Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137302e302f32332d3233203d3e20323634343337.roa
File:                     3133312e3232312e3137302e302f32332d3233203d3e20323634343337.roa (raw, json)
Hash identifier:          ZfUiMVGvD5zt4upIJ9208c+bcfCj682LIjM01mCfBls=
Subject key identifier:   84:7F:76:94:31:CB:92:57:48:36:C8:9F:4F:33:56:D5:F7:96:EC:43
Certificate issuer:       /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial:       1BF078B78E0A5E3DBF27116E771EB4E6CC3BB868
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137302e302f32332d3233203d3e20323634343337.roa
Signing time:             Thu 21 Sep 2023 11:25:35 +0000
ROA not before:           Thu 21 Sep 2023 11:20:35 +0000
ROA not after:            Thu 19 Sep 2024 11:25:35 +0000
asID:                     264437
IP address blocks:        131.221.170.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f0:78:b7:8e:0a:5e:3d:bf:27:11:6e:77:1e:b4:e6:cc:3b:b8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
        Validity
            Not Before: Sep 21 11:20:35 2023 GMT
            Not After : Sep 19 11:25:35 2024 GMT
        Subject: CN=847F769431CB92574836C89F4F3356D5F796EC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:73:e7:4f:0e:58:87:c9:12:b1:61:28:20:
                    2c:f4:4b:14:21:5d:df:9a:a2:63:6c:60:83:03:4e:
                    1b:15:77:4e:1e:e1:f6:f5:06:81:8e:d5:cf:bf:8d:
                    61:8e:08:89:81:cc:90:9e:81:d9:45:6c:46:e9:8e:
                    d9:e8:4f:54:f3:60:99:19:b0:f7:76:00:99:28:f6:
                    c0:a5:78:83:a3:0f:4f:4c:c7:6b:73:87:7e:60:2f:
                    10:d9:d3:be:ba:80:07:a6:cc:92:ea:f8:6b:96:a2:
                    52:78:94:bf:ff:a5:e1:eb:18:35:d1:17:83:37:cf:
                    94:94:18:36:a1:6e:1a:51:db:e4:e8:ea:96:7f:64:
                    0f:ad:1f:c8:4b:52:be:61:5d:b9:6c:69:b3:f7:05:
                    a4:76:24:04:55:ed:30:fd:3a:96:6d:9c:76:8a:02:
                    c0:00:2b:2f:dc:d1:b9:a0:45:1a:47:8d:75:c1:17:
                    09:00:c3:43:94:65:d6:f6:21:0c:24:7b:00:98:dd:
                    99:f2:7e:74:72:a1:a3:38:15:9d:08:a4:61:0d:5f:
                    30:1b:c7:04:d9:68:eb:b6:8c:16:4b:ef:86:c2:7d:
                    20:cf:f6:ed:d1:ed:c1:9e:b5:d7:d0:3a:99:ed:15:
                    4f:95:16:50:02:81:c6:ef:1b:bb:a1:fa:a9:49:94:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7F:76:94:31:CB:92:57:48:36:C8:9F:4F:33:56:D5:F7:96:EC:43
            X509v3 Authority Key Identifier:
                keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137302e302f32332d3233203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:83:7d:bf:31:31:60:14:a3:ab:8e:ff:44:c9:5f:e8:69:e7:
         80:c9:9e:95:33:39:b0:ae:c8:6c:43:01:f8:4f:5a:fe:bd:0c:
         8c:f9:ed:65:c0:6b:56:92:eb:90:82:e3:63:fb:54:b8:56:83:
         c1:58:1e:0b:44:0c:82:4b:a2:5e:6f:34:d5:a0:0e:56:8b:e8:
         5e:a2:04:10:aa:67:7f:73:1e:89:ff:45:d6:ed:9c:12:3a:35:
         ce:08:8f:be:eb:9f:13:27:57:c2:e2:1d:91:f6:27:a1:44:d8:
         90:76:35:12:83:b0:10:41:83:2a:d6:56:e8:d3:6d:bb:1a:e4:
         cd:45:3c:13:c1:4f:9c:35:13:a8:00:dc:cd:28:26:f5:71:e7:
         be:de:94:7e:8e:5f:6c:39:b5:37:9b:d8:71:a0:38:90:0d:dc:
         9e:95:92:92:8c:f8:6b:47:41:c4:a7:5b:35:d1:a4:6e:6e:e8:
         1a:1b:93:d1:1e:6a:f6:8c:df:9f:b1:70:ea:11:53:30:b2:7b:
         be:48:ff:d7:45:2a:bd:e1:8b:20:3a:dc:d9:c2:f9:18:9c:49:
         61:86:4b:5b:d1:ec:fc:ab:ed:67:ea:b1:69:b9:28:c3:2a:bf:
         b2:e6:75:b1:53:ec:7d:50:4f:d1:21:b0:b8:a2:c4:5f:82:db:
         fd:2a:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----