Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231342e302f32332d3233203d3e20323634343332.roa
File:                     3133312e3232312e3231342e302f32332d3233203d3e20323634343332.roa (raw, json)
Hash identifier:          6FRCYK6cV+e2p+2a8loWWvrhjQz3bF6eE+kpNxG1m3s=
Subject key identifier:   C4:14:D3:13:FC:25:2F:5F:25:51:4D:26:C2:21:23:65:D5:36:18:9A
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       225898F63B0DDFED2C58A321AB61963775873551
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231342e302f32332d3233203d3e20323634343332.roa
Signing time:             Thu 25 Apr 2024 13:22:49 +0000
ROA not before:           Thu 25 Apr 2024 13:17:49 +0000
ROA not after:            Thu 24 Apr 2025 13:22:49 +0000
asID:                     264432
IP address blocks:        131.221.214.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:58:98:f6:3b:0d:df:ed:2c:58:a3:21:ab:61:96:37:75:87:35:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Apr 25 13:17:49 2024 GMT
            Not After : Apr 24 13:22:49 2025 GMT
        Subject: CN=C414D313FC252F5F25514D26C2212365D536189A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:18:a1:2f:a4:3c:81:a3:5e:52:ff:42:dd:
                    77:9c:4c:8f:99:ed:fb:d9:7f:8e:e7:44:12:64:bc:
                    40:b1:0a:89:cd:9b:02:9b:f0:b8:22:30:bd:23:07:
                    79:c2:e8:ad:97:1a:6f:dd:90:3b:32:ec:9a:8a:0d:
                    fc:df:a5:71:51:d3:22:52:91:da:48:dd:dc:74:05:
                    8a:d3:c1:45:38:5e:ad:db:60:cd:86:7d:1e:72:0f:
                    ce:05:b3:00:0e:91:8d:e6:ab:3f:f5:98:fb:bf:d1:
                    5b:26:fd:ad:52:4a:e6:38:b1:b6:2a:0e:af:9c:55:
                    94:e1:62:db:38:a6:8d:a2:e3:8b:fb:b4:5c:e7:5e:
                    4c:53:f0:7a:74:7f:d9:ad:e7:36:8e:09:43:a1:d8:
                    d3:4b:88:a0:a8:bd:14:99:0a:67:23:af:25:e7:ab:
                    ea:0a:18:d3:7c:4f:1d:06:1c:2e:46:81:d9:cf:fd:
                    18:27:cd:4a:8d:bf:50:79:e3:b1:ba:e6:43:95:c3:
                    8b:69:4d:43:33:dc:72:94:1a:22:45:4d:45:11:e9:
                    e1:ed:c9:fd:66:e9:d9:ad:6d:5c:54:ac:74:e4:3f:
                    58:ea:fa:fc:6a:96:1b:69:5f:f5:d1:e8:06:03:de:
                    10:a3:d2:ab:9e:76:1f:4b:6a:0a:64:93:70:d4:c2:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:D3:13:FC:25:2F:5F:25:51:4D:26:C2:21:23:65:D5:36:18:9A
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231342e302f32332d3233203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:03:28:69:00:98:cd:21:67:37:04:05:d5:5c:2c:aa:1a:ac:
         81:52:32:e9:a4:55:22:f4:a4:35:71:3f:d1:5d:f6:83:2c:4a:
         cb:a7:02:4e:81:9c:05:84:3d:4a:ef:f9:1e:6c:54:b6:bd:de:
         a0:81:a9:8f:5a:f9:05:53:fb:bc:44:93:d3:ed:b4:3e:6e:fc:
         67:a8:3d:bf:2f:b9:f8:93:2d:0e:5f:73:12:3c:c2:e7:24:91:
         d3:c5:0e:7f:f6:a4:18:b8:97:74:53:f4:4d:65:d9:71:85:be:
         78:13:2f:65:de:5b:5a:f7:5a:27:20:b7:ad:3e:66:7a:e5:b1:
         a5:c4:23:92:7f:11:de:29:0b:8e:40:78:dd:b9:21:b4:d5:9c:
         38:a1:d2:d1:ba:9a:63:62:22:51:d1:dc:c1:d8:b3:0a:61:4e:
         7b:af:e9:7e:03:d9:26:d4:db:57:db:97:74:6e:1d:0f:3e:98:
         9a:14:f6:f0:b7:a7:75:32:bc:bb:f7:3e:3a:b3:4e:7f:03:92:
         65:81:2d:97:fa:a5:ca:f1:d3:1e:27:77:eb:64:d3:2f:22:ee:
         cf:58:75:9f:ae:ba:30:7b:ec:ea:24:ca:89:a7:f2:34:95:dd:
         61:90:bf:33:b8:2e:53:68:74:a1:23:c6:c7:33:64:6f:2d:36:
         d7:ca:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org