Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130362e302f32342d3234203d3e203238313234.roa
File:                     3136372e3234392e3130362e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          b/YOCC3qDJ5gTiNUy95I+6Pwvz6q1g83Yw6LSC7bJYs=
Subject key identifier:   3A:04:12:30:32:CD:9B:4F:65:70:F5:4C:17:63:5E:D7:23:DE:EF:4E
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       5E9D08584E9F733249CA2532D4BEB0A2344E4EE3
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130362e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:04 +0000
ROA not before:           Thu 02 Feb 2023 19:55:04 +0000
ROA not after:            Thu 01 Feb 2024 20:00:04 +0000
asID:                     28124
IP address blocks:        167.249.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9d:08:58:4e:9f:73:32:49:ca:25:32:d4:be:b0:a2:34:4e:4e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:04 2023 GMT
            Not After : Feb  1 20:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:5a:40:26:53:a6:0c:9e:61:67:da:e3:6e:
                    39:f2:d8:99:5f:2a:d7:9c:a1:c2:7f:b2:46:df:b0:
                    50:c7:cd:41:f0:ac:05:fa:98:63:55:06:b0:58:98:
                    a8:72:33:ca:da:8a:3b:f3:9b:b3:37:f8:8c:6a:e2:
                    36:65:02:1a:63:ba:89:16:fa:68:36:0a:37:c8:36:
                    a8:82:b9:89:5d:e3:84:26:91:33:07:12:46:29:6e:
                    dc:1d:41:69:1f:1b:51:42:29:c0:e7:f1:b8:d9:4c:
                    08:13:c8:f3:09:9f:85:25:a6:d2:44:9d:7c:d5:bb:
                    dd:62:d3:56:89:b3:bc:b3:cb:b4:fe:2e:ee:fc:03:
                    e7:b0:67:fb:f3:d2:49:03:9e:f6:74:55:87:17:49:
                    aa:9a:cf:12:68:ad:1d:5a:35:84:27:5f:cf:be:c0:
                    b3:07:9a:22:3a:a7:1d:e0:52:e7:6e:4a:30:fd:be:
                    43:c5:30:f3:ce:d2:c8:cb:42:91:44:5d:12:9f:99:
                    92:e8:43:10:d7:07:11:a2:23:6d:45:2c:a6:33:ef:
                    ba:aa:87:b4:e6:d2:b8:33:50:fd:25:e0:d3:7d:7a:
                    32:58:e7:5b:fc:31:df:61:68:d7:ac:e8:83:12:3b:
                    c9:cc:54:50:35:a4:d2:49:38:2d:8d:d7:33:3c:da:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:04:12:30:32:CD:9B:4F:65:70:F5:4C:17:63:5E:D7:23:DE:EF:4E
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130362e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:bb:e3:6b:1a:70:d8:8f:b4:c8:45:67:35:b5:3a:ec:de:
         d3:42:03:50:94:5f:4e:3d:a1:d0:e1:69:4a:76:41:f2:6d:89:
         f2:5c:82:b4:25:c4:5f:fc:2e:ba:4d:1d:08:a5:58:34:cd:49:
         23:2c:f8:52:87:cd:c6:33:2f:55:13:a3:b9:07:79:a4:7f:ca:
         f5:6b:2a:a1:04:82:82:47:20:d7:c5:04:3c:84:0f:ef:57:4f:
         08:8f:a2:55:71:62:8f:ae:e5:ea:0e:b8:b9:3a:ad:2c:dd:b5:
         26:1e:39:84:ca:b1:1b:67:02:f5:22:7e:9b:d3:da:37:0e:41:
         c2:63:1a:0e:5c:52:86:26:12:ab:bf:ef:23:59:8e:5f:63:a2:
         e0:a1:59:dc:2c:9a:60:9e:37:c6:58:f3:27:28:d9:d7:e3:31:
         eb:a1:1b:53:a3:bb:50:4e:a1:72:0d:b3:01:00:83:05:13:5f:
         bd:78:72:57:b0:e5:b7:4c:7a:13:74:66:45:79:36:f9:44:8c:
         5a:4e:81:4d:4b:8a:71:37:b2:b4:9c:22:f4:8d:71:b8:1c:73:
         e0:20:93:c2:38:e7:2f:6f:fe:ac:7f:e3:90:3c:0c:2d:5b:c3:
         9a:76:3d:8a:96:cb:e3:50:1f:f2:50:02:14:1f:37:e9:7d:e7:
         c7:28:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 15:54:52 2023 by rpki-client on console-ams.rpki-client.org