Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32322d3232203d3e20323637343236.roa
File:                     3138312e3139312e3136302e302f32322d3232203d3e20323637343236.roa (raw, json)
Hash identifier:          XiJfM8ZtQCsBEiqkmUHWBLBXHQ/K1DxmRD+i7mlW9vk=
Subject key identifier:   01:68:C4:B0:F1:B6:42:9E:29:F2:1F:2C:B9:00:27:6E:36:A4:DB:04
Certificate issuer:       /CN=959F004623105A3C7B4F85C41B8104B26D38122E
Certificate serial:       660C33299F118710FCE47BA7074F7FACFFA7887E
Authority key identifier: 95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32322d3232203d3e20323637343236.roa
Signing time:             Wed 28 Dec 2022 21:26:45 +0000
ROA not before:           Wed 28 Dec 2022 21:21:45 +0000
ROA not after:            Wed 27 Dec 2023 21:26:45 +0000
asID:                     267426
IP address blocks:        181.191.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0c:33:29:9f:11:87:10:fc:e4:7b:a7:07:4f:7f:ac:ff:a7:88:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959F004623105A3C7B4F85C41B8104B26D38122E
        Validity
            Not Before: Dec 28 21:21:45 2022 GMT
            Not After : Dec 27 21:26:45 2023 GMT
        Subject: CN=0168C4B0F1B6429E29F21F2CB900276E36A4DB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:fd:67:eb:e6:87:bf:64:6f:79:ed:94:e8:
                    13:66:8f:8b:af:43:4e:41:25:c5:2f:73:7d:9d:1b:
                    84:36:a1:3f:38:16:3c:97:f5:23:6d:3e:c3:7e:d3:
                    1a:dc:88:ad:f4:fc:09:eb:12:64:b6:3a:de:68:d6:
                    62:31:c4:16:53:bc:26:dc:5c:cf:87:8f:eb:07:44:
                    14:83:ed:e6:76:fa:36:63:8d:4d:84:76:47:68:dc:
                    cc:39:83:fa:50:ba:d6:a5:5d:b6:b1:1b:c1:29:f6:
                    65:fc:9f:02:50:bb:aa:93:65:58:f4:2c:f7:e7:2f:
                    ff:db:35:87:e0:ff:59:d1:ec:c3:aa:ed:54:c6:50:
                    79:b5:fc:c6:63:da:53:17:53:71:78:af:58:16:02:
                    09:55:24:54:f6:54:07:3a:12:81:4b:56:0e:d4:01:
                    93:64:6b:51:87:0c:e9:74:e1:27:e2:6b:5b:75:a9:
                    af:48:40:7d:f8:fa:aa:82:cb:a9:9d:f0:0c:7b:b6:
                    f2:fa:e1:96:66:be:f2:49:b5:1a:ca:2c:b4:1e:fb:
                    c1:9e:d6:ee:1e:83:00:97:80:ce:24:b9:1b:18:f8:
                    2f:a9:9f:d7:50:5e:96:85:fa:40:45:28:40:3b:0f:
                    5d:1c:57:3d:fe:84:3c:ab:b4:04:53:1b:ee:1d:01:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:C4:B0:F1:B6:42:9E:29:F2:1F:2C:B9:00:27:6E:36:A4:DB:04
            X509v3 Authority Key Identifier:
                keyid:95:9F:00:46:23:10:5A:3C:7B:4F:85:C4:1B:81:04:B2:6D:38:12:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/959F004623105A3C7B4F85C41B8104B26D38122E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/959F004623105A3C7B4F85C41B8104B26D38122E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32322d3232203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:22:0e:65:da:f6:b5:cf:22:ba:16:37:97:16:09:35:45:
