Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32322d3234203d3e20323637343438.roa
File:                     3139322e3134312e36302e302f32322d3234203d3e20323637343438.roa (raw, json)
Hash identifier:          1DdZKhe7lF0l0ftqW/vnBfuUxi1JRMwk7TItJheQt4c=
Subject key identifier:   93:CD:90:2C:DF:32:63:72:BB:88:67:4F:98:17:BF:7B:9F:69:15:FA
Certificate issuer:       /CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
Certificate serial:       095FE6A50637FF1E1920A576C775B411A33F5A
Authority key identifier: B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32322d3234203d3e20323637343438.roa
Signing time:             Tue 28 Nov 2023 21:19:27 +0000
ROA not before:           Tue 28 Nov 2023 21:14:27 +0000
ROA not after:            Tue 26 Nov 2024 21:19:27 +0000
asID:                     267448
IP address blocks:        192.141.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:e6:a5:06:37:ff:1e:19:20:a5:76:c7:75:b4:11:a3:3f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2
        Validity
            Not Before: Nov 28 21:14:27 2023 GMT
            Not After : Nov 26 21:19:27 2024 GMT
        Subject: CN=93CD902CDF326372BB88674F9817BF7B9F6915FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:72:c4:dc:08:5a:ec:e5:e3:1c:4d:3d:a1:
                    cf:35:07:32:09:9d:c4:6a:63:1f:66:48:fa:f8:d2:
                    0f:72:d8:84:9c:43:01:5f:b2:43:a3:44:e1:d1:08:
                    b6:74:95:c4:1e:d5:eb:6a:ad:0f:96:51:85:c6:4a:
                    78:a1:68:86:8b:74:a8:5e:0d:74:75:d1:e7:23:13:
                    1a:fc:99:e3:36:b7:24:51:e0:8c:d8:13:bb:f8:04:
                    86:22:70:0f:60:75:f2:7a:90:5d:59:db:e8:9a:a6:
                    33:33:71:01:f1:51:2c:7d:12:6b:6d:0e:7c:8f:52:
                    e3:50:02:c4:28:8f:dd:6d:ee:fe:b0:b4:19:44:98:
                    b1:eb:ad:6c:9f:27:47:c7:0f:59:13:55:3e:9a:3c:
                    ba:6d:59:ab:0c:0d:b3:cf:29:b6:f5:0c:4d:22:57:
                    02:f5:4d:cd:43:e2:f4:29:96:62:10:de:49:6b:e9:
                    4c:3c:1b:57:d5:4b:a3:fd:6a:13:15:77:f5:58:c1:
                    d0:0b:54:4e:4d:a6:86:c0:e6:f6:b5:97:d1:02:c7:
                    a6:6d:23:76:79:63:92:92:a8:04:cb:c4:94:7e:5e:
                    9b:ef:bf:7b:c9:99:d7:b0:5b:8d:43:f3:86:a9:15:
                    87:97:3e:f9:29:dd:07:4b:2f:2c:df:f6:f9:23:18:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:90:2C:DF:32:63:72:BB:88:67:4F:98:17:BF:7B:9F:69:15:FA
            X509v3 Authority Key Identifier:
                keyid:B1:7D:8D:A4:59:9B:5F:D5:92:DE:44:B6:AB:94:27:11:0F:1F:E0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B17D8DA4599B5FD592DE44B6AB9427110F1FE0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqo78X3P4Ubmj7cfPQWRLbtTAbK7DGtcBV9gACHE2kcJ/0/3139322e3134312e36302e302f32322d3234203d3e20323637343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:1b:60:d0:84:d9:e5:ec:49:05:e5:5a:f2:d3:1d:0e:5a:
