Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          XHJgCpErQLrCA2p1QRzwc9pMuL8RfIIh+FyaJIi0gy8=
Subject key identifier:   5C:02:6F:37:33:0C:C8:44:AF:4E:97:33:05:98:83:6F:82:A5:4F:9B
Certificate issuer:       /CN=0916D6C778F2155181CCB182FAE52AE013341E40
Certificate serial:       29EBFDE9AAF26FF94B6D924E088A69AEBA8FC1B0
Authority key identifier: 09:16:D6:C7:78:F2:15:51:81:CC:B1:82:FA:E5:2A:E0:13:34:1E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0916D6C778F2155181CCB182FAE52AE013341E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa
Signing time:             Fri 31 Mar 2023 15:54:26 +0000
ROA not before:           Fri 31 Mar 2023 15:49:26 +0000
ROA not after:            Fri 29 Mar 2024 15:54:26 +0000
asID:                     265287
IP address blocks:        168.90.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:eb:fd:e9:aa:f2:6f:f9:4b:6d:92:4e:08:8a:69:ae:ba:8f:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0916D6C778F2155181CCB182FAE52AE013341E40
        Validity
            Not Before: Mar 31 15:49:26 2023 GMT
            Not After : Mar 29 15:54:26 2024 GMT
        Subject: CN=5C026F37330CC844AF4E97330598836F82A54F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:a7:76:a7:9b:c5:80:de:c9:40:ba:1a:6a:
                    c0:87:a8:8e:de:c2:fa:6b:3a:38:b0:68:a1:3d:20:
                    25:59:56:4b:c8:22:3d:71:e5:cf:a3:45:30:d2:59:
                    6b:9d:74:1b:d8:e4:7a:93:e2:2c:be:a2:1b:25:f3:
                    c5:21:cd:83:a6:23:e5:6a:6f:c6:ba:ee:ea:3b:0a:
                    66:e7:a9:11:70:22:90:9f:88:fa:38:42:5a:01:41:
                    ff:af:b0:20:3c:f1:71:a4:bf:0b:fd:54:45:bc:ac:
                    7f:e9:ae:33:e2:f6:e4:6c:4f:68:12:6e:fb:ba:38:
                    2d:e1:ea:4d:99:c6:34:32:da:97:9c:2b:92:c0:fe:
                    54:fa:08:c8:cc:e0:11:bd:2b:97:69:5c:50:be:ec:
                    26:bc:5a:83:20:d8:36:33:19:1c:9a:67:07:05:53:
                    b6:eb:e4:22:d0:a2:a1:b4:31:76:d0:df:57:20:68:
                    3e:7a:b0:48:d1:7e:af:5d:70:83:4b:5e:42:37:73:
                    64:bc:08:54:5a:39:e0:5d:5e:c4:d5:fc:c4:83:46:
                    a1:c6:b5:29:1e:c9:77:bd:be:b9:e2:2b:02:70:f1:
                    d1:e0:91:27:f2:6f:b2:09:a5:33:bd:57:80:25:d7:
                    c7:a6:a8:05:ea:43:fc:fc:61:ce:f0:8d:d3:6e:99:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:02:6F:37:33:0C:C8:44:AF:4E:97:33:05:98:83:6F:82:A5:4F:9B
            X509v3 Authority Key Identifier:
                keyid:09:16:D6:C7:78:F2:15:51:81:CC:B1:82:FA:E5:2A:E0:13:34:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/0916D6C778F2155181CCB182FAE52AE013341E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0916D6C778F2155181CCB182FAE52AE013341E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:ad:2f:86:17:80:f5:2b:5e:cc:d8:7b:aa:ee:6e:5e:7b:
         50:8d:e2:4d:65:7c:b8:06:58:8f:19:3a:59:38:38:0d:68:f2:
         58:51:46:45:9b:a4:95:e3:cd:9b:f5:1e:77:f1:fc:50:38:9f:
         b4:00:24:62:41:17:e1:16:bf:75:22:a4:fc:ae:1a:4c:c8:94:
         30:95:1a:1f:53:ae:82:30:33:8d:54:8a:6f:b6:df:35:b0:81:
         61:44:c4:53:a2:ed:b3:7f:5b:38:ec:e8:9d:3f:ee:be:83:ee:
         9c:fd:94:23:30:7b:91:15:c8:bb:de:2b:53:33:a8:e6:ad:37:
         d8:d8:83:49:96:87:9a:ae:3a:fd:59:b7:83:e0:f7:c1:a2:9d:
         60:7b:f3:fc:5f:a1:d8:5e:6a:bf:80:f6:03:51:cb:72:59:d2:
         b8:84:06:6a:88:e7:9d:0b:67:ce:dd:a0:fd:c5:57:ca:b3:cd:
         64:9b:99:98:e7:b8:51:f9:e2:9f:cf:04:9c:61:f5:92:89:c4:
         a3:f8:ce:ab:2a:83:d5:06:f6:a8:00:cc:81:ba:aa:c9:a0:46:
         e0:08:fa:4d:44:e8:dc:c2:1f:9e:59:af:67:b9:7c:74:94:6f:
         66:cf:7e:bc:b0:7a:77:de:31:b5:ad:0b:4f:87:29:4f:c5:84:
         f2:c6:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:21 2023 by rpki-client on console-fra.rpki-client.org