Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323633333733.roa
File:                     3139312e33372e3231362e302f32312d3231203d3e20323633333733.roa (raw, json)
Hash identifier:          B6McE1Eq9h54WM3N9WXZAf104ldeSJq0wPS/hGuM1VI=
Subject key identifier:   D1:4E:29:4C:11:89:60:6F:D3:91:02:5E:D3:30:0B:22:D3:A3:2B:BB
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       1FF2DAFC22FDCE4458701B05B11E6046F97FF531
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323633333733.roa
Signing time:             Thu 18 Apr 2024 18:02:04 +0000
ROA not before:           Thu 18 Apr 2024 17:57:04 +0000
ROA not after:            Thu 17 Apr 2025 18:02:04 +0000
asID:                     263373
IP address blocks:        191.37.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f2:da:fc:22:fd:ce:44:58:70:1b:05:b1:1e:60:46:f9:7f:f5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:57:04 2024 GMT
            Not After : Apr 17 18:02:04 2025 GMT
        Subject: CN=D14E294C1189606FD391025ED3300B22D3A32BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:9e:66:60:26:35:ef:35:47:1e:2c:90:98:
                    90:d9:64:c8:8a:45:a5:99:c6:60:1c:55:67:f0:d2:
                    5f:39:40:a8:12:63:66:bd:0d:84:b9:a5:e5:67:a4:
                    f7:e1:df:76:e7:4f:05:b2:b6:d4:07:36:e0:a6:4c:
                    77:61:be:07:74:2f:38:d1:50:a4:bb:ff:c4:fc:93:
                    7c:c5:08:ae:db:6f:f4:2b:28:c4:7f:8a:be:fe:87:
                    3f:30:6d:33:cf:3c:40:d2:e9:9f:09:17:f1:f8:18:
                    4d:ab:bb:bf:75:f7:e9:3d:f0:57:73:d1:d4:a4:87:
                    04:39:fb:d9:4b:a0:0e:58:d8:9a:a1:30:ae:da:ee:
                    84:81:59:73:c1:58:62:d6:40:df:31:ae:2f:f3:c0:
                    17:b7:f3:9c:96:20:cd:e0:27:e6:1f:71:0e:c6:89:
                    f7:17:53:e1:7b:75:b4:f1:c3:2a:a6:1f:7c:f2:98:
                    53:31:58:d5:59:55:37:39:3b:90:6b:70:e3:dd:66:
                    52:00:c0:76:31:5f:70:a4:7e:38:5d:7d:d7:87:8b:
                    44:f1:65:86:8c:50:1e:7e:ad:48:a6:84:8e:54:e6:
                    3c:dc:aa:5c:3f:4d:1c:1e:78:94:2f:4d:cb:c8:64:
                    58:a7:1a:6c:ac:85:35:9e:e0:d7:21:47:7a:55:58:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:29:4C:11:89:60:6F:D3:91:02:5E:D3:30:0B:22:D3:A3:2B:BB
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323633333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:7a:a0:a4:61:b4:89:f4:1a:2d:82:c2:46:22:0e:aa:52:df:
         27:94:aa:7d:ba:14:07:93:76:a1:bf:44:9f:61:82:92:8e:26:
         71:1a:84:28:05:7a:b9:6e:8f:95:21:ca:bd:ae:2d:fe:87:ee:
         72:07:e7:0b:61:a8:a2:a6:23:78:6f:14:6c:6f:68:2e:2b:b2:
         ab:8d:da:0a:92:d5:01:b6:0a:00:ac:e7:6b:45:38:18:e0:6b:
         87:c9:c6:6f:bb:4c:6d:30:cf:79:a0:99:b3:ba:a3:fe:7d:8e:
         04:f9:8b:6d:d1:50:3c:4d:5b:99:f6:8c:ba:e5:10:cf:12:8d:
         7a:fd:e5:8b:8e:75:55:4e:83:11:50:6a:23:2e:15:77:5b:06:
         35:c2:a2:f0:fb:34:75:35:19:86:cb:06:80:c5:5f:90:98:b3:
         be:04:4a:36:9f:26:2e:8e:07:eb:aa:47:11:04:b5:ed:9c:bd:
         03:df:3c:82:b1:13:65:90:17:8a:60:4d:d8:ea:87:2b:1b:93:
         e8:0d:21:30:bf:29:56:65:3e:10:e9:96:08:c3:d8:4e:51:54:
         30:db:c6:75:bc:ff:e7:6c:23:15:bb:62:97:23:80:ff:a3:df:
         98:61:18:3e:c7:ff:d1:c6:26:89:a3:7d:de:71:09:aa:3e:6e:
         47:20:40:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH/La/CL9zkRYcBsFsR5gRvl/9TEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA0MTgxNzU3MDRaFw0yNTA0MTcxODAyMDRaMDMxMTAvBgNV
BAMTKEQxNEUyOTRDMTE4OTYwNkZEMzkxMDI1RUQzMzAwQjIyRDNBMzJCQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ep5mYCY17zVHHiyQmJDZZMiK
RaWZxmAcVWfw0l85QKgSY2a9DYS5peVnpPfh33bnTwWyttQHNuCmTHdhvgd0LzjR
UKS7/8T8k3zFCK7bb/QrKMR/ir7+hz8wbTPPPEDS6Z8JF/H4GE2ru7919+k98Fdz
0dSkhwQ5+9lLoA5Y2JqhMK7a7oSBWXPBWGLWQN8xri/zwBe385yWIM3gJ+YfcQ7G
ifcXU+F7dbTxwyqmH3zymFMxWNVZVTc5O5BrcOPdZlIAwHYxX3CkfjhdfdeHi0Tx
ZYaMUB5+rUimhI5U5jzcqlw/TRweeJQvTcvIZFinGmyshTWe4NchR3pVWJ7tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0U4pTBGJYG/TkQJe0zALItOjK7swHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzOTMxMmUzMzM3MmUzMjMxMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/JdgwDQYJKoZIhvcNAQELBQADggEBAEN6oKRh
tIn0Gi2CwkYiDqpS3yeUqn26FAeTdqG/RJ9hgpKOJnEahCgFerluj5Uhyr2uLf6H
7nIH5wthqKKmI3hvFGxvaC4rsquN2gqS1QG2CgCs52tFOBjga4fJxm+7TG0wz3mg
mbO6o/59jgT5i23RUDxNW5n2jLrlEM8SjXr95YuOdVVOgxFQaiMuFXdbBjXCovD7
NHU1GYbLBoDFX5CYs74ESjafJi6OB+uqRxEEte2cvQPfPIKxE2WQF4pgTdjqhysb
k+gNITC/KVZlPhDplgjD2E5RVDDbxnW8/+dsIxW7YpcjgP+j35hhGD7H/9HGJomj
fd5xCao+bkcgQDU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org