Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa
File:                     3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa (raw, json)
Hash identifier:          4v1R+4QBja8au0ScdQ0gx84J2Lj3+te5hhDeoENm68g=
Subject key identifier:   FF:46:6C:50:58:84:55:07:45:B4:30:8B:7A:B3:ED:4C:CE:30:66:AE
Certificate issuer:       /CN=92AB6D40A4BFAB962C103D49F32B13BE572A9636
Certificate serial:       1CC13E4CE451C59CE4EACE987D92F286D1F96740
Authority key identifier: 92:AB:6D:40:A4:BF:AB:96:2C:10:3D:49:F3:2B:13:BE:57:2A:96:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92AB6D40A4BFAB962C103D49F32B13BE572A9636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa
Signing time:             Tue 25 Apr 2023 14:24:04 +0000
ROA not before:           Tue 25 Apr 2023 14:19:04 +0000
ROA not after:            Tue 23 Apr 2024 14:24:04 +0000
asID:                     265290
IP address blocks:        168.90.204.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c1:3e:4c:e4:51:c5:9c:e4:ea:ce:98:7d:92:f2:86:d1:f9:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92AB6D40A4BFAB962C103D49F32B13BE572A9636
        Validity
            Not Before: Apr 25 14:19:04 2023 GMT
            Not After : Apr 23 14:24:04 2024 GMT
        Subject: CN=FF466C505884550745B4308B7AB3ED4CCE3066AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:20:69:26:63:43:fc:47:d1:a5:38:7e:f2:
                    3a:18:b1:57:3b:97:44:48:c8:0f:6d:71:60:4c:3f:
                    a5:d7:5c:f4:95:1c:1a:26:bf:e3:c3:fb:1e:c1:0a:
                    1d:92:a5:38:59:0f:f6:d8:6d:f5:8b:4d:73:c9:aa:
                    19:1a:22:0d:30:a9:2e:e6:cd:3e:a7:49:a3:9c:d7:
                    28:55:9a:ee:09:8e:59:f1:d7:1c:f2:f7:2d:41:f0:
                    0e:01:b6:0f:b7:8e:c3:61:91:60:dc:ac:35:e7:ec:
                    7d:52:d5:e2:95:fc:b8:f9:f7:22:b9:1e:c1:eb:6e:
                    e5:a5:21:70:81:d6:3b:2d:8b:9a:a6:84:3c:81:c2:
                    63:df:58:d2:9d:6e:db:ed:1b:4d:3b:e4:59:ca:28:
                    99:cf:4b:93:ff:ed:02:92:2e:ca:c6:9e:f0:91:53:
                    94:0f:14:03:58:16:5f:de:06:40:2d:a3:22:43:3a:
                    66:a8:4e:b2:df:ff:69:4b:c5:a2:6a:38:c5:0e:14:
                    93:2f:3e:2a:77:78:6d:63:c7:b5:0a:53:17:65:07:
                    a1:db:db:f5:ca:c5:3d:88:16:31:8b:53:6c:11:ac:
                    d9:15:7a:3f:1a:7b:cd:71:7d:fa:3f:44:75:aa:db:
                    e5:36:91:96:f3:a4:3a:36:e9:35:1f:28:44:48:b8:
                    b6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:46:6C:50:58:84:55:07:45:B4:30:8B:7A:B3:ED:4C:CE:30:66:AE
            X509v3 Authority Key Identifier:
                keyid:92:AB:6D:40:A4:BF:AB:96:2C:10:3D:49:F3:2B:13:BE:57:2A:96:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/92AB6D40A4BFAB962C103D49F32B13BE572A9636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92AB6D40A4BFAB962C103D49F32B13BE572A9636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/1/3136382e39302e3230342e302f32322d3234203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:12:0c:1d:82:d8:cf:e4:af:ea:0d:81:34:7e:0f:dc:c4:e3:
         11:a0:67:ee:49:6d:15:37:72:59:ca:7d:c6:76:b2:80:2d:b3:
         37:96:12:44:ab:38:d6:8d:9d:25:fa:2f:7c:75:9e:a0:6f:5a:
         30:86:39:1c:30:27:f7:0b:d5:ce:4a:79:b2:52:e2:b6:e8:01:
         11:34:86:25:be:ae:d3:56:17:39:99:5d:56:c4:6d:e7:be:31:
         8a:11:78:02:a2:fb:4c:8f:9c:3e:78:09:87:6d:d5:37:37:e1:
         14:96:0c:47:4f:e8:91:4b:56:a8:3d:6c:55:47:3d:cf:27:f3:
         0e:45:6a:8a:c3:9c:de:84:dd:de:91:17:eb:77:4d:63:cd:6d:
         4e:84:0e:20:31:ad:b4:66:bb:07:a5:7e:3f:a9:37:7e:e5:89:
         f7:92:2e:4f:86:5e:0a:18:f3:d6:d0:47:1b:9a:f2:43:7b:70:
         e0:fe:8c:43:e2:04:51:ef:9e:f4:2d:53:b8:5e:61:ee:ef:d9:
         c2:ba:4b:9c:47:1f:91:6a:7d:47:0b:49:86:3d:ec:65:42:c6:
         26:40:62:f2:2f:81:65:9d:aa:a6:cc:a6:85:61:4a:6d:d4:05:
         a5:fa:11:03:6a:a5:5e:bc:fe:7f:7b:da:88:96:22:d5:64:08:
         05:11:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:32 2023 by rpki-client on console.sobornost.net