Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231372e302f32342d3234203d3e20323633333733.roa
File:                     3139312e33372e3231372e302f32342d3234203d3e20323633333733.roa (raw, json)
Hash identifier:          EuTZlCeNOrn5sCcD3usls1SjFOpSIhG+fxD48UlsiSc=
Subject key identifier:   56:84:55:F3:5F:BA:86:13:9E:D3:79:E2:91:96:C9:DA:5A:AE:D1:43
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       5F5F5D2F6A21B82213D72B7667AB6FD153436928
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231372e302f32342d3234203d3e20323633333733.roa
Signing time:             Tue 23 Apr 2024 15:13:13 +0000
ROA not before:           Tue 23 Apr 2024 15:08:13 +0000
ROA not after:            Tue 22 Apr 2025 15:13:13 +0000
asID:                     263373
IP address blocks:        191.37.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5f:5d:2f:6a:21:b8:22:13:d7:2b:76:67:ab:6f:d1:53:43:69:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 23 15:08:13 2024 GMT
            Not After : Apr 22 15:13:13 2025 GMT
        Subject: CN=568455F35FBA86139ED379E29196C9DA5AAED143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:52:a9:b0:40:0d:80:a2:45:12:4b:57:71:
                    f8:66:2c:67:5d:2e:42:b6:8c:3c:7d:ef:4f:7e:cc:
                    53:f6:a5:40:b5:00:7b:c4:ba:04:f5:2e:19:3a:e8:
                    9a:12:b9:ef:b5:85:8c:d5:e3:42:4c:46:50:ed:64:
                    e9:ad:4c:a0:ca:2f:e2:d6:65:d9:ff:05:37:de:43:
                    96:c0:c5:eb:25:d9:98:70:5e:dd:b2:bb:71:60:97:
                    78:7e:61:70:71:91:f1:84:cf:5e:62:75:94:d2:b2:
                    41:61:93:2a:19:bf:01:1f:16:ce:90:78:4c:74:62:
                    01:02:8b:43:2e:ef:98:26:b9:fe:89:6b:ca:c3:46:
                    0a:9b:3d:9d:b5:b8:3c:11:71:eb:c5:09:a5:96:61:
                    59:ce:89:80:79:28:61:24:aa:0b:aa:e9:72:91:52:
                    d0:db:85:49:dc:a1:ef:dc:a5:08:c2:9e:50:bb:c7:
                    55:c3:fe:55:84:e9:8b:38:59:9b:ec:97:68:64:a7:
                    5e:dc:73:cc:55:55:db:12:e3:45:95:48:4a:23:11:
                    ce:a9:d7:0a:25:27:c4:20:47:5f:ac:e4:06:b6:10:
                    d6:c3:a1:91:4d:a6:be:f3:52:23:5b:cf:d3:bf:d8:
                    5d:ff:79:d3:24:63:5d:a8:bc:03:26:ef:72:ce:3b:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:84:55:F3:5F:BA:86:13:9E:D3:79:E2:91:96:C9:DA:5A:AE:D1:43
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231372e302f32342d3234203d3e20323633333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:87:a2:72:48:92:c1:6d:8f:20:b1:ac:5f:e9:65:99:85:d8:
         81:70:27:c8:f3:d2:99:8b:7b:05:84:34:01:6e:f4:db:c2:8f:
         86:f5:e6:99:22:f9:3c:c2:bf:bf:46:44:ae:f4:e1:1b:84:10:
         9b:15:bd:ef:1f:6a:1f:2a:e3:8e:e4:d1:30:79:a5:5f:51:da:
         e5:dc:79:0e:6a:3c:90:13:cf:85:91:d9:e5:92:ff:ef:b7:97:
         d9:a6:fe:9f:65:26:7b:1f:78:a6:95:7c:f7:eb:7a:6f:f0:3b:
         4f:95:93:fc:be:c0:5e:bf:e0:6d:a2:b9:d0:75:60:3d:cf:82:
         27:eb:e0:37:81:7a:9a:b0:27:5a:bc:6b:7e:80:a8:e8:00:cf:
         fb:cd:cf:57:4c:f0:ac:05:ab:d9:85:26:04:fd:7a:b8:38:04:
         0f:d6:17:8a:df:06:17:4b:a8:24:8a:7c:c8:26:d4:89:85:22:
         d3:77:0a:da:fb:d2:54:fd:8f:8c:02:fa:76:b6:cf:1e:2a:67:
         fd:69:ac:94:0b:a3:c1:f1:58:e4:36:7a:6c:aa:82:10:34:ba:
         55:aa:67:76:34:07:6d:6f:9b:e2:2d:48:58:02:49:79:7a:08:
         5c:5f:d3:2c:d4:7e:44:1e:d3:b1:59:2a:54:13:8d:24:98:ea:
         53:61:0a:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX19dL2ohuCIT1yt2Z6tv0VNDaSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA0MjMxNTA4MTNaFw0yNTA0MjIxNTEzMTNaMDMxMTAvBgNV
BAMTKDU2ODQ1NUYzNUZCQTg2MTM5RUQzNzlFMjkxOTZDOURBNUFBRUQxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaVKpsEANgKJFEktXcfhmLGdd
LkK2jDx9709+zFP2pUC1AHvEugT1Lhk66JoSue+1hYzV40JMRlDtZOmtTKDKL+LW
Zdn/BTfeQ5bAxesl2ZhwXt2yu3Fgl3h+YXBxkfGEz15idZTSskFhkyoZvwEfFs6Q
eEx0YgECi0Mu75gmuf6Ja8rDRgqbPZ21uDwRcevFCaWWYVnOiYB5KGEkqguq6XKR
UtDbhUncoe/cpQjCnlC7x1XD/lWE6Ys4WZvsl2hkp17cc8xVVdsS40WVSEojEc6p
1wolJ8QgR1+s5Aa2ENbDoZFNpr7zUiNbz9O/2F3/edMkY12ovAMm73LOOx3jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVoRV81+6hhOe03nikZbJ2lqu0UMwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzOTMxMmUzMzM3MmUzMjMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JdkwDQYJKoZIhvcNAQELBQADggEBAKqHonJI
ksFtjyCxrF/pZZmF2IFwJ8jz0pmLewWENAFu9NvCj4b15pki+TzCv79GRK704RuE
EJsVve8fah8q447k0TB5pV9R2uXceQ5qPJATz4WR2eWS/++3l9mm/p9lJnsfeKaV
fPfrem/wO0+Vk/y+wF6/4G2iudB1YD3Pgifr4DeBepqwJ1q8a36AqOgAz/vNz1dM
8KwFq9mFJgT9erg4BA/WF4rfBhdLqCSKfMgm1ImFItN3Ctr70lT9j4wC+na2zx4q
Z/1prJQLo8HxWOQ2emyqghA0ulWqZ3Y0B21vm+ItSFgCSXl6CFxf0yzUfkQe07FZ
KlQTjSSY6lNhCro=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org