Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232302e302f32342d3234203d3e203532383635.roa
File:                     3138362e3232362e3232302e302f32342d3234203d3e203532383635.roa (raw, json)
Hash identifier:          WN4ZAGYxllDYaPp4z10ofImqtBFfkC6uSnLb7w8rQLw=
Subject key identifier:   69:7E:23:89:9C:7D:10:1C:9D:E2:61:63:3A:92:51:0D:1F:90:DD:5B
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       24736FC5980A44F6FF41A672D810E26E783F3995
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232302e302f32342d3234203d3e203532383635.roa
Signing time:             Thu 18 Apr 2024 18:02:17 +0000
ROA not before:           Thu 18 Apr 2024 17:57:17 +0000
ROA not after:            Thu 17 Apr 2025 18:02:17 +0000
asID:                     52865
IP address blocks:        186.226.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:73:6f:c5:98:0a:44:f6:ff:41:a6:72:d8:10:e2:6e:78:3f:39:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:57:17 2024 GMT
            Not After : Apr 17 18:02:17 2025 GMT
        Subject: CN=697E23899C7D101C9DE261633A92510D1F90DD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:91:e5:5b:67:22:8e:88:97:00:ac:30:55:
                    bd:8d:f5:d9:86:8e:99:31:ed:a9:ba:c1:65:e3:e2:
                    cd:0e:5b:95:26:e8:b9:ee:7d:71:2d:b8:45:32:91:
                    8a:fd:a2:46:57:a8:81:94:60:53:00:33:c4:90:d7:
                    74:0f:c1:d9:9c:19:48:56:d7:b6:56:92:94:52:2d:
                    d9:0c:13:ad:f8:77:52:48:6e:5c:2e:4c:ba:6e:46:
                    26:12:49:d6:40:c3:57:80:2a:15:45:70:2e:64:65:
                    76:81:dd:f2:be:34:be:ef:73:ac:2f:aa:56:fd:64:
                    3f:f0:25:01:41:96:c5:f8:ad:e5:fa:2c:1b:4b:1b:
                    2b:a3:6d:68:d8:c4:16:6f:01:26:c1:f6:a2:13:33:
                    7c:3d:20:a8:1a:5c:2c:e9:a9:78:12:4c:f6:3a:3a:
                    7a:ec:5e:d5:77:6e:8c:9e:82:e3:22:13:b3:94:71:
                    dc:2f:54:79:67:94:09:27:c8:0a:92:7f:79:e2:c3:
                    e1:4c:8c:c2:e5:45:d3:50:52:4d:16:c3:ea:92:79:
                    4a:28:cc:14:c6:56:bd:9f:ee:17:e7:5d:ef:30:2d:
                    0a:ca:78:40:ba:26:09:5b:c0:24:47:94:fd:56:f6:
                    4c:22:79:c0:b7:9d:fa:19:e0:1a:a6:c8:a3:0a:66:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7E:23:89:9C:7D:10:1C:9D:E2:61:63:3A:92:51:0D:1F:90:DD:5B
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3138362e3232362e3232302e302f32342d3234203d3e203532383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:63:6a:ef:e0:fa:33:c7:32:a0:73:47:cb:84:58:af:a2:
         c8:38:22:d3:c1:e1:b3:36:ec:0f:84:ff:d8:5c:dc:a8:29:a1:
         68:d9:61:66:97:bc:76:22:ff:d5:a0:4c:7e:f4:06:82:3d:f7:
         47:e5:49:37:9d:16:03:88:7e:89:05:91:b3:52:fd:c5:ff:29:
         d2:c7:12:74:67:c1:4c:db:59:05:80:8d:5a:fa:9a:db:06:b7:
         5f:97:35:ba:5a:00:fc:78:b7:5d:49:a3:ca:41:a8:03:e4:51:
         82:69:65:75:17:cf:e8:ec:4a:33:c1:b7:9f:6c:4d:da:b6:1e:
         d0:aa:6c:38:c7:f8:2b:a8:e0:b2:76:0a:e4:a4:a9:d2:9b:1b:
         8b:e2:bb:c3:7a:75:82:23:3a:c4:69:3d:a6:cc:ce:ac:52:d5:
         bf:47:87:b5:a2:83:af:40:79:5f:cf:42:f4:0e:85:e5:eb:c0:
         72:4d:7d:69:cd:46:6a:7c:c3:37:d8:a1:2c:fd:39:56:b2:8b:
         d8:fd:ff:a0:44:4c:5b:ef:43:04:c8:27:60:5a:b6:74:12:e1:
         4e:3f:f0:8e:e6:c1:c0:f7:ce:5c:93:1d:57:38:35:ad:ed:34:
         e2:b3:58:40:8f:4d:a2:14:6d:68:18:4b:13:2b:bb:8b:28:f5:
         0e:fd:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org