Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232312e302f32342d3234203d3e20323633333733.roa
File:                     3139312e33372e3232312e302f32342d3234203d3e20323633333733.roa (raw, json)
Hash identifier:          dtDqKSGc71NnDc0LPDAa5xVNXwv/ZplO4fxAaYaCjl4=
Subject key identifier:   B7:21:EC:F1:D6:2D:A5:64:D3:FD:54:47:7F:5A:6A:1C:01:23:4E:09
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       391687A8629C78540B57E7F2D7AA1EF29416ACC7
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232312e302f32342d3234203d3e20323633333733.roa
Signing time:             Tue 23 Apr 2024 15:16:12 +0000
ROA not before:           Tue 23 Apr 2024 15:11:12 +0000
ROA not after:            Tue 22 Apr 2025 15:16:12 +0000
asID:                     263373
IP address blocks:        191.37.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:16:87:a8:62:9c:78:54:0b:57:e7:f2:d7:aa:1e:f2:94:16:ac:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 23 15:11:12 2024 GMT
            Not After : Apr 22 15:16:12 2025 GMT
        Subject: CN=B721ECF1D62DA564D3FD54477F5A6A1C01234E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:35:47:bd:99:cc:bf:2c:f5:13:c7:ec:81:
                    11:80:75:80:7d:2c:ae:a8:60:75:ce:ff:5a:82:7b:
                    c7:17:15:f2:07:da:f4:ad:47:a8:de:be:d8:3a:a4:
                    90:a8:b5:97:82:ff:63:46:4c:6c:c7:51:c5:19:0f:
                    b2:79:9d:07:79:88:fa:5c:5d:39:c3:da:d4:ec:ef:
                    d3:7d:e8:bb:92:aa:33:8e:3a:20:1d:13:b9:81:bd:
                    92:03:61:47:1d:9a:41:e1:8f:46:9a:c4:ee:bc:b4:
                    ac:90:93:35:df:09:ed:82:37:70:fb:74:01:38:2f:
                    4c:12:9c:69:2d:fb:13:ab:45:8e:f1:db:9a:1f:8f:
                    26:f8:9a:d5:ef:0e:1c:33:a4:c7:ed:7c:55:64:71:
                    33:c5:71:8f:b9:79:58:a0:92:53:f7:91:2f:d4:6e:
                    1a:86:62:33:af:f3:71:43:07:9e:d3:f4:91:1a:0b:
                    b4:db:9f:16:44:99:0f:68:cc:91:2d:35:4c:ad:f5:
                    3b:f2:6c:59:cb:00:23:a9:f5:83:15:9e:52:7e:1e:
                    8e:1f:2d:19:ec:e6:11:2e:2d:1f:7c:0a:95:5c:9a:
                    3c:e1:97:bb:37:0f:d9:78:ff:07:da:8c:8f:03:8c:
                    d1:21:16:86:97:d6:35:2d:34:e8:c5:ab:ad:0a:d2:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:21:EC:F1:D6:2D:A5:64:D3:FD:54:47:7F:5A:6A:1C:01:23:4E:09
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232312e302f32342d3234203d3e20323633333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:f4:db:5f:10:15:85:f1:a0:a5:b0:f6:d8:b5:bd:4d:90:6b:
         84:95:71:a0:de:04:39:14:0d:8b:dd:e8:87:7a:c0:0f:81:d7:
         df:60:5b:75:bb:12:40:c6:46:43:07:20:2e:c3:48:e9:f7:4c:
         be:cb:59:2c:24:f8:36:a3:1a:e7:b3:80:92:7c:6e:4f:f2:b2:
         95:10:7c:42:18:77:f4:87:b2:82:89:ee:3e:06:42:4a:7a:35:
         44:af:b6:b6:1f:3b:c8:e1:68:5d:bf:aa:13:06:a3:9f:ff:e1:
         25:e3:cd:d4:1f:d0:54:47:bb:51:fb:91:98:3e:8a:fe:94:45:
         60:4a:59:4d:6b:c5:5c:99:04:44:77:51:cc:ce:ac:66:e9:07:
         65:51:82:0c:7e:a7:c3:05:02:4e:da:48:cd:5b:11:ca:2b:72:
         6e:53:f9:51:13:5f:f0:90:b9:d0:83:ab:bb:74:c4:ef:d3:32:
         3f:0f:86:7e:ef:bc:ec:64:e0:4e:31:8d:6b:af:7f:08:51:83:
         55:5a:b1:01:1f:a1:b3:9b:03:fc:96:e2:70:e2:70:4f:56:65:
         0c:f0:80:cd:01:14:4b:ae:c3:65:31:d7:c5:ac:d0:b7:ab:c3:
         ca:19:fb:25:3e:dd:94:d7:33:a9:6f:e0:37:8d:74:25:67:ae:
         d8:36:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org