed:d9:2e:14:06:4b:74:49:22:dc:b9:3f:8d:
         76:9c:e3:33:d8:6d:f7:2f:29:5d:14:cd:04:6b:42:7d:a2:84:
         78:e7:b3:7c:c3:19:81:76:83:cd:ea:ea:52:60:01:ac:5e:bd:
         b0:3b:ca:2c:62:6b:36:73:9c:73:39:e2:46:14:01:17:dc:44:
         5f:f8:aa:2a:55:1d:76:8d:ae:93:f9:92:0c:8a:5e:74:cc:60:
         10:77:15:ba:46:0d:d5:97:c5:4f:52:e7:bb:9e:c7:ca:03:ba:
         f1:3f:76:63:6c:40:cc:a1:09:70:e7:31:c5:01:2d:02:20:90:
         c7:8a:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org