         53:e8:ee:71:8d:e8:0f:29:4e:4e:bc:9e:a0:5e:7d:fb:17:18:
         72:b2:ee:af:4c:48:0e:14:cb:7b:4e:d2:e3:ea:e3:08:b2:7e:
         cd:a7:4a:f1:bd:83:b7:dc:90:42:a0:91:fd:ca:9b:0d:1d:19:
         d9:97:64:7a:e4:a0:23:71:1a:92:6c:86:af:7e:a0:6c:85:27:
         9e:eb:ca:73:05:91:b4:c2:20:16:b3:2a:db:e9:4b:dd:ae:2d:
         63:f5:4c:a0:89:54:55:d6:4c:42:ce:f4:8f:95:67:92:33:d0:
         05:e2:a7:e5:74:fe:c6:a3:eb:ce:2e:7a:d6:47:c1:ee:94:e3:
         0d:62:57:00:31:e3:01:75:f8:6b:01:fb:a2:92:b2:79:a7:1b:
         95:12:1d:12:f5:e2:84:f8:0e:27:e8:9d:bd:c3:94:2c:fa:8d:
         fd:a5:e3:5e:4f:53:8e:b4:7a:a5:f4:ac:c5:db:8f:7c:69:d9:
         c2:6c:af:cd:d1:04:59:3e:21:f1:26:cd:4c:a0:d8:55:de:fd:
         8a:66:f1:18:36:89:80:42:ed:0a:38:4d:60:bc:b5:c4:a1:aa:
         ee:9c:18:cc:68:fb:29:d7:b2:91:b7:a8:b2:2e:0c:d9:d8:58:
         f1:fe:97:c4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITCV/mpQY3/x4ZIKV2x3W0EaM/WjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCMTdEOERBNDU5OUI1RkQ1OTJERTQ0QjZBQjk0MjcxMTBG
MUZFMEIyMB4XDTIzMTEyODIxMTQyN1oXDTI0MTEyNjIxMTkyN1owMzExMC8GA1UE
AxMoOTNDRDkwMkNERjMyNjM3MkJCODg2NzRGOTgxN0JGN0I5RjY5MTVGQTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJZQcsTcCFrs5eMcTT2hzzUHMgmd
xGpjH2ZI+vjSD3LYhJxDAV+yQ6NE4dEItnSVxB7V62qtD5ZRhcZKeKFohot0qF4N
dHXR5yMTGvyZ4za3JFHgjNgTu/gEhiJwD2B18nqQXVnb6JqmMzNxAfFRLH0Sa20O
fI9S41ACxCiP3W3u/rC0GUSYseutbJ8nR8cPWRNVPpo8um1ZqwwNs88ptvUMTSJX
AvVNzUPi9CmWYhDeSWvpTDwbV9VLo/1qExV39VjB0AtUTk2mhsDm9rWX0QLHpm0j
dnljkpKoBMvElH5em++/e8mZ17BbjUPzhqkVh5c++SndB0svLN/2+SMYLN0CAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBSTzZAs3zJjcruIZ0+YF797n2kV+jAfBgNVHSME
GDAWgBSxfY2kWZtf1ZLeRLarlCcRDx/gsjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GcW83OFgzUDRVYm1qN2NmUFFXUkxidFRBYks3REd0Y0JWOWdBQ0hFMmtj
Si8wL0IxN0Q4REE0NTk5QjVGRDU5MkRFNDRCNkFCOTQyNzExMEYxRkUwQjIuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvQjE3RDhEQTQ1OTlCNUZENTky
REU0NEI2QUI5NDI3MTEwRjFGRTBCMi5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnFvNzhYM1A0VWJtajdjZlBRV1JMYnRUQWJLN0RHdGNCVjlnQUNIRTJrY0ovMC8z
MTM5MzIyZTMxMzQzMTJlMzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
NzM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAsCNPDANBgkqhkiG9w0BAQsFAAOCAQEAV+0bYNCE
2eXsSQXlWvLTHQ5aU+jucY3oDylOTryeoF59+xcYcrLur0xIDhTLe07S4+rjCLJ+
zadK8b2Dt9yQQqCR/cqbDR0Z2ZdkeuSgI3EakmyGr36gbIUnnuvKcwWRtMIgFrMq
2+lL3a4tY/VMoIlUVdZMQs70j5VnkjPQBeKn5XT+xqPrzi561kfB7pTjDWJXADHj
AXX4awH7opKyeacblRIdEvXihPgOJ+idvcOULPqN/aXjXk9TjrR6pfSsxduPfGnZ
wmyvzdEEWT4h8SbNTKDYVd79imbxGDaJgELtCjhNYLy1xKGq7pwYzGj7Kdeykbeo
si4M2dhY8f6XxA==
-----END CERTIFICATE-----
Generated at Tue Nov 28 22:19:04 2023 by rpki-client on console-ams.rpki-client.org