Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323633333733.roa
File:                     3139312e33372e3232332e302f32342d3234203d3e20323633333733.roa (raw, json)
Hash identifier:          l2mhU8tO5S2injhpshDfItlb72j7ktRpZe0dxpZRuug=
Subject key identifier:   A4:24:57:34:B3:52:80:3E:2F:DD:0E:CB:AC:72:BC:AD:62:1C:A9:C9
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       47BC7529DD81247C28A6196BE8340EF3DBA47EF0
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323633333733.roa
Signing time:             Tue 23 Apr 2024 15:16:39 +0000
ROA not before:           Tue 23 Apr 2024 15:11:39 +0000
ROA not after:            Tue 22 Apr 2025 15:16:39 +0000
asID:                     263373
IP address blocks:        191.37.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 13:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bc:75:29:dd:81:24:7c:28:a6:19:6b:e8:34:0e:f3:db:a4:7e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Apr 23 15:11:39 2024 GMT
            Not After : Apr 22 15:16:39 2025 GMT
        Subject: CN=A4245734B352803E2FDD0ECBAC72BCAD621CA9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:de:7a:1f:fb:4a:87:51:24:3c:c1:d9:64:
                    11:8a:e0:ab:88:f7:9c:87:9b:c4:ea:93:8c:05:d5:
                    7c:26:03:5f:7b:db:0a:63:2b:5e:04:83:a0:1f:6e:
                    a4:e1:0d:8c:0a:08:0b:69:36:35:da:ed:a9:73:67:
                    87:fc:50:8c:de:47:7a:34:1f:1b:53:38:b7:c8:db:
                    96:b9:05:de:b4:8b:6e:0e:34:2f:42:58:35:81:48:
                    b6:4c:1e:a1:47:c8:10:22:e5:6a:3d:29:2e:4d:d8:
                    f9:6c:f6:a4:02:6d:5d:f3:bb:1e:a9:f4:ff:a6:82:
                    26:48:43:a3:ec:56:5b:95:d2:a8:e7:c6:3b:fc:ef:
                    a5:1f:05:9b:84:3b:eb:e1:51:af:26:ce:c9:4d:a5:
                    f7:3f:03:ea:5d:5c:3f:a3:75:a9:36:ef:1a:68:c1:
                    b6:f1:07:61:29:6b:7f:13:2e:a1:bc:96:36:15:33:
                    2e:51:08:df:90:b4:16:47:71:a4:8c:89:ea:5c:35:
                    04:61:3b:ee:32:15:13:e4:43:a9:9b:f6:24:9a:03:
                    4b:3c:a3:be:08:cf:8b:87:3b:8c:1f:0a:b8:8d:1b:
                    12:25:6a:1b:04:5f:f3:ef:10:39:30:2c:59:a0:1d:
                    66:31:c3:0c:76:42:a1:d3:b3:c8:06:cd:a3:e4:27:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:24:57:34:B3:52:80:3E:2F:DD:0E:CB:AC:72:BC:AD:62:1C:A9:C9
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3232332e302f32342d3234203d3e20323633333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:fb:55:88:4c:a4:f6:65:d2:30:85:c9:23:d5:c4:14:9a:69:
         cc:5a:83:3d:21:82:6e:f0:37:2a:aa:e2:df:1d:12:0e:09:58:
         ec:04:f6:f0:04:0e:1b:9c:ed:b4:35:55:d7:49:d5:da:48:01:
         77:24:ea:80:9a:90:8f:df:71:f7:0c:4d:29:d2:de:ca:60:48:
         b8:15:2c:ac:4a:40:f8:f3:f0:d4:9a:3c:bd:9c:35:46:02:5b:
         dc:25:51:b3:7d:5a:2c:bb:a9:cc:c1:04:a7:aa:61:5e:29:f3:
         c5:6d:c5:bf:8c:ed:a9:47:00:bf:b1:4a:4b:fc:63:98:a2:76:
         86:d1:8d:70:6c:a5:99:78:fb:c2:b2:c0:0a:72:6f:8e:7e:34:
         3d:66:95:d1:2f:ae:9d:20:37:57:c2:3c:a3:f1:7c:c8:ac:90:
         13:7e:b6:b8:11:2b:98:75:ad:fb:65:c3:e9:8b:e1:1a:1f:da:
         34:9a:4d:07:b0:20:76:91:fd:a8:6a:f5:5a:dc:b5:7c:5a:b7:
         ef:b5:85:35:6d:98:ae:dd:af:ee:7a:8e:7e:81:ff:5b:72:dd:
         75:e6:6e:5c:49:1a:7d:4f:e8:ac:b1:62:e0:0c:08:01:23:9f:
         e0:32:8b:98:24:15:03:3a:c5:e0:09:f0:e2:29:39:77:a3:48:
         e0:9f:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org