Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a323030303a3a2f33362d3336203d3e20323634303936.roa
File:                     323830343a323236343a323030303a3a2f33362d3336203d3e20323634303936.roa (raw, json)
Hash identifier:          /3PAc9a86eGHm1Q5/CxSMm2+pKcpOoArqd4G3xYBlpo=
Subject key identifier:   2E:3B:DD:5D:76:E2:2D:9E:12:34:18:F2:7B:2D:3C:EA:59:E7:24:F5
Certificate issuer:       /CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
Certificate serial:       7F219EDC0E364DC10A570FCEA067B0E00EC03BC2
Authority key identifier: BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a323030303a3a2f33362d3336203d3e20323634303936.roa
Signing time:             Fri 28 Jul 2023 20:00:00 +0000
ROA not before:           Fri 28 Jul 2023 19:55:00 +0000
ROA not after:            Fri 26 Jul 2024 20:00:00 +0000
asID:                     264096
IP address blocks:        2804:2264:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:21:9e:dc:0e:36:4d:c1:0a:57:0f:ce:a0:67:b0:e0:0e:c0:3b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
        Validity
            Not Before: Jul 28 19:55:00 2023 GMT
            Not After : Jul 26 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:e4:79:63:29:7c:09:6c:1d:80:c7:7b:bf:
                    9a:5a:8e:bf:db:a9:ee:36:98:95:09:bd:ab:08:78:
                    49:e7:97:eb:78:16:8d:4d:2a:b2:2a:d8:e9:3c:35:
                    66:49:29:26:95:95:b7:5f:7e:20:66:3a:5a:a1:5f:
                    a5:25:73:00:af:a6:a5:ff:a1:a1:0b:71:03:a3:1e:
                    42:bc:4d:1b:74:9b:97:ab:6c:46:74:f0:9b:6f:54:
                    c5:42:6f:70:65:c6:59:4c:c4:fa:64:7f:7a:b4:b7:
                    b3:de:a4:7f:7a:65:92:d6:09:e8:f5:b5:df:a3:cc:
                    b7:05:6c:d1:af:4e:36:87:0d:e4:c6:31:bc:cd:6d:
                    d3:a9:e7:43:92:19:76:5b:ae:35:3f:b4:31:5f:6c:
                    cd:a0:aa:ea:04:6f:86:6f:6d:5b:b2:f6:3f:c4:bf:
                    a5:b4:e7:9f:5c:cd:a5:15:75:d6:e8:7d:9e:e5:7c:
                    ce:2d:ea:60:16:e5:44:bf:20:2d:4b:03:c2:84:52:
                    a7:e9:1b:3f:3a:71:39:35:74:c0:bf:e4:42:73:dd:
                    59:33:60:f3:84:d6:53:40:c4:84:38:33:ce:5c:29:
                    52:75:31:63:88:64:3e:ed:6c:bd:9e:24:a2:3a:fa:
                    a1:c4:82:e8:57:a8:55:9a:94:99:4d:a4:af:da:f7:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:DD:5D:76:E2:2D:9E:12:34:18:F2:7B:2D:3C:EA:59:E7:24:F5
            X509v3 Authority Key Identifier:
                keyid:BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a323030303a3a2f33362d3336203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2264:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:eb:5b:74:e7:50:2b:ab:ed:18:10:e7:2c:26:a8:08:df:
         c4:0a:66:2c:ba:06:16:e1:ef:36:7e:ab:57:b0:79:7b:df:44:
         b6:c7:c4:5e:1d:9a:4d:93:46:2b:3c:a9:ec:e3:08:89:2b:5c:
         3b:f0:06:d1:fa:a1:7a:69:e9:21:af:1f:6b:e3:88:1b:98:4f:
         e7:a7:8e:4e:ee:2d:d2:24:5f:e3:2c:01:61:34:76:49:f6:1a:
         cf:da:e0:ef:4c:33:10:2e:e7:55:af:49:e9:f4:7e:e6:a2:f1:
