Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32322d3232203d3e203532393531.roa
File:                     3137302e37392e3136342e302f32322d3232203d3e203532393531.roa (raw, json)
Hash identifier:          YqAHjZ362Ah6kTzYhNnI0XOFJhhFrNFzE6MXERs0ysU=
Subject key identifier:   AB:FF:39:96:01:69:15:48:82:C4:75:B8:18:36:99:04:B8:FF:6C:06
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       38608AE42085B7190928E36E38E5F021143A4ABD
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32322d3232203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:03 +0000
ROA not before:           Thu 28 Sep 2023 17:39:03 +0000
ROA not after:            Thu 26 Sep 2024 17:44:03 +0000
asID:                     52951
IP address blocks:        170.79.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:60:8a:e4:20:85:b7:19:09:28:e3:6e:38:e5:f0:21:14:3a:4a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:03 2023 GMT
            Not After : Sep 26 17:44:03 2024 GMT
        Subject: CN=ABFF39960169154882C475B818369904B8FF6C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:93:1c:03:59:e2:21:bf:65:a8:88:ea:dc:
                    fb:0b:94:76:49:3b:a9:43:10:ce:45:b0:5c:f4:68:
                    15:d9:7e:12:22:90:e8:ae:8f:b0:03:01:95:9d:89:
                    15:61:a7:b3:c4:b9:69:eb:69:07:3c:a0:c7:59:2f:
                    1b:64:5d:29:b6:3b:e6:83:2a:87:c0:6f:7e:3a:d2:
                    66:9b:80:14:da:fc:d1:03:0c:6d:f4:cc:0e:48:1a:
                    7c:30:41:40:87:14:76:ca:42:6d:be:48:69:0c:ba:
                    3e:cf:6d:6a:d5:2a:df:7e:07:21:b4:7d:1d:e9:03:
                    53:5d:81:22:95:c3:96:f0:2b:8a:60:ed:27:cd:b4:
                    03:e4:ca:04:c7:f3:92:bd:0c:e6:52:6e:67:cf:dc:
                    96:3c:7a:9c:92:c8:ea:00:9d:ef:14:50:9f:c1:ab:
                    e0:b5:28:68:14:5f:cc:16:44:4a:33:42:4a:1f:75:
                    50:24:07:0e:f3:af:46:fc:8a:6a:23:ff:c2:3f:34:
                    f5:b5:31:f6:57:b5:40:05:13:7d:c4:da:c0:09:18:
                    0c:1e:7c:ec:79:29:56:a2:53:4b:6e:94:9f:1d:53:
                    7f:9c:69:85:51:59:d1:89:dc:3e:66:e0:e0:ff:13:
                    e1:d7:96:44:13:90:c2:02:e9:8f:42:a0:9c:86:30:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FF:39:96:01:69:15:48:82:C4:75:B8:18:36:99:04:B8:FF:6C:06
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32322d3232203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:50:b0:26:25:51:17:2c:6f:4a:a5:60:f3:9e:38:1c:ba:55:
         af:67:93:ce:98:eb:e5:ff:6e:b5:a9:e2:29:78:03:fd:f8:84:
         43:9d:b7:34:6f:59:b3:6d:f9:be:d3:e5:0c:0b:36:95:a0:70:
         00:51:8c:3c:8e:a0:49:8c:21:89:36:2c:25:1e:6d:d1:0d:d3:
         58:dd:74:87:95:d4:18:da:13:08:ae:d9:27:ff:07:55:f9:8a:
         06:f2:97:74:aa:d1:4e:98:aa:ea:c5:c5:8c:02:73:3a:18:ae:
         14:e7:f6:8c:a1:af:22:fa:be:48:86:84:57:ab:63:e0:73:e3:
         de:95:ea:93:26:9b:32:95:06:9c:d1:96:1a:ec:b5:68:54:67:
         32:25:32:9f:db:52:f4:3b:e8:e0:24:cb:9e:41:5c:8a:49:1b:
         2a:46:b5:4e:9d:3b:ca:ef:5f:cc:94:1f:65:a4:26:4b:8a:6e:
         eb:9e:6d:8e:33:18:d1:d5:4c:93:36:8c:44:81:5b:e7:3a:05:
         23:33:85:1d:2f:a5:f7:e1:cc:3e:97:70:18:ef:a0:32:0b:58:
         64:78:81:9b:bf:38:e8:4e:69:66:3e:00:a7:95:f3:47:7a:90:
         03:5d:2e:03:fa:7f:88:d3:d3:cb:fb:47:b2:b0:71:86:d1:d7:
         b0:f5:69:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOGCK5CCFtxkJKONuOOXwIRQ6Sr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4MDQ0MDAwN0FDRDRCRjhEOTYyMUVGN0M3REMyQzg0
ODE3NUNEMzAeFw0yMzA5MjgxNzM5MDNaFw0yNDA5MjYxNzQ0MDNaMDMxMTAvBgNV
BAMTKEFCRkYzOTk2MDE2OTE1NDg4MkM0NzVCODE4MzY5OTA0QjhGRjZDMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmm5McA1niIb9lqIjq3PsLlHZJ
O6lDEM5FsFz0aBXZfhIikOiuj7ADAZWdiRVhp7PEuWnraQc8oMdZLxtkXSm2O+aD
KofAb3460mabgBTa/NEDDG30zA5IGnwwQUCHFHbKQm2+SGkMuj7PbWrVKt9+ByG0
fR3pA1NdgSKVw5bwK4pg7SfNtAPkygTH85K9DOZSbmfP3JY8epySyOoAne8UUJ/B
q+C1KGgUX8wWREozQkofdVAkBw7zr0b8imoj/8I/NPW1MfZXtUAFE33E2sAJGAwe
fOx5KVaiU0tulJ8dU3+caYVRWdGJ3D5m4OD/E+HXlkQTkMIC6Y9CoJyGMPFFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq/85lgFpFUiCxHW4GDaZBLj/bAYwHwYDVR0j
BBgwFoAU8YBEAAes1L+NliHvfH3CyEgXXNMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXU4Nld0N0IycWhtOVB4ZHdreWF4Q25YQzhxMktnS0MycHJScWkzNURZ
WWMvMC9GMTgwNDQwMDA3QUNENEJGOEQ5NjIxRUY3QzdEQzJDODQ4MTc1Q0QzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxODA0NDAwMDdBQ0Q0QkY4
RDk2MjFFRjdDN0RDMkM4NDgxNzVDRDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V1ODZXdDdCMnFobTlQeGR3a3lheENuWEM4cTJLZ0tDMnByUnFpMzVEWVljLzAv
MzEzNzMwMmUzNzM5MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk+kMA0GCSqGSIb3DQEBCwUAA4IBAQCIULAmJVEX
LG9KpWDznjgculWvZ5POmOvl/261qeIpeAP9+IRDnbc0b1mzbfm+0+UMCzaVoHAA
UYw8jqBJjCGJNiwlHm3RDdNY3XSHldQY2hMIrtkn/wdV+YoG8pd0qtFOmKrqxcWM
AnM6GK4U5/aMoa8i+r5IhoRXq2Pgc+PeleqTJpsylQac0ZYa7LVoVGcyJTKf21L0
O+jgJMueQVyKSRsqRrVOnTvK71/MlB9lpCZLim7rnm2OMxjR1UyTNoxEgVvnOgUj
M4UdL6X34cw+l3AY76AyC1hkeIGbvzjoTmlmPgCnlfNHepADXS4D+n+I09PL+0ey
sHGG0dew9Wl8
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net