Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33342d3334203d3e20323731353939.roa
File:                     323830343a376530633a3a2f33342d3334203d3e20323731353939.roa (raw, json)
Hash identifier:          x/5pBHZvdKlWUhrJy/R1UCIgYuOHIKH+aJg/vwSFIW8=
Subject key identifier:   AF:DA:0D:2F:35:5D:55:C8:4B:43:89:71:27:81:06:0A:F3:F6:A3:2C
Certificate issuer:       /CN=BEC1956E0160C92FCE70593490DE15F0A183223A
Certificate serial:       7C9CECDC96C3C3639F8A1E4F087B4444F780209B
Authority key identifier: BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33342d3334203d3e20323731353939.roa
Signing time:             Mon 21 Aug 2023 21:46:57 +0000
ROA not before:           Mon 21 Aug 2023 21:41:57 +0000
ROA not after:            Mon 19 Aug 2024 21:46:57 +0000
asID:                     271599
IP address blocks:        2804:7e0c::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9c:ec:dc:96:c3:c3:63:9f:8a:1e:4f:08:7b:44:44:f7:80:20:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Validity
            Not Before: Aug 21 21:41:57 2023 GMT
            Not After : Aug 19 21:46:57 2024 GMT
        Subject: CN=AFDA0D2F355D55C84B4389712781060AF3F6A32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:b2:e4:00:2f:09:61:95:87:72:13:4c:94:
                    cf:00:eb:2c:61:7e:96:1c:f2:f9:32:4e:24:0e:fe:
                    97:67:7f:8f:25:a4:4e:3d:7f:f5:b7:bf:c7:b9:ed:
                    9d:6b:c6:64:45:4d:66:d3:a3:09:33:89:95:ca:3b:
                    9c:07:6d:e7:d0:95:f0:d4:93:28:bd:8f:44:54:d2:
                    14:30:a6:d7:ab:04:ee:0f:ba:fc:ea:24:47:ce:62:
                    6d:05:94:04:04:b7:72:05:71:f3:f7:8d:be:1f:21:
                    82:fa:ce:39:13:f8:99:82:20:55:4e:40:e0:1d:6e:
                    b4:1c:99:e3:7f:2d:b1:5f:47:b4:4f:b4:38:9f:ce:
                    38:9f:50:fd:7b:ef:49:16:ae:31:28:52:87:24:3b:
                    4a:d6:5d:2f:01:a6:a2:6f:b1:a2:88:e4:68:c6:44:
                    da:ab:87:cc:65:66:02:16:fb:48:1e:d3:57:6d:d3:
                    a2:fa:52:2e:26:cd:5e:ca:9a:a6:7b:fe:1c:1c:84:
                    80:59:5a:9c:72:92:b5:ac:2f:2b:e8:44:da:cf:5d:
                    d9:48:ee:c1:94:b6:23:58:19:57:6c:84:83:4e:c3:
                    a5:ab:20:16:8f:e0:45:ed:84:84:05:93:ed:84:13:
                    91:61:67:7e:0d:73:61:9e:23:d8:27:b4:34:07:7a:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DA:0D:2F:35:5D:55:C8:4B:43:89:71:27:81:06:0A:F3:F6:A3:2C
            X509v3 Authority Key Identifier:
                keyid:BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a3a2f33342d3334203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:a5:2c:0f:83:e4:36:c9:71:02:c9:5a:eb:94:ec:89:c8:
         4a:02:6a:ac:33:5c:e9:d4:a8:81:2e:c0:48:b6:40:6f:19:79:
         ff:48:be:a2:48:3d:bf:31:1a:d7:93:32:fd:79:be:bb:0a:e1:
         e8:ce:f0:7c:c5:19:80:b7:be:47:5d:30:40:9b:b7:8e:9c:37:
         3d:b4:66:c2:7f:d4:54:69:b6:ee:ae:97:5e:3a:c4:55:f6:cb:
         19:f6:99:9d:de:55:c6:9b:aa:fb:fd:d9:62:0e:4c:cb:2a:8c:
         56:79:cb:9e:ec:3a:d1:f8:0a:79:52:b2:ce:5a:f0:9e:bb:0f:
         3a:bc:b4:01:d4:d4:de:0f:a1:29:24:f1:33:32:d5:54:63:2f:
         ca:09:29:87:8e:28:a2:b5:2e:47:3a:4d:5c:0d:ec:f4:da:4d:
         fe:b0:a0:91:15:43:1c:12:ce:cd:68:0c:74:9c:fd:49:6e:8a:
         9a:a4:51:f5:0a:d5:f9:1b:17:a3:ea:8c:1c:7c:82:b4:fc:f8:
         f3:cc:c3:62:79:ef:71:16:15:fd:65:6b:78:b6:15:a0:13:7e:
         5e:eb:44:e7:ec:4e:98:a0:30:05:a3:f3:c3:dd:47:75:de:fe:
         0d:74:6a:50:5b:e3:b3:eb:58:12:96:17:ec:d6:70:13:20:ec:
         20:1b:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----