Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3135302e302f32342d3234203d3e20323634343332.roa
File:                     3136382e3139352e3135302e302f32342d3234203d3e20323634343332.roa (raw, json)
Hash identifier:          iaeOl+RGU3emfiiN/TWrz4D+2ZZEP7qej2gvxkUETIw=
Subject key identifier:   BD:69:6B:17:80:44:00:06:8A:81:75:EE:5C:A3:D1:E3:B1:67:54:CE
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       67F5E350F60D165032E235982450946381F4861C
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3135302e302f32342d3234203d3e20323634343332.roa
Signing time:             Thu 25 Apr 2024 13:23:02 +0000
ROA not before:           Thu 25 Apr 2024 13:18:02 +0000
ROA not after:            Thu 24 Apr 2025 13:23:02 +0000
asID:                     264432
IP address blocks:        168.195.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:e3:50:f6:0d:16:50:32:e2:35:98:24:50:94:63:81:f4:86:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Apr 25 13:18:02 2024 GMT
            Not After : Apr 24 13:23:02 2025 GMT
        Subject: CN=BD696B17804400068A8175EE5CA3D1E3B16754CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:dd:db:28:16:ad:df:a5:e9:78:16:c5:b7:
                    39:d7:00:d0:6b:d7:23:b6:a6:da:67:7d:c6:39:77:
                    41:43:e0:64:1d:c7:fd:c4:57:d3:e0:54:1a:76:d6:
                    d7:39:fe:5f:7e:2f:1a:ec:56:37:88:29:5b:7f:b7:
                    46:b8:47:74:dc:8d:39:ad:c6:1f:9a:7d:38:2d:10:
                    37:31:4b:c7:71:1f:0d:e7:2a:d6:35:b3:ee:07:8f:
                    9a:1b:6e:ed:f5:6d:ad:ad:9b:19:c2:bc:25:93:83:
                    d7:e7:98:1a:3a:da:bb:41:97:c2:74:36:de:41:cc:
                    ed:af:2a:6f:b7:ed:00:eb:8f:b2:ab:01:8b:c3:5c:
                    a3:d3:e1:fb:65:33:c1:10:11:e6:b9:35:9c:a0:8d:
                    c1:b7:44:f8:68:89:96:0d:ea:6d:80:fd:2f:f3:65:
                    8f:c4:06:03:29:a3:2e:c5:8c:be:3f:ff:66:e6:8c:
                    ae:c1:74:b1:28:e5:90:52:4b:dc:03:87:76:db:30:
                    86:b0:f7:08:d8:f7:41:78:9b:aa:57:10:0b:9a:c4:
                    3b:37:71:7c:9d:3b:9e:ee:3c:b8:d1:76:d6:45:33:
                    36:37:49:33:0a:7f:46:3b:94:1c:ce:25:9e:24:ce:
                    6d:e2:8a:21:81:fa:4a:c9:a9:14:8d:28:f8:73:f6:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:69:6B:17:80:44:00:06:8A:81:75:EE:5C:A3:D1:E3:B1:67:54:CE
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3135302e302f32342d3234203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:02:bc:1a:d5:b7:74:65:4a:16:e6:1e:12:83:87:0b:cd:
         3d:36:8b:03:17:30:85:88:15:cd:4e:60:94:a6:e4:17:3b:00:
         07:7a:ad:e5:c6:08:02:14:75:c2:4a:d6:c2:e6:12:e0:fd:89:
         34:9e:45:c6:1d:b4:f3:0d:d9:5f:cb:3d:87:bb:8a:32:1d:f9:
         81:bd:d1:d6:b6:9e:bd:1c:ce:db:a3:f0:be:30:7d:ea:dc:19:
         97:d1:4e:60:c1:57:03:a2:dc:93:d0:56:59:6c:ce:84:61:26:
         31:c3:b1:8f:49:9c:bc:e4:c8:da:bf:7f:40:f1:56:cb:6f:39:
         32:eb:76:21:85:e0:e2:6c:42:c3:12:62:8a:d0:4a:c5:86:d7:
         91:2b:ea:13:22:18:2f:31:70:3f:41:24:ed:67:e9:bf:76:2f:
         af:2f:a5:a3:5b:1d:2f:56:c7:1d:f7:4c:7c:bb:13:f2:a4:74:
         e4:63:5e:a9:7e:37:ec:03:5c:ff:0b:cc:fb:e5:c5:1a:4c:a1:
         9d:5f:a7:d9:d7:40:86:09:c9:10:c7:cd:77:ed:f3:fb:1a:20:
         b4:05:98:b0:33:99:4a:7f:bf:c9:0f:b0:ab:ec:c8:e0:bf:cf:
         5f:97:ce:18:a9:20:c0:db:d2:bb:58:bd:0f:46:52:61:57:d5:
         88:10:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org