Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138302e302f32332d3233203d3e203532393531.roa
File:                     3137372e31312e3138302e302f32332d3233203d3e203532393531.roa (raw, json)
Hash identifier:          tLZlr49PBqMYyp5QQG4c58yLopsT+Dro9BG6JP+ayh8=
Subject key identifier:   96:30:C5:BE:FC:50:A3:8C:F6:22:37:6A:D3:43:6B:97:A1:AE:6C:91
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       56F81FB781B68709535A3538BB2BB40533539CCB
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138302e302f32332d3233203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:43:58 +0000
ROA not before:           Thu 28 Sep 2023 17:38:58 +0000
ROA not after:            Thu 26 Sep 2024 17:43:58 +0000
asID:                     52951
IP address blocks:        177.11.180.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:1f:b7:81:b6:87:09:53:5a:35:38:bb:2b:b4:05:33:53:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:38:58 2023 GMT
            Not After : Sep 26 17:43:58 2024 GMT
        Subject: CN=9630C5BEFC50A38CF622376AD3436B97A1AE6C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b9:1c:85:e2:08:88:5b:e6:64:31:68:74:5c:
                    97:88:3a:e5:1c:c3:8e:e6:50:06:1b:a4:57:17:80:
                    85:72:40:c5:38:dd:6f:6c:74:ae:4f:3b:bf:13:5c:
                    ca:68:3a:d9:1c:14:6a:6f:ca:b1:e8:22:7d:6e:92:
                    a2:7f:7b:a5:f6:ae:23:c2:7c:87:5a:5e:c0:a6:cc:
                    99:0e:96:79:ff:1f:ef:05:04:8f:a3:a4:99:9e:82:
                    99:a7:f4:b6:c9:1d:a7:9f:a3:3d:8c:89:eb:fa:9e:
                    a5:16:d5:e1:12:f0:84:16:3a:3f:15:a0:32:f7:97:
                    08:31:28:68:9f:5d:fa:6b:8e:2e:39:21:7e:a3:a6:
                    3b:f8:83:c0:42:b2:e6:89:b7:fd:db:d0:55:af:c8:
                    d9:0a:3f:c1:47:dd:88:0a:38:55:9e:78:73:f1:af:
                    2f:95:43:69:55:ac:a4:a3:c8:a0:84:4a:ef:5d:80:
                    b5:53:ff:98:a3:38:f4:ec:b7:b4:eb:34:36:ae:34:
                    47:ca:ef:60:0a:d9:95:42:3c:2f:f6:67:af:f0:8e:
                    45:5e:fb:55:7b:47:94:ce:c4:19:a8:f3:f0:00:93:
                    c3:7b:cc:66:e5:40:4e:8e:dc:5a:2d:be:ca:c5:29:
                    2b:d9:65:1d:b8:b6:29:51:22:cd:16:37:a6:5d:5b:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:30:C5:BE:FC:50:A3:8C:F6:22:37:6A:D3:43:6B:97:A1:AE:6C:91
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138302e302f32332d3233203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:f2:52:8c:0f:28:ea:b1:aa:2f:a2:1a:a1:fb:0f:d6:52:c4:
         c7:e0:56:59:0f:d1:1b:9c:44:3b:c1:10:15:1f:d6:43:af:c8:
         f5:64:65:11:d1:0d:32:2e:89:ba:dc:26:b7:f7:d5:9d:dc:b2:
         c5:67:0c:ca:98:db:55:56:4a:ca:2b:bb:f8:30:da:4e:8c:6e:
         c7:5d:87:80:9b:35:88:2c:c8:ff:81:1e:74:56:9a:cf:df:fd:
         e8:ba:d9:1f:54:bf:88:81:da:90:61:0c:b4:3e:28:86:6c:7f:
         8e:9d:5f:23:aa:ca:2f:5d:bd:5c:1d:a2:f3:14:33:4c:61:02:
         f0:5c:bd:38:07:0d:b6:b1:54:6a:88:2e:95:0d:33:a7:37:52:
         81:80:7a:f5:18:32:c8:33:6b:47:30:4d:02:fe:b0:6d:ea:b7:
         8a:e7:77:c9:46:ff:52:c3:c3:b8:c7:ab:9f:de:43:ac:4b:19:
         c1:36:ba:76:1c:0b:02:58:f8:4b:38:fc:66:4a:6b:b1:8f:5d:
         6a:94:5c:0f:bc:4c:29:41:e1:db:22:f6:a1:b2:03:84:12:49:
         d6:91:1e:9f:70:0c:95:06:fe:06:3a:51:48:ae:9b:19:65:96:
         88:a9:41:ec:ee:e4:50:ae:3b:5f:02:fe:6b:a7:95:22:ff:e2:
         a2:d6:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:35 2023 by rpki-client on console.sobornost.net