Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32342d3234203d3e20323634343332.roa
File:                     3133312e3232312e3231322e302f32342d3234203d3e20323634343332.roa (raw, json)
Hash identifier:          +Y97SFmDN6twua2OpdBx9qcD80Qt4QjwmsGJFpF4fqY=
Subject key identifier:   50:5D:C4:D1:5F:CE:DD:26:27:82:5A:B7:52:E6:74:A3:BF:10:24:71
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       5CD5A55FBD0E3AD60D543DB2D37966016A2B682B
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32342d3234203d3e20323634343332.roa
Signing time:             Thu 25 Apr 2024 13:22:43 +0000
ROA not before:           Thu 25 Apr 2024 13:17:43 +0000
ROA not after:            Thu 24 Apr 2025 13:22:43 +0000
asID:                     264432
IP address blocks:        131.221.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d5:a5:5f:bd:0e:3a:d6:0d:54:3d:b2:d3:79:66:01:6a:2b:68:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Apr 25 13:17:43 2024 GMT
            Not After : Apr 24 13:22:43 2025 GMT
        Subject: CN=505DC4D15FCEDD2627825AB752E674A3BF102471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:76:2d:70:ed:ac:05:d1:b0:c6:1f:2c:1e:
                    16:4a:68:05:ab:a2:0e:2b:04:0a:39:88:29:24:7c:
                    96:5e:0c:09:36:1c:61:bb:59:42:3d:31:1a:6a:43:
                    9e:2e:d3:bd:72:48:33:5a:75:09:e7:aa:03:28:e8:
                    84:e0:99:1e:39:08:e5:0c:93:97:ed:9d:d4:2d:9a:
                    59:ae:05:b7:4c:87:52:39:1d:df:e8:5e:2d:b4:53:
                    9e:fc:95:89:fb:44:fb:80:d0:60:b6:cf:72:56:84:
                    52:99:e5:de:d5:ad:df:a7:d3:3a:5e:3c:de:39:12:
                    0c:99:43:38:5a:b2:93:d4:5e:dc:65:5a:74:ca:91:
                    db:f6:8a:1d:d0:a2:64:6f:72:ba:c1:20:dd:8c:53:
                    43:8e:ab:37:22:6b:d1:8b:7c:4b:eb:93:e4:a8:70:
                    49:a6:54:1a:0d:0c:fc:56:a5:7d:e4:e8:d0:26:dc:
                    a0:0f:45:82:6f:07:24:3b:2d:2b:5e:f0:b7:a4:11:
                    a7:05:47:f2:92:48:33:bb:af:37:6d:49:88:09:f4:
                    7e:e7:a4:73:32:0b:68:b6:eb:ec:83:ff:14:10:96:
                    b5:23:18:ec:f8:21:87:bf:bd:15:72:e4:d2:80:1a:
                    93:ab:18:a3:45:8b:7c:74:c8:21:a6:0d:0c:77:4c:
                    39:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5D:C4:D1:5F:CE:DD:26:27:82:5A:B7:52:E6:74:A3:BF:10:24:71
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32342d3234203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:f6:1d:60:7a:70:66:d7:a6:be:a0:2d:57:39:09:10:be:
         73:25:62:0d:b3:fd:cb:80:47:36:94:7f:d4:a8:e5:45:4c:3c:
         cb:3e:99:e9:5f:bd:24:4b:05:0a:34:12:9f:38:1d:6a:30:1e:
         ad:62:51:ea:0d:aa:19:4d:11:fa:e2:a5:cd:12:f5:3c:62:9c:
         3d:2d:6c:59:ee:60:88:9d:40:59:dd:10:bf:7f:d2:63:0d:0f:
         c8:79:37:31:25:09:c7:01:09:c9:f0:b7:36:84:2b:62:9f:c0:
         31:52:91:36:34:72:1c:27:dd:7b:24:fe:cb:62:06:4f:fb:dd:
         42:b0:c4:0e:44:eb:51:06:38:b6:a0:fc:b7:5b:56:ee:1c:25:
         07:3a:75:b6:12:e4:21:f4:e4:6d:9f:17:3b:57:fa:83:02:cd:
         1c:5d:84:06:3f:c4:78:83:cb:48:cc:3e:e2:cc:b8:a5:c4:ea:
         3a:14:47:2a:35:6a:cb:0b:29:cb:a2:1b:39:2f:1f:a7:4a:4f:
         57:fd:61:6a:e0:03:8d:21:81:bf:55:f3:c0:c0:d4:bf:00:00:
         7a:4d:2e:f6:fd:c2:ed:e6:79:b6:d7:db:0a:e2:bd:a5:8b:a0:
         fd:6f:ed:b2:0d:fa:33:95:a5:2e:21:d8:44:a6:10:f9:e6:3e:
         91:d5:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org