Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134352e302f32342d3234203d3e20323634343835.roa
File:                     3133312e3235352e3134352e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          95jCuSLRTsTyQH0kINVjAJd/7/XpS3612WSXwt0628Y=
Subject key identifier:   FC:90:23:C2:AD:10:B0:FC:B9:FB:21:DE:51:CE:A3:17:4C:EA:D4:E7
Certificate issuer:       /CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
Certificate serial:       64E2AE0BCB4EE89D60DB2FF84C25CF183FB2AE2E
Authority key identifier: 6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134352e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 28 Apr 2023 13:30:45 +0000
ROA not before:           Fri 28 Apr 2023 13:25:45 +0000
ROA not after:            Fri 26 Apr 2024 13:30:45 +0000
asID:                     264485
IP address blocks:        131.255.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e2:ae:0b:cb:4e:e8:9d:60:db:2f:f8:4c:25:cf:18:3f:b2:ae:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EEDEE8327CA5E254B6084A6EEF690900FDBE887
        Validity
            Not Before: Apr 28 13:25:45 2023 GMT
            Not After : Apr 26 13:30:45 2024 GMT
        Subject: CN=FC9023C2AD10B0FCB9FB21DE51CEA3174CEAD4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5d:21:f4:20:45:35:f4:29:ff:51:40:04:21:
                    ad:91:e4:8e:ee:0a:b6:ce:e4:16:d4:fe:0e:14:6c:
                    9e:54:ca:e2:48:40:e0:79:4a:67:3b:5a:be:02:44:
                    c0:ca:3a:f5:d5:ab:21:e9:44:f3:eb:7a:ce:0d:c8:
                    17:a3:db:87:4a:02:e3:2f:df:d2:ca:93:f1:80:12:
                    e5:bb:9b:14:0d:2d:f1:f9:35:f2:49:9b:0b:5c:cb:
                    5e:ab:f2:4d:6b:35:d0:fb:50:91:81:bc:97:62:74:
                    7c:26:81:7f:cb:fe:54:f7:f0:f0:47:57:f6:62:65:
                    ac:61:29:2a:06:b3:1a:a9:7f:5d:ca:aa:f7:f8:a9:
                    e8:14:2b:2c:cc:ea:05:37:c0:a1:bc:94:3f:53:52:
                    fb:e6:e2:57:b6:f7:71:87:70:77:87:05:e6:b1:f3:
                    5b:7f:68:89:cc:4e:29:81:54:e1:ee:90:d8:fc:65:
                    1f:20:fa:6b:e5:03:58:10:d8:cc:76:76:af:33:16:
                    54:46:10:f3:a5:bc:04:6c:a0:29:d5:0a:dc:86:b9:
                    9c:fb:2e:43:b5:da:d1:f6:f2:a4:a1:72:41:a7:69:
                    61:5d:c6:d6:d1:7b:74:c5:ae:8e:6e:a0:ac:17:30:
                    7f:7d:91:b1:64:ab:21:59:75:4c:08:ac:0c:98:18:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:90:23:C2:AD:10:B0:FC:B9:FB:21:DE:51:CE:A3:17:4C:EA:D4:E7
            X509v3 Authority Key Identifier:
