Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231382e302f32332d3233203d3e20323633333733.roa
File:                     3139312e33372e3231382e302f32332d3233203d3e20323633333733.roa (raw, json)
Hash identifier:          fw4WFj1YC74a3GSKXFRZpoPcgC8lbUgI9cuzilE2/1Q=
Subject key identifier:   CE:E5:FB:F2:F6:09:CB:F1:8D:65:74:92:AD:5A:AC:EC:8B:CC:2D:26
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       3DDE4FA982A280FF94386E7B9A0E5CE6EE539D1B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231382e302f32332d3233203d3e20323633333733.roa
Signing time:             Thu 18 Apr 2024 18:02:01 +0000
ROA not before:           Thu 18 Apr 2024 17:57:01 +0000
ROA not after:            Thu 17 Apr 2025 18:02:01 +0000
asID:                     263373
IP address blocks:        191.37.218.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:de:4f:a9:82:a2:80:ff:94:38:6e:7b:9a:0e:5c:e6:ee:53:9d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 18 17:57:01 2024 GMT
            Not After : Apr 17 18:02:01 2025 GMT
        Subject: CN=CEE5FBF2F609CBF18D657492AD5AACEC8BCC2D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:7c:db:98:80:54:61:49:64:52:f4:29:b6:
                    71:15:dd:c3:29:05:1a:17:ef:23:e4:05:20:cd:a8:
                    a2:61:17:54:27:c0:f9:2d:fe:11:ba:5f:7f:75:19:
                    bb:62:f4:9f:e7:cb:d6:3d:78:77:4e:1e:d5:16:31:
                    18:6f:bc:d8:27:ba:b0:fe:2c:d8:c6:29:9e:ba:26:
                    ea:06:9f:34:66:89:41:4e:df:a6:de:11:73:ab:4f:
                    e2:72:b5:ea:1e:57:06:e1:91:d7:56:c6:43:ab:d2:
                    a1:39:02:2d:27:ea:5f:95:37:ff:f9:bd:31:26:3c:
                    51:51:e6:39:0b:e8:3a:20:7e:73:cb:e1:6f:b6:31:
                    ed:16:92:af:23:cf:bc:f0:75:09:cf:e8:61:88:32:
                    f2:83:aa:79:40:a0:79:68:67:27:c1:6b:8c:c3:8f:
                    07:3f:bc:a2:4d:44:d9:f1:84:5d:c4:5f:66:c1:cd:
                    a5:28:1f:d3:c5:97:0f:99:7b:f5:a4:39:59:f8:cb:
                    a9:a7:83:e5:67:9d:f3:80:7b:56:e0:0b:5f:e7:dd:
                    17:71:f6:1f:dc:36:49:8f:a0:5a:74:2f:fa:c7:1e:
                    88:32:3a:28:ff:8f:19:66:fc:74:0c:a0:38:45:47:
                    08:d1:b8:c4:1d:0a:2f:22:11:de:eb:70:87:3a:6b:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E5:FB:F2:F6:09:CB:F1:8D:65:74:92:AD:5A:AC:EC:8B:CC:2D:26
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231382e302f32332d3233203d3e20323633333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:dc:a2:ce:da:e0:e7:38:1c:8b:f8:b3:be:5e:8f:d3:76:57:
         67:8f:5e:17:a4:f9:31:4d:56:d8:b9:19:c0:ac:7d:8b:f5:4f:
         45:ab:ff:f8:86:3a:e4:f3:de:b7:29:4f:94:70:98:26:64:00:
         03:d7:b5:3d:88:f3:b5:e2:89:bc:b4:e6:9c:ae:66:c8:b8:a0:
         8b:ee:f7:57:9c:a7:2e:62:7b:97:c9:c9:3a:cd:d0:68:24:06:
         62:dd:05:b9:5d:36:8c:2e:0d:cd:e4:ee:8b:3a:14:7e:ca:da:
         18:d0:b9:77:0f:5f:58:62:ea:7a:61:a7:1d:01:25:d3:00:60:
         e1:04:71:24:c3:ac:09:b6:c9:6b:4e:40:1a:a4:0a:bc:62:bc:
         25:29:ba:80:51:20:d6:20:21:2e:c2:a2:20:0d:ac:88:65:01:
         ab:dd:e3:d9:96:ac:35:38:24:90:ea:fc:32:6e:bc:e6:c6:c0:
         17:10:f9:d6:52:04:34:a1:81:18:38:d0:31:37:be:a8:b9:4f:
         f5:94:0d:89:93:19:b4:e5:91:de:8f:ea:7d:dc:11:9d:a7:0f:
         96:69:2d:a0:2d:bc:1e:e0:26:b2:de:6b:ff:91:51:81:c5:e9:
         be:28:33:a8:0c:c2:bd:6f:3c:a9:36:48:0e:e6:2a:c6:87:b9:
         f1:7a:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org