Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32342d3234203d3e20323634313935.roa
File:                     3133382e39372e3139382e302f32342d3234203d3e20323634313935.roa (raw, json)
Hash identifier:          eyhaOFV4TX8Q/eb0NAVpC78gKWw3G6+IKDie5+6YPnU=
Subject key identifier:   D5:5E:31:1B:0B:D0:3F:34:B3:F9:93:E9:09:C8:7A:27:8F:FF:90:B1
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       7E21081304307BB00A8563F6C645A5269AC2FA6E
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32342d3234203d3e20323634313935.roa
Signing time:             Thu 13 Jul 2023 17:56:26 +0000
ROA not before:           Thu 13 Jul 2023 17:51:26 +0000
ROA not after:            Thu 11 Jul 2024 17:56:26 +0000
asID:                     264195
IP address blocks:        138.97.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:21:08:13:04:30:7b:b0:0a:85:63:f6:c6:45:a5:26:9a:c2:fa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 13 17:51:26 2023 GMT
            Not After : Jul 11 17:56:26 2024 GMT
        Subject: CN=D55E311B0BD03F34B3F993E909C87A278FFF90B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7c:a0:61:1d:fd:43:a1:02:21:2e:b0:79:b7:
                    a5:62:b0:5f:e1:79:75:fb:bf:4b:57:89:01:92:40:
                    61:c9:48:fa:25:da:1d:76:68:04:c9:8d:27:51:f3:
                    29:5a:4f:b6:09:e1:0e:e0:d9:c8:0f:14:7e:eb:bb:
                    9b:3e:ae:7e:3b:ef:34:5e:4e:be:ca:e8:01:c5:9f:
                    9b:fe:38:02:f0:21:94:de:ca:b8:77:ed:d2:e7:f1:
                    e3:2c:07:c9:54:5c:7b:c3:76:17:0f:ce:2f:22:6c:
                    cc:aa:ac:16:3b:51:b7:70:41:8d:6f:e2:5a:49:8f:
                    74:0c:d7:d8:e7:bf:e3:b2:4e:6d:93:c9:49:0c:79:
                    fa:53:18:44:02:2d:52:03:f2:ea:e9:0e:83:b8:8a:
                    0c:71:b3:60:a9:d9:27:c1:4f:1b:36:6b:4f:f5:7a:
                    bf:00:49:91:96:cb:44:f4:12:99:8a:5d:bb:03:77:
                    6b:d6:a1:2e:56:17:dc:e7:82:e4:d6:4c:cf:b4:a5:
                    52:b1:92:65:cd:c0:74:f6:60:65:52:f3:1e:ef:b5:
                    f5:c4:8e:29:48:b7:ad:74:82:22:c4:6c:99:92:84:
                    85:25:5c:a5:6f:85:8b:d6:10:27:e8:d3:09:dd:e0:
                    c2:08:72:41:58:f6:95:14:d3:64:5d:3a:04:3c:a3:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:31:1B:0B:D0:3F:34:B3:F9:93:E9:09:C8:7A:27:8F:FF:90:B1
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32342d3234203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:72:06:3f:75:de:7b:0e:8d:a9:5e:f4:cf:ac:11:ab:07:d5:
         f2:ea:04:ab:55:49:95:b9:69:0f:80:1b:6b:a7:bc:0f:3b:77:
         a6:79:20:f7:17:e0:9a:2b:1e:84:d1:c1:32:cb:69:ca:bb:50:
         e5:a8:02:cd:f3:67:a7:23:ed:22:56:e1:5a:4f:ae:68:3d:3a:
         51:41:e4:9c:5f:80:93:a3:37:f6:73:14:f9:5f:8e:0f:66:ae:
         dd:0d:f2:b0:30:ba:bb:3e:c9:45:2e:3f:6c:7c:61:d9:c0:77:
         49:79:8b:b4:33:22:b3:26:0e:45:08:c8:d7:be:48:e2:91:a2:
         2f:e9:70:a5:90:be:b3:e3:d5:2a:18:1a:78:92:51:0f:03:c0:
         e1:d9:11:dc:3f:3a:02:14:e5:fd:20:64:f9:a4:3a:28:69:37:
         fd:f3:21:73:e2:70:5c:76:be:c8:94:cc:68:a7:90:08:44:bf:
         cd:9c:2c:70:ec:e8:ec:8c:59:38:a4:19:73:b4:dd:c1:f8:6a:
         33:81:79:50:76:ba:87:3f:46:0a:85:08:89:73:e9:84:14:a3:
         f0:26:7f:69:c3:68:6c:ad:c5:e0:24:ad:bb:0f:e2:34:55:00:
         ce:06:73:b1:d4:fc:2d:94:b7:0b:79:b8:a0:bb:2c:bd:7b:3c:
         8d:3d:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:46 2023 by rpki-client on console-fra.rpki-client.org