Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232302e302f32342d3234203d3e20323633333733.roa
File:                     3139312e33372e3232302e302f32342d3234203d3e20323633333733.roa (raw, json)
Hash identifier:          dCR10S06ujqGv7R0Pf4tN+hROI91539Bo2Xno1UJBe0=
Subject key identifier:   CC:5E:A2:86:17:4F:40:35:30:BB:65:1C:83:F2:03:22:96:9D:C4:9E
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       50DE72BB1F0BBE9D72C8A47525CAFB2A33A610CA
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232302e302f32342d3234203d3e20323633333733.roa
Signing time:             Tue 23 Apr 2024 15:15:45 +0000
ROA not before:           Tue 23 Apr 2024 15:10:45 +0000
ROA not after:            Tue 22 Apr 2025 15:15:45 +0000
asID:                     263373
IP address blocks:        191.37.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:de:72:bb:1f:0b:be:9d:72:c8:a4:75:25:ca:fb:2a:33:a6:10:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 23 15:10:45 2024 GMT
            Not After : Apr 22 15:15:45 2025 GMT
        Subject: CN=CC5EA286174F403530BB651C83F20322969DC49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:1b:7e:59:06:08:30:b2:fd:32:ce:31:9d:
                    27:8e:67:fe:8c:07:53:6f:32:61:3a:9b:dd:b3:a5:
                    4d:2a:eb:f7:63:04:0b:5a:fa:eb:db:76:e2:3e:8c:
                    04:01:7e:1b:01:2f:97:8e:99:ec:02:23:53:ce:19:
                    97:de:b8:70:0c:df:29:9d:ff:c7:36:bd:23:ac:82:
                    f1:34:4c:c9:1c:2f:0e:6a:0a:f0:db:44:95:2e:8e:
                    f2:75:e5:d1:fb:82:94:f9:49:dc:67:07:a0:15:2a:
                    3c:78:4b:8e:30:ba:4b:0b:82:0b:cf:0d:21:56:65:
                    da:ce:9e:06:be:31:dd:a4:7e:85:db:a2:b6:e4:ab:
                    8b:ff:5a:b6:89:06:39:f1:c3:e0:dc:99:20:50:56:
                    00:19:68:c6:05:a5:f1:a7:43:5d:1f:ea:ed:95:a4:
                    f7:dc:f0:39:1c:f0:7e:41:e3:fd:4e:ff:1b:a7:c9:
                    0c:b6:22:3d:fd:c1:e0:62:69:31:db:24:5c:71:db:
                    58:a6:c8:d8:c9:41:d1:2a:df:f2:d6:ff:33:56:8c:
                    6d:38:8c:3a:bb:77:ed:d0:30:61:bf:ff:41:63:55:
                    73:37:23:05:7f:df:5a:0b:b8:20:33:42:02:26:fd:
                    e8:60:12:e6:44:72:19:d1:54:aa:50:3e:cc:ee:e1:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5E:A2:86:17:4F:40:35:30:BB:65:1C:83:F2:03:22:96:9D:C4:9E
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232302e302f32342d3234203d3e20323633333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:d0:a8:7f:5b:0a:53:3b:a1:b2:58:fe:4c:32:db:6c:34:4f:
         ab:6a:4e:3e:06:b4:f7:d3:b6:0d:ee:c9:a0:85:3f:fe:a7:e8:
         eb:cd:89:70:7a:bc:53:55:69:f5:3f:68:0a:93:1a:08:3f:e6:
         91:c8:48:76:d9:c9:c4:b4:70:c3:80:9e:ef:37:2b:fa:49:22:
         19:0f:b7:12:74:06:49:9d:66:df:06:58:4d:a5:54:45:cb:bf:
         d2:66:93:56:46:bf:db:ae:bd:1b:9e:c3:37:69:5e:91:0a:ed:
         fe:dd:ac:1e:c1:bd:16:27:83:db:3a:04:69:ff:91:dd:07:e6:
         f7:be:ef:1a:d4:f3:d5:5a:69:c5:25:0d:33:06:81:26:56:b3:
         7d:90:bc:61:89:e8:cd:74:77:25:09:d5:65:a7:61:d6:31:6e:
         b0:07:32:7b:be:66:02:f0:81:5b:49:4c:0c:7d:cf:50:5d:58:
         ba:f4:f9:21:f2:1d:fe:f8:30:c2:b4:0f:07:ef:92:6d:99:03:
         60:14:be:14:75:8d:47:2f:85:0a:70:5a:24:f9:ca:42:da:2f:
         66:21:ac:af:f2:f0:8e:51:a7:67:61:d8:d4:8c:3f:dd:2c:a7:
         33:d5:d8:5d:34:45:4d:b2:f2:f4:5d:6e:e3:39:0d:ec:75:4a:
         8c:36:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org