Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36392e302f32342d3234203d3e20323636313536.roa
File:                     3139322e3134342e36392e302f32342d3234203d3e20323636313536.roa (raw, json)
Hash identifier:          q0KtKt2KJuWPEwMhbwapqUCis94ZcQM82DYpG7nF+c0=
Subject key identifier:   8A:DB:DE:92:1A:17:66:66:C3:36:63:13:26:A0:B1:24:B6:A1:10:38
Certificate issuer:       /CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
Certificate serial:       6C7DE013B3A21EBC707F0D897F4FBAC25EAC19D1
Authority key identifier: 1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36392e302f32342d3234203d3e20323636313536.roa
Signing time:             Fri 06 Oct 2023 22:17:32 +0000
ROA not before:           Fri 06 Oct 2023 22:12:32 +0000
ROA not after:            Fri 04 Oct 2024 22:17:32 +0000
asID:                     266156
IP address blocks:        192.144.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7d:e0:13:b3:a2:1e:bc:70:7f:0d:89:7f:4f:ba:c2:5e:ac:19:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
        Validity
            Not Before: Oct  6 22:12:32 2023 GMT
            Not After : Oct  4 22:17:32 2024 GMT
        Subject: CN=8ADBDE921A176666C336631326A0B124B6A11038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:a1:70:05:50:fb:a7:b2:43:95:fc:10:d7:
                    83:ce:03:c0:39:cb:01:6d:10:ca:29:01:60:d5:19:
                    69:47:a0:32:b6:f2:f0:0f:e1:01:18:be:67:09:81:
                    03:bc:50:70:db:2b:18:7e:0a:00:2f:81:ae:08:eb:
                    88:63:f4:aa:9f:ad:c6:4e:0c:41:e5:63:3c:2b:f3:
                    db:ff:36:fe:ad:d8:19:f2:b1:f2:55:4a:dd:23:25:
                    67:ae:83:49:27:1e:bb:84:4b:38:80:58:05:e9:f3:
                    2e:35:c1:78:98:31:a7:b8:32:c9:68:b8:d3:ae:1f:
                    d3:ea:79:66:54:02:34:10:31:b9:65:54:bb:2e:79:
                    da:46:cd:93:49:6f:e8:e3:8e:01:83:b3:24:d4:5b:
                    12:e3:5e:c2:64:45:24:1a:6c:89:2d:7f:1d:65:a6:
                    2f:80:24:f5:64:36:4c:74:cc:a8:de:d9:28:8e:f4:
                    4d:63:95:27:e4:8a:d7:c5:3b:00:ee:a3:2d:38:49:
                    ae:d4:cd:06:8a:84:28:bb:fb:37:2d:b5:b0:b4:37:
                    ea:b4:21:7c:60:d1:0b:41:b1:c0:a7:05:b8:40:a4:
                    f6:ae:a7:fa:0c:f0:06:a6:41:f1:5d:0f:bf:7e:36:
                    a3:70:06:dd:8f:75:b7:9d:05:02:45:2a:c2:65:8f:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DB:DE:92:1A:17:66:66:C3:36:63:13:26:A0:B1:24:B6:A1:10:38
            X509v3 Authority Key Identifier:
                keyid:1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36392e302f32342d3234203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:df:0c:dd:ff:75:69:6f:4a:7a:77:dc:23:81:85:58:4b:c2:
         cd:71:70:eb:60:0e:ab:9f:e5:01:99:ca:02:02:6e:a1:10:cf:
         d2:17:e5:31:e1:9c:e8:73:f2:92:13:48:19:3b:70:8c:d4:4a:
         80:12:cb:e7:8d:f3:69:be:2e:75:0d:d4:ff:64:16:e7:25:c1:
         35:6e:26:a3:15:bf:c8:d3:91:81:aa:e6:66:79:09:7b:48:4a:
         a0:dc:c4:95:1c:ce:8a:ea:e8:d7:0e:9f:dd:44:08:57:40:c4:
         df:0d:a2:f4:6a:d8:a5:f1:a1:f3:bf:65:aa:b3:7e:b4:65:8d:
         f1:a5:14:a3:75:37:f6:22:06:25:70:4a:cd:d9:30:b0:13:a8:
         55:21:a8:c2:ba:c5:75:3a:5b:ba:b8:87:cd:62:58:7c:18:45:
         40:40:58:9c:31:c5:60:05:ec:a6:4b:5f:ba:82:08:17:d9:d6:
         b0:10:ba:6b:8d:86:3d:cf:5a:20:86:db:4b:2e:73:6c:57:b6:
         9b:47:b4:40:d0:e6:be:ae:de:a1:8d:f0:08:8d:02:b2:54:c7:
         74:3a:26:00:a2:85:cd:0a:7e:40:84:36:07:1e:f4:5c:14:a5:
         95:aa:3d:59:fe:63:f4:57:fd:08:45:7f:f6:07:c4:08:ca:86:
         19:32:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:37 2023 by rpki-client on console.sobornost.net