                keyid:6E:ED:EE:83:27:CA:5E:25:4B:60:84:A6:EE:F6:90:90:0F:DB:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EEDEE8327CA5E254B6084A6EEF690900FDBE887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3133312e3235352e3134352e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:9b:2d:d5:1b:cb:61:c9:c8:fc:5a:e3:23:a7:ce:8b:57:c9:
         2b:c4:a3:da:89:e1:d4:f7:b5:14:8a:fa:ab:b8:e4:11:10:9e:
         b1:10:b2:a7:51:fc:32:12:3c:0f:d3:52:30:7d:52:a3:e0:66:
         0a:d4:d9:ca:56:af:18:a5:25:ef:1e:ed:3c:f0:b8:f4:84:2e:
         5f:c2:48:25:f7:28:73:be:a1:e3:46:9c:6f:72:e0:de:0c:5d:
         8c:24:b0:e4:a3:6c:16:eb:33:73:29:9c:ec:3d:41:2e:a6:a6:
         2e:41:81:0e:df:50:a2:4b:b9:67:68:de:f8:77:a9:fc:d8:c4:
         9f:c4:b3:d5:16:84:97:71:78:1b:ac:50:66:1e:fb:ca:79:2f:
         0c:e1:fc:6d:28:b4:cf:af:7f:b2:0d:46:77:1a:74:72:b9:9d:
         af:ab:56:c5:2a:dd:b8:fd:62:85:fa:0d:ab:ee:41:ec:aa:87:
         5e:d0:1e:0a:0f:58:8b:38:f8:22:91:9c:f9:ac:e2:3a:16:33:
         a7:06:33:e5:46:15:ea:59:ca:2f:d8:79:ac:81:3b:a0:3e:29:
         3a:19:5d:f4:78:95:74:c7:92:6d:56:39:34:e4:00:02:02:5b:
         52:43:f1:7c:99:d3:e4:c2:96:b1:54:a6:91:d7:95:4b:44:ce:
         2d:8c:74:a3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZOKuC8tO6J1g2y/4TCXPGD+yri4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVFREVFODMyN0NBNUUyNTRCNjA4NEE2RUVGNjkwOTAw
RkRCRTg4NzAeFw0yMzA0MjgxMzI1NDVaFw0yNDA0MjYxMzMwNDVaMDMxMTAvBgNV
BAMTKEZDOTAyM0MyQUQxMEIwRkNCOUZCMjFERTUxQ0VBMzE3NENFQUQ0RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXSH0IEU19Cn/UUAEIa2R5I7u
CrbO5BbU/g4UbJ5UyuJIQOB5Smc7Wr4CRMDKOvXVqyHpRPPres4NyBej24dKAuMv
39LKk/GAEuW7mxQNLfH5NfJJmwtcy16r8k1rNdD7UJGBvJdidHwmgX/L/lT38PBH
V/ZiZaxhKSoGsxqpf13Kqvf4qegUKyzM6gU3wKG8lD9TUvvm4le293GHcHeHBeax
81t/aInMTimBVOHukNj8ZR8g+mvlA1gQ2Mx2dq8zFlRGEPOlvARsoCnVCtyGuZz7
LkO12tH28qShckGnaWFdxtbRe3TFro5uoKwXMH99kbFkqyFZdUwIrAyYGJQzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/JAjwq0QsPy5+yHeUc6jF0zq1OcwHwYDVR0j
BBgwFoAUbu3ugyfKXiVLYISm7vaQkA/b6IcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC82RUVERUU4MzI3Q0E1RTI1NEI2MDg0QTZFRUY2OTA5MDBGREJFODg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZFRURFRTgzMjdDQTVFMjU0
QjYwODRBNkVFRjY5MDkwMEZEQkU4ODcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP/kTANBgkqhkiG9w0BAQsFAAOCAQEAvJst
1RvLYcnI/FrjI6fOi1fJK8Sj2onh1Pe1FIr6q7jkERCesRCyp1H8MhI8D9NSMH1S
o+BmCtTZylavGKUl7x7tPPC49IQuX8JIJfcoc76h40acb3Lg3gxdjCSw5KNsFusz
cymc7D1BLqamLkGBDt9Qoku5Z2je+Hep/NjEn8Sz1RaEl3F4G6xQZh77ynkvDOH8
bSi0z69/sg1Gdxp0crmdr6tWxSrduP1ihfoNq+5B7KqHXtAeCg9Yizj4IpGc+azi
OhYzpwYz5UYV6lnKL9h5rIE7oD4pOhld9HiVdMeSbVY5NOQAAgJbUkPxfJnT5MKW
sVSmkdeVS0TOLYx0ow==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net