Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3133302e302f32332d3233203d3e20323633393134.roa
File:                     3133382e3138352e3133302e302f32332d3233203d3e20323633393134.roa (raw, json)
Hash identifier:          L2QaKBfJmXGU83wkZHA4NaX+2CZ1aRxXeSKR0Q3+Xoo=
Subject key identifier:   0B:19:70:72:9A:FD:52:75:1C:BE:E8:B1:96:B7:FC:D7:3B:65:0D:3A
Certificate issuer:       /CN=7D024D482794E0E96397A274EC4071AD93013B55
Certificate serial:       710F4610BC0C7BBF11B72E459B1AD116AA8ADD73
Authority key identifier: 7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3133302e302f32332d3233203d3e20323633393134.roa
Signing time:             Mon 15 May 2023 20:56:49 +0000
ROA not before:           Mon 15 May 2023 20:51:49 +0000
ROA not after:            Mon 13 May 2024 20:56:49 +0000
asID:                     263914
IP address blocks:        138.185.130.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0f:46:10:bc:0c:7b:bf:11:b7:2e:45:9b:1a:d1:16:aa:8a:dd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D024D482794E0E96397A274EC4071AD93013B55
        Validity
            Not Before: May 15 20:51:49 2023 GMT
            Not After : May 13 20:56:49 2024 GMT
        Subject: CN=0B1970729AFD52751CBEE8B196B7FCD73B650D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:f7:76:28:ae:85:f1:b1:af:7a:30:a1:96:
                    88:2d:ca:e5:d0:b6:de:09:34:34:00:b2:93:8f:18:
                    0d:79:04:8e:1f:93:4f:72:bd:54:6f:13:a5:c3:95:
                    56:e5:1d:c3:0e:1e:e0:d8:24:0a:c9:46:3e:f4:ad:
                    93:2f:4c:c4:d8:74:29:59:61:40:f4:85:be:7f:84:
                    b2:47:9a:7a:00:38:00:df:a0:64:8f:5f:51:4e:96:
                    76:f7:0a:12:d2:fe:96:4e:bd:08:ea:08:a4:a8:38:
                    42:78:e7:cd:bd:77:f5:ec:cd:3b:64:51:e7:6e:44:
                    83:48:6e:67:42:3f:cf:2c:24:c6:b4:14:ed:b6:f5:
                    a5:48:a0:74:06:7e:9e:e4:2a:72:1f:49:05:3e:bc:
                    5d:be:d2:67:46:1f:49:45:d1:48:f9:33:3e:61:f6:
                    5d:d2:6d:38:be:8b:6d:1f:83:ad:ed:15:c8:e2:70:
                    03:22:8e:83:1c:8f:b2:a7:f0:8c:6a:ac:c0:f8:b8:
                    71:00:f3:a5:fc:0a:74:36:9b:46:f9:32:07:4d:0f:
                    76:76:88:c5:ac:9c:ab:32:f7:23:39:20:df:9c:6d:
                    fa:3a:e1:b0:a8:26:28:3a:16:35:bc:7b:28:a1:49:
                    25:f1:f9:c4:6c:04:62:91:81:b3:3b:ee:81:a3:bb:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:70:72:9A:FD:52:75:1C:BE:E8:B1:96:B7:FC:D7:3B:65:0D:3A
            X509v3 Authority Key Identifier:
                keyid:7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3133302e302f32332d3233203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:d5:30:56:13:86:70:b6:84:f4:89:2a:f3:6c:d7:7c:e2:
         30:f6:45:52:0d:83:3a:bd:19:2e:43:5b:15:44:a6:ff:15:ec:
         05:a9:ab:c8:f3:b3:ce:c2:11:65:1a:67:8a:d7:9a:fc:9c:be:
         30:4e:ad:95:e7:e3:8f:0e:fd:ed:c0:10:4e:59:e9:b8:74:8c:
         d1:ac:fc:46:c5:71:57:7c:b6:5c:73:a6:08:24:cb:8c:3b:03:
         e8:07:0f:6a:a4:80:2a:42:f9:91:ba:7d:9a:fb:35:71:62:b9:
         91:12:60:ac:8c:11:81:2c:94:ed:9d:86:6a:4b:ba:a9:6c:9d:
         51:e4:32:21:2f:db:d7:18:e7:3c:08:8d:e3:c1:cc:dc:c1:bf:
         bc:80:fc:21:ba:d3:29:58:fe:0b:18:a0:9e:ad:da:3e:47:b3:
         43:0a:7f:6e:eb:ad:15:81:2c:82:09:ae:ff:b6:58:bc:47:e8:
         cf:f5:ed:59:7b:6f:3f:ff:9e:6c:a4:d9:ea:c8:c9:32:88:54:
         9a:4f:40:67:61:9d:14:80:5f:a7:d2:67:e9:d6:32:f9:77:e8:
         53:cf:b8:b0:1e:a1:dd:15:27:f1:46:8b:2e:f1:3e:8d:56:d9:
         d4:7c:d6:85:31:a2:f1:24:26:81:4e:45:c5:3f:9c:07:4f:2e:
         54:d9:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----