         54:17:83:5e:8e:0c:0b:62:05:a7:44:c0:66:e2:35:a9:87:b1:
         5f:26:10:93:77:b3:4c:19:5c:c7:df:e5:40:98:e2:fd:6b:33:
         cd:f8:7b:dd:22:e0:49:b6:cd:9a:46:e8:a1:b6:2e:44:35:62:
         fe:8b:f4:32:cb:b2:67:c4:73:3c:66:fe:1e:95:ff:ba:ca:21:
         a6:92:cc:99:2d:ab:e0:ec:0f:f5:2b:d5:e6:2f:ec:40:a8:15:
         6b:20:76:36:31:73:c2:0d:97:fd:46:f1:87:ec:d1:44:71:80:
         cb:1a:61:81:e0:29:a3:c8:48:ee:b9:43:a7:ec:1f:ed:02:55:
         90:52:b6:56:b8:53:14:b9:1d:61:8b:eb:9d:56:5c:46:73:68:
         88:8b:ee:83
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUfyGe3A42TcEKVw/OoGew4A7AO8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ5MDYzQURBREY3NDhFRUE1OEEyNDJGMTY2OEFGMzIy
NjU3QUJEMTAeFw0yMzA3MjgxOTU1MDBaFw0yNDA3MjYyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjAzN0U0Nzk2MzI5N0MwOTZD
MUQ4MEM3N0JCRjlBNUE4RUJGREJBOUVFMzY5ODk1MDlCREFCMDg3ODQ5RTc5N0VC
NzgxNjhENEQyQUIyMkFEOEU5M0MzNTY2NDkyOTI2OTU5NUI3NUY3RTIwNjYzQTVB
QTE1RkE1MjU3MzAwQUZBNkE1RkZBMUExMEI3MTAzQTMxRTQyQkM0RDFCNzQ5Qjk3
QUI2QzQ2NzRGMDlCNkY1NEM1NDI2RjcwNjVDNjU5NENDNEZBNjQ3RjdBQjRCN0Iz
REVBNDdGN0E2NTkyRDYwOUU4RjVCNURGQTNDQ0I3MDU2Q0QxQUY0RTM2ODcwREU0
QzYzMUJDQ0Q2REQzQTlFNzQzOTIxOTc2NUJBRTM1M0ZCNDMxNUY2Q0NEQTBBQUVB
MDQ2Rjg2NkY2RDVCQjJGNjNGQzRCRkE1QjRFNzlGNUNDREE1MTU3NUQ2RTg3RDlF
RTU3Q0NFMkRFQTYwMTZFNTQ0QkYyMDJENEIwM0MyODQ1MkE3RTkxQjNGM0E3MTM5
MzU3NEMwQkZFNDQyNzNERDU5MzM2MEYzODRENjUzNDBDNDg0MzgzM0NFNUMyOTUy
NzUzMTYzODg2NDNFRUQ2Q0JEOUUyNEEyM0FGQUExQzQ4MkU4NTdBODU1OUE5NDk5
NERBNEFGREFGN0JBMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsDfkeWMpfAlsHYDHe7+aWo6/26nuNpiVCb2rCHhJ55freBaNTSqy
KtjpPDVmSSkmlZW3X34gZjpaoV+lJXMAr6al/6GhC3EDox5CvE0bdJuXq2xGdPCb
b1TFQm9wZcZZTMT6ZH96tLez3qR/emWS1gno9bXfo8y3BWzRr042hw3kxjG8zW3T
qedDkhl2W641P7QxX2zNoKrqBG+Gb21bsvY/xL+ltOefXM2lFXXW6H2e5XzOLepg
FuVEvyAtSwPChFKn6Rs/OnE5NXTAv+RCc91ZM2DzhNZTQMSEODPOXClSdTFjiGQ+
7Wy9niSiOvqhxILoV6hVmpSZTaSv2ve6OQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FC473V124i2eEjQY8nstPOpZ5yT1MB8GA1UdIwQYMBaAFL2QY62t90jupYokLxZo
rzImV6vRMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FMOTJYYWVUUWRnbjdw
WlRrWUJFaHVSQUU0TFE1WGFlVWlWelZkSmR6R3B0LzAvQkQ5MDYzQURBREY3NDhF
RUE1OEEyNDJGMTY2OEFGMzIyNjU3QUJEMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CRDkwNjNBREFERjc0OEVFQTU4QTI0MkYxNjY4QUYzMjI2NTdB
QkQxLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BTDkyWGFlVFFkZ243cFpUa1lC
RWh1UkFFNExRNVhhZVVpVnpWZEpkekdwdC8wLzMyMzgzMDM0M2EzMjMyMzYzNDNh
MzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzQzMDM5MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBCJkIDANBgkqhkiG9w0BAQsFAAOCAQEAb+vrW3TnUCur7RgQ5ywm
qAjfxApmLLoGFuHvNn6rV7B5e99EtsfEXh2aTZNGKzyp7OMIiStcO/AG0fqhemnp
Ia8fa+OIG5hP56eOTu4t0iRf4ywBYTR2SfYaz9rg70wzEC7nVa9J6fR+5qLxVBeD
Xo4MC2IFp0TAZuI1qYexXyYQk3ezTBlcx9/lQJji/Wszzfh73SLgSbbNmkboobYu
RDVi/ov0MsuyZ8RzPGb+HpX/usohppLMmS2r4OwP9SvV5i/sQKgVayB2NjFzwg2X
/Ubxh+zRRHGAyxphgeApo8hI7rlDp+wf7QJVkFK2VrhTFLkdYYvrnVZcRnNoiIvu
gw==
-----END CERTIFICATE-----