Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32332d3233203d3e20323636313536.roa
File:                     3139322e3134342e36382e302f32332d3233203d3e20323636313536.roa (raw, json)
Hash identifier:          F0brYetHHWUz4O8HkNIMhwWtyuusVfn5hspIXu5CluM=
Subject key identifier:   B9:CA:E9:4C:0C:56:39:74:E8:7A:B1:7C:9D:6A:FD:C1:73:A7:C8:A9
Certificate issuer:       /CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
Certificate serial:       54EBE2E8343B379AE0B2FBE543D09F2B3CEF415C
Authority key identifier: 1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32332d3233203d3e20323636313536.roa
Signing time:             Fri 06 Oct 2023 22:17:40 +0000
ROA not before:           Fri 06 Oct 2023 22:12:40 +0000
ROA not after:            Fri 04 Oct 2024 22:17:40 +0000
asID:                     266156
IP address blocks:        192.144.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:eb:e2:e8:34:3b:37:9a:e0:b2:fb:e5:43:d0:9f:2b:3c:ef:41:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
        Validity
            Not Before: Oct  6 22:12:40 2023 GMT
            Not After : Oct  4 22:17:40 2024 GMT
        Subject: CN=B9CAE94C0C563974E87AB17C9D6AFDC173A7C8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:3b:3d:c9:aa:b3:43:f0:ac:67:5f:43:90:
                    ad:b0:e2:4b:23:f2:aa:a1:02:00:36:37:0f:e1:bd:
                    11:9f:d3:75:c7:7e:a5:c9:ca:06:8c:11:e8:76:a6:
                    2b:58:c7:6f:e4:69:eb:0c:1d:6d:cb:a6:f6:63:36:
                    0b:38:c7:4e:8f:1d:b2:01:5d:63:ee:48:8d:5f:59:
                    a8:92:87:de:c7:5d:c1:5b:76:5c:ba:02:8a:70:19:
                    8c:b0:73:bc:6f:49:82:ee:6a:da:88:0b:9c:6b:d4:
                    96:0d:f2:22:76:4d:11:c8:49:56:38:41:ee:30:ad:
                    83:b9:bb:4d:ed:79:d4:86:6b:b0:a6:a1:06:12:cf:
                    09:84:f3:ce:67:c7:eb:17:df:a3:42:b1:8a:4d:03:
                    dd:8b:bf:7e:26:16:76:c2:1c:f8:dd:20:17:e6:13:
                    f0:95:a8:29:13:48:29:23:f3:94:fc:dc:55:b5:0b:
                    a1:23:e2:62:02:33:bf:9a:09:04:00:b4:78:ad:2d:
                    32:54:dd:84:cd:4d:49:7c:80:00:ab:ab:4f:51:37:
                    6f:ff:c6:0d:34:97:01:a5:1e:0c:b5:0f:fb:d0:3c:
                    2b:a4:c5:37:34:47:c5:8a:e9:ea:52:e8:62:d1:6b:
                    84:42:00:a5:61:87:28:69:3f:57:e6:d2:73:25:c4:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:E9:4C:0C:56:39:74:E8:7A:B1:7C:9D:6A:FD:C1:73:A7:C8:A9
            X509v3 Authority Key Identifier:
                keyid:1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32332d3233203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:82:71:1f:0d:36:fc:4a:86:19:b6:6a:cf:4f:2c:34:a6:
         5f:40:e9:6f:52:17:c6:4e:7c:e5:73:f8:8b:28:89:1b:de:c0:
         b8:5e:1c:e2:4f:33:1b:b6:46:67:a6:a5:b4:d4:3f:0c:77:09:
         4b:01:b7:e4:d2:6d:a8:94:0a:e0:3a:70:47:8e:91:c4:61:71:
         c0:45:a2:dd:f8:91:38:2d:f6:4d:29:60:73:67:50:00:d4:3c:
         0b:de:96:6b:85:54:fd:91:43:10:8f:a5:cc:ff:79:0e:ce:33:
         b6:b8:89:22:c2:f8:da:6d:70:d2:2e:e5:cc:6e:80:71:ca:a4:
         ef:52:dd:05:07:6d:f6:48:02:7f:b6:3c:eb:cb:7a:7d:c6:41:
         77:27:a2:2f:b2:ab:77:db:6f:2d:a7:3f:77:2c:f0:0e:9e:6a:
         25:d5:a4:48:82:c7:1d:ee:26:d6:4f:f2:3c:26:c0:f2:95:89:
         af:f2:b9:1a:b2:ff:fc:55:20:82:a2:a4:89:8b:1c:58:84:a0:
         45:b8:30:c6:79:ac:d3:e0:3d:9a:e5:c2:38:06:32:72:e4:58:
         52:0e:5b:88:5f:0f:cf:af:2c:20:07:94:37:a1:6c:d2:dc:9c:
         11:ac:f0:09:f9:2f:9b:0f:e6:68:ca:4e:fe:c5:35:53:40:bf:
         1b:6f:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:37 2023 by rpki-client on console.sobornost.net