Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32332d3233203d3e20323733333039.roa
File:                     3139312e33372e3231362e302f32332d3233203d3e20323733333039.roa (raw, json)
Hash identifier:          Xspvk0iLZHqfO/ikDdd3woyDbNP6XCC/qZE2Ig/U8Oc=
Subject key identifier:   CB:49:D0:E5:FB:2E:BD:2E:56:81:BE:58:91:F2:8A:A7:B4:38:13:58
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       0A01AD1EA4F1EED67FB0C1602A235CAA1D79BEC8
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32332d3233203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:14:56 +0000
ROA not before:           Thu 09 May 2024 13:09:56 +0000
ROA not after:            Thu 08 May 2025 13:14:56 +0000
asID:                     273309
IP address blocks:        191.37.216.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:01:ad:1e:a4:f1:ee:d6:7f:b0:c1:60:2a:23:5c:aa:1d:79:be:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:09:56 2024 GMT
            Not After : May  8 13:14:56 2025 GMT
        Subject: CN=CB49D0E5FB2EBD2E5681BE5891F28AA7B4381358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:b9:be:b6:33:85:c7:98:21:33:ca:7f:ea:
                    fc:c0:2c:ec:dc:62:c0:09:e1:0b:8b:df:36:27:8d:
                    0e:0f:43:2a:0c:8c:5b:ee:05:9f:91:85:df:06:42:
                    5a:9d:2b:a8:ed:6c:ef:b4:7e:44:a8:f4:a9:21:35:
                    1e:ea:aa:41:7c:01:51:e3:0a:dd:f5:b6:9f:b4:53:
                    4e:d6:2b:31:af:17:c7:2d:fd:0c:38:f8:78:9d:4b:
                    00:49:7a:dc:08:b7:d3:70:53:8c:22:a8:c6:9b:c4:
                    3e:8e:dd:2e:f0:69:74:d4:c7:c6:fa:72:ae:a0:ca:
                    9e:b7:f2:c6:e9:76:6d:b2:34:01:a1:c1:d3:43:ba:
                    67:44:5f:bd:77:fc:93:d7:08:10:4e:b0:da:fa:35:
                    2d:f9:07:52:ee:32:ed:65:c7:7c:f4:22:93:71:e6:
                    0c:b2:db:9e:72:33:7f:d5:b9:4f:18:c1:4f:ee:2c:
                    fe:34:a6:a4:51:fa:9c:c7:b7:df:a7:90:cc:51:60:
                    ea:94:f5:20:de:19:f9:ae:a8:a4:d4:07:81:99:6f:
                    ab:d6:8c:37:e0:f4:80:6f:f7:8e:b0:d8:af:84:96:
                    e7:14:2c:6b:4f:bd:8e:50:be:52:5b:f1:d5:e9:5c:
                    85:85:0a:69:d6:05:99:c4:21:18:7b:61:7c:1d:39:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:49:D0:E5:FB:2E:BD:2E:56:81:BE:58:91:F2:8A:A7:B4:38:13:58
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32332d3233203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:d7:fe:dc:bd:e1:bc:b3:e2:38:84:ad:da:d8:1e:20:b8:
         c0:d3:6d:c7:bf:f3:aa:73:29:3b:02:fc:94:4e:2b:5a:56:4c:
         ce:32:fa:9f:05:89:15:9d:75:b7:2f:92:62:30:51:3c:a1:76:
         b3:5d:e2:5c:58:a1:4f:7b:19:1f:96:73:74:f8:c4:9e:5a:52:
         5c:9b:7b:8e:14:ba:a3:24:e2:fa:0d:c9:8e:72:66:fb:9c:b4:
         52:ae:0d:7a:35:4a:c8:16:d9:dc:39:80:9e:dd:5d:4a:df:c3:
         cc:e9:82:e5:d0:23:6f:7c:33:97:f3:f1:39:a3:8c:e9:da:bb:
         ad:9a:f3:96:b2:33:e5:07:13:48:47:8e:64:bb:4a:0b:81:d4:
         a8:48:5d:0b:b4:a7:7b:63:d5:8d:ea:a7:5c:42:e4:1c:12:8d:
         58:f8:39:b8:ff:92:c5:31:29:9c:4f:3f:76:d7:8f:da:df:fc:
         86:e2:1d:f3:f4:88:9b:91:df:39:88:be:67:dd:e6:de:86:8b:
         7f:41:17:95:8c:c3:23:8a:b3:aa:07:36:5c:75:ed:d7:2b:b6:
         27:6e:21:7a:de:8f:55:fa:d3:65:f4:4b:79:12:2b:df:a5:4a:
         f1:09:d8:ed:0a:4c:4c:8a:81:d0:a8:6f:c7:fa:cc:90:2b:de:
         48:31:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org