Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa
File:                     3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa (raw, json)
Hash identifier:          CicncIjAFXBmtkO7LISF3doVnffwFwkPTsJuDGZEh2U=
Subject key identifier:   34:36:B7:F3:61:82:47:1D:AB:B1:51:F5:3B:EC:F7:EE:BD:E0:44:5E
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       6FE7D67294B8EC207AD59622C5C795395E84C51B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:12:36 +0000
ROA not before:           Thu 09 May 2024 13:07:36 +0000
ROA not after:            Thu 08 May 2025 13:12:36 +0000
asID:                     273309
IP address blocks:        191.37.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e7:d6:72:94:b8:ec:20:7a:d5:96:22:c5:c7:95:39:5e:84:c5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:07:36 2024 GMT
            Not After : May  8 13:12:36 2025 GMT
        Subject: CN=3436B7F36182471DABB151F53BECF7EEBDE0445E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:23:24:a4:e9:fe:56:79:39:c7:ec:02:d1:
                    f5:56:ed:bd:fa:78:bf:6e:d0:ca:b5:0a:fb:ef:67:
                    ed:6a:aa:a0:08:0e:00:06:a6:f9:67:c5:38:ee:6f:
                    b2:c8:e5:8e:45:86:31:36:1c:96:d3:8d:d5:58:5f:
                    dc:ca:78:27:88:bb:67:74:1a:7b:8e:34:10:62:c3:
                    03:bd:eb:80:80:b3:72:3c:2d:e0:4b:c4:a8:a1:58:
                    e6:61:9b:97:f2:0b:6b:b5:9a:01:82:34:6d:27:bf:
                    7e:08:45:a6:48:c6:14:38:fa:63:1b:ba:3d:9c:41:
                    b4:f3:20:f2:ff:67:57:d4:d0:2c:ef:ba:cb:ea:bb:
                    6d:59:6f:d0:e3:d4:e6:5b:96:dd:7f:3f:89:3f:b4:
                    8d:23:79:3a:81:d8:76:9c:2f:38:5e:05:91:60:72:
                    aa:9a:10:11:92:94:14:4f:14:3a:ae:1b:8e:14:47:
                    25:0e:7c:d4:46:46:fe:e3:0f:6b:03:d9:c6:2d:52:
                    9b:48:5d:87:db:d6:df:4e:cc:ed:ae:d9:00:92:87:
                    f8:c9:95:8f:d4:d7:12:2d:d1:86:a0:e0:7e:08:96:
                    be:e7:07:73:26:5d:e3:c3:f2:8c:e4:9a:68:56:17:
                    17:77:28:1f:5d:d0:28:f5:b2:de:8a:82:ef:73:ef:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:36:B7:F3:61:82:47:1D:AB:B1:51:F5:3B:EC:F7:EE:BD:E0:44:5E
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d9:44:09:63:fb:3e:0f:57:9d:2f:96:a8:48:bb:33:4e:c1:57:
         88:bb:d3:1d:b1:27:d4:dd:bd:db:2f:2e:c0:f8:ba:a6:1a:d2:
         8c:9c:59:2a:22:37:43:2c:7c:f8:38:14:df:06:98:d4:cb:95:
         0c:b3:71:f6:72:3d:7a:ec:37:d2:8c:c7:8b:68:47:32:f0:60:
         70:73:90:9c:b2:8f:66:20:9e:6e:12:23:0d:1b:81:1d:da:91:
         b1:2f:05:43:ac:b8:78:28:e6:ea:4a:c6:1b:1f:5b:cf:79:8e:
         ce:e5:5c:6c:4a:df:e0:cf:e8:46:cc:23:51:f0:7c:0a:41:1c:
         cf:b5:d3:8f:79:ba:92:b8:f6:ff:ae:01:78:0b:de:df:1e:7c:
         b4:24:69:55:7a:29:62:8f:f8:71:c5:6a:f7:19:5b:9a:e4:8a:
         15:96:4d:64:1c:ea:2e:5b:02:fa:85:8a:71:a3:15:43:f2:bb:
         7f:c7:b8:57:16:60:ba:45:9c:c9:f9:0b:85:9b:7b:6d:77:a6:
         5f:11:68:dc:2e:8a:2d:8b:21:7b:82:47:77:a7:95:bd:5d:d8:
         ba:77:08:6a:c4:c4:6c:ce:9f:12:5f:dd:de:5c:ba:3a:34:30:
         33:3a:55:a9:74:a4:d5:c1:37:4a:cd:fc:ed:01:96:88:46:a9:
         34:6d:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org