Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f33362d3336203d3e20323636303230.roa
File:                     323830343a333933633a383030303a3a2f33362d3336203d3e20323636303230.roa (raw, json)
Hash identifier:          IhXJnDIt7BUx1/wj0JLvURWjVqu7reeLn7dv33aN45k=
Subject key identifier:   3F:11:E5:D2:D0:4C:1C:17:80:AA:90:DD:E6:FC:C3:C8:A1:75:0C:29
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       7E7A4200FB7396F4680AF665CAFFD8BFE38EC485
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f33362d3336203d3e20323636303230.roa
Signing time:             Sat 20 May 2023 11:09:38 +0000
ROA not before:           Sat 20 May 2023 11:04:38 +0000
ROA not after:            Mon 20 May 2024 11:09:38 +0000
asID:                     266020
IP address blocks:        2804:393c:8000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7a:42:00:fb:73:96:f4:68:0a:f6:65:ca:ff:d8:bf:e3:8e:c4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: May 20 11:04:38 2023 GMT
            Not After : May 20 11:09:38 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:7d:14:b9:87:70:06:ed:8a:63:cf:4c:2b:
                    36:4a:93:0c:80:79:17:ec:80:13:cf:7b:c6:16:41:
                    4d:2d:ef:43:f7:b6:82:58:6b:9d:44:2c:7d:a5:07:
                    e0:b7:92:c7:6b:5c:8d:38:3e:21:00:6b:d4:c1:f8:
                    11:8b:65:a6:3e:6b:ec:89:2b:60:e4:7a:1f:6b:1d:
                    fc:13:6c:16:6c:4a:9b:06:4b:a9:9e:3f:df:83:5e:
                    a1:89:73:81:4f:96:df:c1:08:89:b9:98:ac:00:9c:
                    52:ef:03:b0:d4:47:8a:8c:2a:a0:83:c2:a6:b9:06:
                    07:ac:c7:4f:ca:a7:9b:ee:39:fe:f2:ec:b3:50:ee:
                    a0:69:00:54:81:a9:eb:10:ba:6b:22:da:79:22:4f:
                    bd:a1:68:94:d9:51:f9:19:ee:34:ce:14:1d:23:fb:
                    a9:2a:f3:9e:14:bc:e1:21:c6:ca:8a:20:86:9a:0e:
                    59:ab:84:d9:42:30:64:78:0a:59:c6:79:98:74:78:
                    ec:4e:5d:25:51:36:51:ce:6b:08:60:8e:20:ce:00:
                    18:cb:3e:fd:2c:af:67:63:82:57:8a:3b:b8:68:b3:
                    8d:3c:87:06:93:26:d6:45:c6:37:c1:66:43:0e:19:
                    58:c0:74:1d:db:fc:a9:d3:2a:ac:08:d0:76:86:33:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:E5:D2:D0:4C:1C:17:80:AA:90:DD:E6:FC:C3:C8:A1:75:0C:29
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a383030303a3a2f33362d3336203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:ee:9c:c3:04:a4:a9:09:5a:9c:a5:b8:4c:87:1a:a1:99:5c:
         69:57:1a:cc:fe:97:f4:34:0f:30:25:c1:b1:5a:c2:1f:6f:7e:
         45:b8:11:49:70:b8:ea:cf:bc:6f:b7:13:49:ec:5a:68:b7:65:
         1a:3d:11:40:76:c4:15:8d:c7:05:70:6a:a9:fa:c0:9c:23:b5:
         d9:62:fe:e7:da:8e:c3:d4:91:49:e5:bb:bb:aa:e6:9b:77:5e:
         a6:7f:86:86:0e:00:39:3c:fc:6c:53:fa:c7:0f:3c:ac:46:58:
         ea:96:a5:37:8d:42:cb:f8:a8:5e:2f:39:58:13:1c:58:b6:c9:
         0c:f2:60:94:9b:05:6d:8c:3b:48:c9:a1:5b:80:33:bc:62:5a:
         3e:a8:c1:b2:f8:8c:42:18:70:1d:a7:3f:4d:9f:c3:be:f2:3b:
         30:11:dd:24:78:79:3a:96:69:2f:e3:13:33:c2:b9:66:f8:42:
         01:90:fc:1c:df:9b:2e:a2:29:d7:03:e6:ba:37:c1:e3:af:5e:
         5b:73:aa:31:83:bc:b2:0f:7d:cd:89:0c:12:7f:68:31:20:db:
         a4:b6:87:ff:99:8d:38:c4:a8:b5:3f:12:d7:57:41:98:cd:fb:
         48:62:28:64:2e:40:b6:1d:17:0d:ae:59:ef:80:58:76:b7:10:
         f2:c4:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----