Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32342d3234203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32342d3234203d3e20323634313935.roa (raw, json)
Hash identifier:          cSd/WrLC/KzYD67XjCK4CnQSng+2Rst+x/LqepgyAX0=
Subject key identifier:   FF:2B:C4:CF:45:20:38:30:1F:96:1F:EC:98:CD:51:38:40:1D:76:F6
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       12F5D1C4A7047FD645CED59A529305D6A5532B27
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32342d3234203d3e20323634313935.roa
Signing time:             Thu 13 Jul 2023 17:56:03 +0000
ROA not before:           Thu 13 Jul 2023 17:51:03 +0000
ROA not after:            Thu 11 Jul 2024 17:56:03 +0000
asID:                     264195
IP address blocks:        138.97.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f5:d1:c4:a7:04:7f:d6:45:ce:d5:9a:52:93:05:d6:a5:53:2b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 13 17:51:03 2023 GMT
            Not After : Jul 11 17:56:03 2024 GMT
        Subject: CN=FF2BC4CF452038301F961FEC98CD5138401D76F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:98:31:d2:20:b7:2f:c1:1a:e0:a7:62:cd:
                    58:ff:57:11:90:7f:ac:7f:1a:bc:88:80:84:6d:05:
                    cc:e3:11:40:66:a4:e2:c8:2f:56:79:4c:6f:5d:b9:
                    14:4e:c6:52:54:99:4d:17:16:73:97:46:a3:b7:43:
                    fb:63:49:1d:0b:5f:7e:9a:07:11:63:80:d2:5f:72:
                    d0:64:a1:53:20:04:e2:b2:99:1e:95:e8:97:84:91:
                    af:03:c1:3a:be:82:3e:72:0c:40:94:26:7f:b8:55:
                    4c:24:82:77:9b:1a:35:ed:48:42:5a:7c:86:39:94:
                    e5:93:61:91:1b:43:fb:a8:a6:79:6c:eb:67:f5:5a:
                    b7:ad:e9:6f:b8:46:cf:be:4b:4a:0d:bf:c0:20:79:
                    f0:3e:05:0b:e3:9c:12:42:7d:61:93:09:a0:29:10:
                    11:b1:2d:2c:ce:be:de:f8:af:38:ec:5c:a3:68:f5:
                    1e:41:66:3d:fc:9b:73:1e:d2:48:fc:81:9e:fc:b8:
                    0b:73:96:69:4e:5d:e5:03:01:bf:1f:23:30:61:21:
                    93:9e:f4:08:4f:d0:68:19:12:08:96:c9:8e:8d:08:
                    e0:01:ac:e7:7c:b0:3d:59:b8:b4:ec:55:90:11:38:
                    8e:66:a9:07:c7:d2:e8:9f:e8:3e:ef:19:46:6c:42:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2B:C4:CF:45:20:38:30:1F:96:1F:EC:98:CD:51:38:40:1D:76:F6
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32342d3234203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3d:bd:6f:29:df:1f:39:e7:ae:42:82:ec:71:59:4c:c5:3a:
         30:da:7b:81:4b:9d:58:d4:a9:3f:07:ad:69:a5:7d:42:fb:94:
         a7:64:c9:28:63:29:f6:bb:d6:51:23:36:62:b2:ac:91:65:fd:
         6b:22:c3:26:d2:0d:02:a8:f5:e0:34:de:7f:ea:c9:19:b0:82:
         ed:2c:65:50:df:1f:d0:99:6b:a2:3d:6f:80:b7:cf:fe:38:4b:
         e8:af:f1:30:49:f6:49:19:57:f4:5b:db:ab:f8:32:b5:d7:53:
         04:47:e8:92:36:86:42:d0:4d:4f:df:75:08:96:4e:75:e5:19:
         cd:ad:6a:b3:52:4a:be:70:97:37:90:27:61:7c:57:5e:ac:a7:
         6a:6c:db:fb:d6:92:d8:a3:20:23:d1:72:78:2b:8b:21:9e:94:
         74:73:ab:36:87:ae:7e:96:6c:19:dc:80:d6:f3:00:f2:9f:d7:
         cc:7c:73:11:25:ba:18:e2:f3:36:39:1e:68:86:33:cb:0c:4e:
         f5:ba:28:8c:54:0f:36:d0:db:37:ab:4a:3f:95:24:4f:1d:85:
         82:23:97:a3:ad:f2:e0:26:59:8d:13:ba:91:51:ae:8f:fe:cb:
         2a:43:ad:58:22:ae:ea:35:f3:72:11:ba:bc:0c:81:8b:c3:71:
         c6:e1:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:58 2023 by rpki-client on console-ams.rpki-client.org