Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139392e302f32342d3234203d3e20323634313935.roa
File:                     3133382e39372e3139392e302f32342d3234203d3e20323634313935.roa (raw, json)
Hash identifier:          imYy85FiQVpgXDS4LYPp7ddgeOG1WGWX5/VlNRtvUI4=
Subject key identifier:   BA:98:9F:9F:A4:3C:BD:37:19:05:07:34:9B:AA:90:51:B2:C3:7E:2F
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       730BA1B73D50B3C4DD705929A6170FDD2E34BB13
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139392e302f32342d3234203d3e20323634313935.roa
Signing time:             Thu 13 Jul 2023 17:56:51 +0000
ROA not before:           Thu 13 Jul 2023 17:51:51 +0000
ROA not after:            Thu 11 Jul 2024 17:56:51 +0000
asID:                     264195
IP address blocks:        138.97.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0b:a1:b7:3d:50:b3:c4:dd:70:59:29:a6:17:0f:dd:2e:34:bb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 13 17:51:51 2023 GMT
            Not After : Jul 11 17:56:51 2024 GMT
        Subject: CN=BA989F9FA43CBD37190507349BAA9051B2C37E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:66:8c:a8:f5:8c:5b:c7:7a:30:c9:b0:31:
                    fd:c0:34:ae:a1:a3:9e:b7:31:2f:6a:5e:33:bb:31:
                    03:42:2c:00:15:a8:16:5d:d8:49:ff:04:6d:76:44:
                    2c:78:7e:ef:97:8e:f9:0a:4e:1b:ba:9b:0a:af:e2:
                    f7:e9:5d:cf:90:ec:9d:23:ab:25:a4:c0:5b:28:b5:
                    20:34:97:08:86:92:7f:13:bc:d3:e5:c8:c6:53:1b:
                    81:70:f6:c5:77:3a:9c:da:68:88:f8:d6:82:5d:76:
                    22:96:0c:d1:12:e9:6e:87:8c:01:0c:3f:f8:94:e8:
                    5d:34:35:10:b3:06:c8:c5:48:f3:67:df:2d:38:3f:
                    f7:89:4a:db:e6:f2:20:5b:91:5e:e4:dd:51:2d:74:
                    59:94:8c:0f:5a:4a:6f:1d:ad:a5:5a:6a:0c:2f:bc:
                    a4:db:59:aa:36:fe:70:94:3c:2d:c9:ba:d5:f2:5e:
                    9e:14:a7:8d:3b:3f:7c:a2:d4:44:47:aa:24:49:f7:
                    d8:ab:38:35:ee:82:d6:fd:74:b3:ef:de:77:48:11:
                    96:40:8b:2c:bc:e2:18:ee:c1:33:5c:c1:2a:26:f9:
                    21:ed:18:ae:4b:20:b0:4e:0c:84:32:2e:c4:48:27:
                    bd:1c:28:77:33:b3:a2:ad:87:71:cc:5a:7f:55:25:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:98:9F:9F:A4:3C:BD:37:19:05:07:34:9B:AA:90:51:B2:C3:7E:2F
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139392e302f32342d3234203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:f0:b4:4b:82:f4:4e:92:6c:3e:8d:2a:f4:a1:6c:56:ae:
         7a:77:72:ee:c1:88:d2:59:f5:39:7e:0a:66:e5:5c:a0:50:bd:
         ae:04:00:1d:f0:9e:51:8c:0c:dc:93:4f:70:c6:00:76:6d:8c:
         83:8d:35:33:07:a1:04:c9:3b:7d:e0:ae:7d:0c:18:1a:4b:81:
         58:7a:a6:e0:8a:d5:16:b4:c6:45:5c:b4:b4:d8:c9:20:b1:59:
         86:c0:bf:5e:d2:46:e2:be:8a:8e:c7:d5:00:57:bc:8f:73:5c:
         84:1c:f6:f9:38:4a:13:50:ce:a9:7c:e1:f4:38:d0:7b:ce:aa:
         13:80:33:eb:25:7f:b6:94:e7:f5:79:e9:70:f6:45:1d:3c:c0:
         e6:42:65:c2:dd:47:2b:28:33:4d:df:72:f9:f0:08:a9:09:6e:
         dc:bb:23:b9:e5:49:f6:a4:a2:89:75:a0:ad:4d:da:36:d2:c2:
         97:84:04:ac:c9:5f:52:b5:7e:13:64:fe:6c:aa:38:0e:3f:17:
         00:2b:25:e9:d7:4e:50:6f:d4:e0:56:91:f6:c2:a4:02:9c:76:
         a6:16:7a:34:9f:bf:bb:72:30:b3:f7:aa:fb:20:e2:44:31:b8:
         95:de:01:00:3c:b3:5a:a6:c3:60:ac:18:8f:ab:4f:ab:cd:9d:
         a9:82:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----