Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133342e302f32342d3234203d3e20323634333030.roa
File:                     3133382e3132312e3133342e302f32342d3234203d3e20323634333030.roa (raw, json)
Hash identifier:          meYhWxw1xsh6GcPKE7f5AEHfd+pfqzaMEeF3awoqanY=
Subject key identifier:   C2:5E:29:33:E5:3B:AE:3D:08:3D:3B:D6:59:97:C2:B9:01:CF:80:16
Certificate issuer:       /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial:       6C1954FD45E29CB9DC929D225A8DF86ED6C918DF
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133342e302f32342d3234203d3e20323634333030.roa
Signing time:             Thu 26 Oct 2023 02:50:51 +0000
ROA not before:           Thu 26 Oct 2023 02:45:51 +0000
ROA not after:            Thu 24 Oct 2024 02:50:51 +0000
asID:                     264300
IP address blocks:        138.121.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:19:54:fd:45:e2:9c:b9:dc:92:9d:22:5a:8d:f8:6e:d6:c9:18:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
        Validity
            Not Before: Oct 26 02:45:51 2023 GMT
            Not After : Oct 24 02:50:51 2024 GMT
        Subject: CN=C25E2933E53BAE3D083D3BD65997C2B901CF8016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:57:3a:e0:e8:84:c4:ca:20:3c:3d:88:26:
                    6e:d7:9e:eb:45:97:5a:4c:48:f1:72:7e:bc:86:07:
                    ee:81:1b:32:bc:c6:c1:76:0c:2f:15:d8:a9:86:68:
                    92:57:c1:85:bf:02:07:96:58:4b:70:5f:ee:f2:0b:
                    e1:be:ea:47:91:72:ff:66:8f:27:ff:22:89:63:d5:
                    2e:f3:d3:e4:ae:ae:0d:ab:e6:45:56:5b:d1:87:0b:
                    5d:31:c5:31:ef:17:1b:08:94:7d:3c:32:3a:26:c7:
                    64:cf:9d:c5:ca:51:c5:b7:3c:f5:a6:32:3e:91:3e:
                    6e:e6:93:5c:fc:31:8f:a8:69:05:fd:d7:b5:bb:9e:
                    50:d0:78:f1:08:a0:26:8d:60:32:a0:04:dc:0b:b8:
                    74:d5:5c:e7:cd:b8:23:c5:ad:5e:7d:9a:35:78:5e:
                    5c:fe:9d:ad:a7:47:b1:8a:1c:63:3d:0e:c6:f2:f7:
                    e9:3b:cd:9c:f6:54:36:43:1e:72:9a:ba:04:f0:11:
                    91:07:a7:78:61:4f:69:93:8b:8e:7b:dd:96:e9:31:
                    70:92:93:be:fa:be:20:ae:38:15:45:e0:4d:54:32:
                    c5:46:f2:89:a3:db:a9:38:25:6b:9b:fc:c4:2b:13:
                    86:57:9f:ff:de:b6:2e:41:ce:ad:cb:a5:a4:43:f3:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5E:29:33:E5:3B:AE:3D:08:3D:3B:D6:59:97:C2:B9:01:CF:80:16
            X509v3 Authority Key Identifier:
                keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133342e302f32342d3234203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:c5:af:53:b0:d7:48:ba:c9:70:6f:e9:31:67:09:b3:a1:1b:
         a6:96:1d:43:76:98:5a:c8:a5:1e:f3:79:e7:58:40:8b:06:7e:
         27:94:d6:00:b0:72:66:53:7c:a5:90:09:f2:7a:2e:6a:f5:0c:
         f2:af:87:3b:5b:06:9d:e4:6e:a4:08:20:a0:53:78:f3:f0:5e:
         23:e8:54:2c:34:c2:e5:04:85:59:ce:b3:48:b3:3d:a8:5f:fa:
         ad:74:c8:46:5b:37:86:75:e9:82:7b:41:de:88:47:29:a4:83:
         04:ec:b9:f2:1f:53:3c:86:e7:12:0e:75:82:6c:6b:0d:2c:fc:
         52:b7:a7:c5:4f:30:6f:ad:59:41:67:8a:59:65:9f:54:3d:0b:
         c5:ee:af:42:cc:ac:d8:8e:d9:ea:a5:1f:bb:a0:c6:e8:7f:b4:
         f7:61:c8:ac:7d:84:df:87:f7:65:d9:83:91:8f:27:9c:7d:c6:
         61:7a:03:26:68:81:e7:79:a5:14:59:13:ac:5b:ba:fe:de:7d:
         f0:d9:b1:a7:43:6b:21:bf:a3:22:fc:24:15:54:5e:9d:db:01:
         e4:c5:21:d4:a0:09:c7:aa:1d:e2:b5:dd:8d:08:83:d1:7d:e5:
         d1:f9:c9:72:a6:63:67:16:11:1c:3b:03:d3:9e:ff:fd:42:5a:
         74:87:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 23:40:18 2023 by rpki-client on console-fra.rpki-client.org