Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3234203d3e20323634343332.roa
File:                     3133312e3232312e3231322e302f32322d3234203d3e20323634343332.roa (raw, json)
Hash identifier:          YVKfzR8C0PIa7T0Be5DW4SEZNB15bQ9yOu8sN+IfAEA=
Subject key identifier:   D6:C5:12:29:38:71:03:EF:0A:DF:79:21:5B:FC:4E:33:F7:8F:C0:E2
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       0870C067D29F845B9B6EAB77C022D7B41CAE5289
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3234203d3e20323634343332.roa
Signing time:             Wed 05 Jun 2024 19:15:29 +0000
ROA not before:           Wed 05 Jun 2024 19:10:29 +0000
ROA not after:            Wed 04 Jun 2025 19:15:29 +0000
asID:                     264432
IP address blocks:        131.221.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:70:c0:67:d2:9f:84:5b:9b:6e:ab:77:c0:22:d7:b4:1c:ae:52:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Jun  5 19:10:29 2024 GMT
            Not After : Jun  4 19:15:29 2025 GMT
        Subject: CN=D6C51229387103EF0ADF79215BFC4E33F78FC0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:e0:e6:cd:68:7d:15:b9:97:d5:ff:95:a4:
                    af:fb:c7:4b:40:a5:06:41:46:57:5f:4a:42:bd:10:
                    9a:49:cc:f8:af:07:c3:6f:bb:1b:79:81:75:91:fb:
                    18:67:9d:79:85:db:f4:dc:d8:5f:de:77:c6:02:85:
                    c9:49:9f:39:13:a7:18:81:a3:4e:26:7c:55:b9:a9:
                    21:01:bd:8f:8f:4a:87:5a:ec:56:0b:9b:df:6b:c3:
                    6f:aa:2f:da:b6:90:51:bf:33:f8:71:6f:f8:84:83:
                    70:a2:de:f3:21:93:6d:d5:58:ed:6e:c7:d7:bd:76:
                    9b:79:24:95:ab:d7:d5:06:28:6f:4e:9f:79:f1:7c:
                    63:33:08:02:93:26:f2:a6:e1:1b:2f:4f:71:7f:29:
                    33:e7:f6:55:35:22:96:ea:c3:95:32:c0:0b:52:96:
                    da:a8:93:5a:44:af:2e:83:42:97:54:1d:bc:9d:02:
                    e4:bb:31:4e:fd:30:da:89:ae:ba:52:ee:3a:03:ae:
                    4c:25:6c:63:25:c0:50:e2:3b:6f:f8:42:00:a4:14:
                    05:92:43:11:c2:26:5c:38:c1:9b:7c:bc:ac:42:cf:
                    ab:54:c2:3a:f6:34:85:a4:5a:90:e6:4c:04:61:56:
                    81:81:f6:3f:6c:2e:c9:50:16:a9:79:98:71:ec:15:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C5:12:29:38:71:03:EF:0A:DF:79:21:5B:FC:4E:33:F7:8F:C0:E2
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3234203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:64:4c:55:44:f6:5d:9f:ff:4c:e7:29:83:75:4b:b7:a9:
         27:f7:b6:02:dc:29:76:7c:13:78:21:cf:f5:b9:81:c6:71:46:
         f2:8b:d6:bc:94:c1:12:d8:86:24:bc:c4:e4:72:e9:bb:8d:37:
         2f:09:25:68:22:df:4b:ad:6f:1c:5e:2b:0a:30:26:19:b2:ef:
         5f:21:54:71:8a:86:45:38:9f:ea:6f:94:9b:e5:f1:6e:d5:c9:
         f7:16:9d:db:9d:44:ca:17:fd:87:00:b6:ca:be:b6:e7:56:5e:
         2a:37:63:cf:17:53:3d:ec:c9:8c:d5:ab:be:5d:c3:f5:d5:04:
         4f:a4:c5:bc:93:f6:4c:e8:5b:54:4a:ec:16:2f:92:5c:46:a1:
         21:4b:95:97:0e:98:53:58:c0:39:5f:5a:26:94:68:8d:74:32:
         0f:ed:f7:4f:16:5a:4b:dc:1d:04:2d:fb:2c:ad:12:00:47:52:
         91:5f:5a:8c:f2:b5:88:21:86:4e:9d:c8:33:4f:26:ac:9a:16:
         6c:f9:19:72:35:60:21:37:e5:0a:aa:3a:15:a3:2f:33:19:20:
         be:b2:2a:eb:65:92:45:94:1f:e2:85:29:40:ac:dc:bc:d0:84:
         8d:37:23:2b:19:f3:d3:0e:86:61:0b:99:a3:cc:42:9a:e7:46:
         48:a2:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 18:18:41 2024 by rpki-client on console-fra.rpki-client.org