Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32342d3234203d3e20323636313536.roa
File:                     3139322e3134342e36382e302f32342d3234203d3e20323636313536.roa (raw, json)
Hash identifier:          f+iWjpHi9WnpeiruUOWOTsqALh6uDBXI+QBwEA1lsF8=
Subject key identifier:   41:56:FA:1D:F3:12:1A:47:25:92:BC:21:56:29:DB:A0:27:6F:FC:B6
Certificate issuer:       /CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
Certificate serial:       4B3C28DA5CA910417725C5C6B89B876A86008B8F
Authority key identifier: 1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32342d3234203d3e20323636313536.roa
Signing time:             Fri 06 Oct 2023 22:17:36 +0000
ROA not before:           Fri 06 Oct 2023 22:12:36 +0000
ROA not after:            Fri 04 Oct 2024 22:17:36 +0000
asID:                     266156
IP address blocks:        192.144.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3c:28:da:5c:a9:10:41:77:25:c5:c6:b8:9b:87:6a:86:00:8b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
        Validity
            Not Before: Oct  6 22:12:36 2023 GMT
            Not After : Oct  4 22:17:36 2024 GMT
        Subject: CN=4156FA1DF3121A472592BC215629DBA0276FFCB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:4c:43:26:30:27:22:d6:67:98:b7:54:8a:
                    fe:74:37:bd:cf:50:30:ee:f9:57:16:71:eb:ec:88:
                    0e:64:39:fe:3f:b0:b0:62:57:06:16:6b:0e:a8:d1:
                    03:9c:97:be:cd:06:8e:ca:36:3c:dd:49:e3:44:54:
                    f7:6e:f6:11:95:c3:35:0c:d0:dc:29:4e:c5:ac:49:
                    a3:92:e0:1b:9b:9a:04:2b:74:1e:b8:ca:02:72:f1:
                    c9:48:9f:b8:64:42:cc:c4:de:19:a5:e9:98:ea:39:
                    94:46:e3:c1:42:6b:f3:32:b6:11:2b:ff:75:32:16:
                    e2:27:0d:ad:b4:0d:c1:46:18:1f:d5:8c:7e:49:f5:
                    15:53:b3:e4:e0:03:99:1e:54:b4:04:f9:6e:05:dd:
                    90:0a:2b:3c:21:a4:7b:12:2d:30:3e:e6:4c:6a:f5:
                    c8:a8:cb:3b:af:c2:bf:c6:35:88:30:0a:8e:a0:50:
                    ac:20:a7:6a:af:3c:28:91:2c:32:35:fd:fb:3d:ec:
                    4f:97:bd:4a:06:7d:33:3d:da:f7:0d:52:bd:3a:e7:
                    0f:f6:02:55:ec:20:41:d3:17:49:a5:20:94:92:12:
                    62:71:ec:a6:32:0d:d6:92:71:69:28:6b:4c:e9:78:
                    40:9c:43:d9:9a:d0:4b:a8:82:73:77:3e:92:2c:bb:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:56:FA:1D:F3:12:1A:47:25:92:BC:21:56:29:DB:A0:27:6F:FC:B6
            X509v3 Authority Key Identifier:
                keyid:1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32342d3234203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:64:8d:89:5d:fd:08:94:c2:45:20:bb:fd:e0:69:cc:f3:34:
         16:13:ed:04:b4:e9:99:41:fc:4f:da:f2:2e:e4:a0:d8:04:15:
         80:ab:de:53:90:ab:b7:de:ca:ca:6e:5f:78:21:e8:ec:2a:22:
         96:df:ce:bc:72:e3:a8:e4:39:9b:4e:13:97:3f:06:31:e0:47:
         05:38:73:11:a7:b6:cc:8d:3b:cc:29:9c:fb:3d:1c:ea:ae:d9:
         2b:18:b5:25:27:a3:c8:12:6b:1b:7e:2c:68:4c:5b:91:f7:fe:
         0f:01:6c:c1:b1:6e:6b:db:3c:a8:4d:6d:0f:f1:27:38:b6:5c:
         2d:ab:d5:85:90:22:43:54:bc:2d:2b:dc:7d:1d:ae:d8:e2:67:
         cd:9c:f1:d8:73:4c:b7:23:cc:46:08:47:40:f7:65:12:99:b1:
         e7:3d:15:10:37:a7:fc:a4:ee:5c:52:1e:66:4f:8c:cb:a5:04:
         53:36:16:1e:36:0e:52:84:bf:9f:72:d3:99:db:db:4b:cd:ba:
         33:ea:e0:7a:1f:2f:2b:be:59:6e:ea:ba:5b:9f:f9:f4:01:fd:
         09:5d:41:0a:d8:51:51:b4:75:a5:92:b3:04:44:e1:c1:5f:3c:
         d0:bc:e4:80:4c:25:18:98:34:1f:af:e6:bd:ac:5c:b0:39:e1:
         1e:06:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:37 2023 by rpki-client on console.sobornost.net