         ea:f2:89:01:b8:93:8c:ba:b2:58:16:b1:3e:c1:22:63:9f:23:
         59:17:13:73:5a:d9:2e:98:1e:80:9f:a3:e7:aa:83:bc:91:bf:
         68:43:94:45:0a:30:2d:b5:45:09:74:6d:ef:4b:43:b8:52:21:
         7a:d3:6d:67:5e:cb:68:f0:47:82:c6:a2:3f:ff:bf:79:56:d9:
         46:90:ac:8b:67:32:00:8d:d2:f3:b4:f5:8c:0b:28:a4:d0:54:
         0b:52:fe:5a:93:86:d8:e3:22:5d:e2:71:fc:c8:e8:4b:ad:6a:
         c6:2e:44:a2:ac:50:65:02:a2:1d:26:64:b7:75:f5:78:96:2c:
         7d:8f:d1:50:18:eb:29:90:41:bd:44:a9:9b:f7:6b:04:ad:a6:
         f9:7a:93:cc:13:11:bb:24:f1:98:a4:6a:95:b9:e6:2a:b1:9c:
         4a:e1:fe:d7:08:c1:3f:0f:d2:c1:04:9c:19:92:4b:71:fb:7c:
         6d:cc:18:93:36:d2:b0:79:54:a7:48:86:ea:34:c1:8f:ff:5a:
         75:e5:f7:f4:d5:db:c8:f3:fc:e1:0e:78:c7:2f:6d:f2:ed:78:
         f7:c5:b0:b5:d0:3a:bc:93:16:7f:40:de:db:54:ea:90:22:e0:
         2c:9f:8b:eb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZgwzKZ8RhxD85HunB09/rP+niH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU5RjAwNDYyMzEwNUEzQzdCNEY4NUM0MUI4MTA0QjI2
RDM4MTIyRTAeFw0yMjEyMjgyMTIxNDVaFw0yMzEyMjcyMTI2NDVaMDMxMTAvBgNV
BAMTKDAxNjhDNEIwRjFCNjQyOUUyOUYyMUYyQ0I5MDAyNzZFMzZBNERCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4f1n6+aHv2Rvee2U6BNmj4uv
Q05BJcUvc32dG4Q2oT84FjyX9SNtPsN+0xrciK30/AnrEmS2Ot5o1mIxxBZTvCbc
XM+Hj+sHRBSD7eZ2+jZjjU2Edkdo3Mw5g/pQutalXbaxG8Ep9mX8nwJQu6qTZVj0
LPfnL//bNYfg/1nR7MOq7VTGUHm1/MZj2lMXU3F4r1gWAglVJFT2VAc6EoFLVg7U
AZNka1GHDOl04Sfia1t1qa9IQH34+qqCy6md8Ax7tvL64ZZmvvJJtRrKLLQe+8Ge
1u4egwCXgM4kuRsY+C+pn9dQXpaF+kBFKEA7D10cVz3+hDyrtARTG+4dAd21AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAWjEsPG2Qp4p8h8suQAnbjak2wQwHwYDVR0j
BBgwFoAUlZ8ARiMQWjx7T4XEG4EEsm04Ei4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdZeWtndFFXRUZxajdGdTN4WlRoTjJEclg5amR2Q2FWbjJ3TVhGYjZV
NTIvMC85NTlGMDA0NjIzMTA1QTNDN0I0Rjg1QzQxQjgxMDRCMjZEMzgxMjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1OUYwMDQ2MjMxMDVBM0M3
QjRGODVDNDFCODEwNEIyNkQzODEyMkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3WXlrZ3RRV0VGcWo3RnUzeFpUaE4yRHJYOWpkdkNhVm4yd01YRmI2VTUyLzAv
MzEzODMxMmUzMTM5MzEyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNzM0MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/oDANBgkqhkiG9w0BAQsFAAOCAQEAfvEi
DmXa9rXPIroWN5cWCTVF6vKJAbiTjLqyWBaxPsEiY58jWRcTc1rZLpgegJ+j56qD
vJG/aEOURQowLbVFCXRt70tDuFIhetNtZ17LaPBHgsaiP/+/eVbZRpCsi2cyAI3S
87T1jAsopNBUC1L+WpOG2OMiXeJx/MjoS61qxi5EoqxQZQKiHSZkt3X1eJYsfY/R
UBjrKZBBvUSpm/drBK2m+XqTzBMRuyTxmKRqlbnmKrGcSuH+1wjBPw/SwQScGZJL
cft8bcwYkzbSsHlUp0iG6jTBj/9adeX39NXbyPP84Q54xy9t8u1498WwtdA6vJMW
f0De21TqkCLgLJ+L6w==
-----END CERTIFICATE-----
Generated at Thu Oct 5 20:07:12 2023 by rpki-client on console-ams.rpki-client.org