Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130362e302f32332d3233203d3e203533313533.roa
File:                     3138372e36312e3130362e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          4zrt0ct90TPZMGXARi0QFoBAWPmeP9mWgfztjTkxVeA=
Subject key identifier:   12:D6:26:AD:1E:0A:A4:D7:26:6F:00:CD:2B:74:83:B8:01:74:7D:2B
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       59C6C52D3B1CB5B1A57F6AF36DE51905A8881D2B
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130362e302f32332d3233203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:09:40 +0000
ROA not before:           Wed 15 Mar 2023 20:04:40 +0000
ROA not after:            Wed 13 Mar 2024 20:09:40 +0000
asID:                     53153
IP address blocks:        187.61.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c6:c5:2d:3b:1c:b5:b1:a5:7f:6a:f3:6d:e5:19:05:a8:88:1d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 20:04:40 2023 GMT
            Not After : Mar 13 20:09:40 2024 GMT
        Subject: CN=12D626AD1E0AA4D7266F00CD2B7483B801747D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:45:1d:00:c6:1b:9f:97:c5:af:78:34:04:
                    9b:19:37:de:c6:a0:a2:d7:15:3d:75:3a:62:07:e2:
                    e8:8e:dc:88:10:af:0b:22:d5:bb:01:0b:ad:47:17:
                    e4:a6:35:b5:7c:bf:71:a9:04:54:62:52:d9:b4:b5:
                    c5:6e:4c:88:67:54:40:c4:0d:9c:59:ba:f6:07:f0:
                    3c:e6:3a:a5:8e:f0:c9:6a:2a:1f:9e:ec:8a:32:da:
                    37:44:44:8e:fd:d2:62:ac:42:c0:d1:f4:91:ea:33:
                    59:0e:24:ce:af:d0:1f:b2:fc:4f:b4:cf:d3:79:1b:
                    c9:39:2b:68:75:ac:50:3e:28:c6:8d:fa:c4:5b:32:
                    f1:1f:da:10:66:77:6a:f4:f0:93:05:4b:3d:17:9f:
                    47:3f:6c:dc:f3:b4:c1:81:8e:97:c9:f5:60:f8:84:
                    bf:51:9f:72:24:26:5e:7a:51:9e:78:38:71:23:e8:
                    6b:ce:bf:ff:a3:00:7c:d3:15:ef:2c:bb:c7:a2:55:
                    cb:7c:01:23:17:8d:3d:aa:26:17:ee:9a:ec:e3:62:
                    e5:7b:c7:44:0d:48:04:72:b7:1c:b6:64:4b:29:17:
                    0f:f6:34:63:4e:f8:44:e3:9d:1c:4c:99:f4:b9:84:
                    d0:8e:46:4e:3a:46:d6:75:70:4e:bb:5a:a7:8c:3d:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D6:26:AD:1E:0A:A4:D7:26:6F:00:CD:2B:74:83:B8:01:74:7D:2B
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130362e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:46:19:0c:da:27:64:dd:eb:ba:f6:1a:d0:d6:db:04:8b:
         b7:e6:cd:78:d5:b7:f8:df:08:04:4a:89:fd:46:25:66:29:12:
         f6:0e:b8:f6:38:9d:b5:ad:58:b2:a0:e9:8b:e7:dc:dd:78:58:
         ae:be:a4:35:b3:f9:83:9f:f5:c1:78:24:b0:23:42:2d:81:c1:
         b5:c9:41:7c:4a:d4:7a:ad:06:01:c5:67:3e:d8:3a:b7:ae:1b:
         ad:c8:66:2f:7d:87:74:70:d8:c6:10:98:e8:a6:1c:91:0f:ab:
         30:45:02:f5:48:c3:3e:22:91:cb:9b:95:cf:e5:78:b6:a5:e1:
         14:c6:d0:e8:5d:1a:ed:20:8d:d2:7e:f8:f9:80:e0:7b:dc:8c:
         0d:df:a5:6b:53:bf:70:19:7e:f6:80:ca:22:0b:a6:1b:ed:26:
         6a:b1:85:c1:f6:f2:2e:b7:51:f2:9b:0f:fe:0e:62:2d:20:3a:
         f7:76:c1:4b:6c:7c:d0:5b:74:83:c2:2f:21:7a:ee:6e:e5:ae:
         e6:e9:b1:4c:fc:8f:ae:20:0f:76:e1:97:9a:38:b4:53:d4:bf:
         94:dd:ac:ff:29:b1:18:28:a0:30:fa:2d:ed:96:5a:f7:bc:e9:
         22:65:69:9b:8f:8a:6d:a9:d2:04:ee:ed:d6:15:08:b2:e1:27:
         bc:c9:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:28 2023 by rpki-client on console.sobornost.net