Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa
File:                     323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa (raw, json)
Hash identifier:          J9Vi3BUxmnWPfdQlm3X3uNlh+hlHxSVjdKm3+Q+cVbg=
Subject key identifier:   ED:B6:ED:8A:B8:CD:57:FA:43:F9:FC:8F:9C:27:E5:A2:DC:A9:97:12
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       6821AA54363E6A7FBE7363970D874BB004101457
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa
Signing time:             Sat 18 Nov 2023 00:21:28 +0000
ROA not before:           Sat 18 Nov 2023 00:16:28 +0000
ROA not after:            Sat 16 Nov 2024 00:21:28 +0000
asID:                     266066
IP address blocks:        2804:3a08:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:21:aa:54:36:3e:6a:7f:be:73:63:97:0d:87:4b:b0:04:10:14:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Nov 18 00:16:28 2023 GMT
            Not After : Nov 16 00:21:28 2024 GMT
        Subject: CN=EDB6ED8AB8CD57FA43F9FC8F9C27E5A2DCA99712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:84:2d:0f:8b:b6:36:11:62:58:6d:52:73:
                    0a:07:bd:bd:bb:23:70:fc:15:e7:59:5c:e2:03:53:
                    62:5d:53:77:17:5d:9f:40:07:c0:f8:4e:60:20:2b:
                    65:7c:e0:36:61:dd:61:ac:d5:95:78:bd:b5:14:76:
                    f2:91:df:f4:cd:1a:26:6d:b5:96:75:bd:35:69:99:
                    af:9e:40:b5:76:04:f2:b7:91:0a:b8:ab:1e:96:c2:
                    8f:6e:04:55:24:dd:84:60:57:f2:0d:8a:96:6c:a9:
                    9b:32:a4:8a:9d:9c:57:26:c6:2f:61:51:bf:2a:52:
                    03:d7:f2:55:71:90:ca:fd:a6:ed:73:c2:0b:94:fe:
                    30:64:ec:ea:c8:5d:40:95:40:14:52:f4:ce:99:29:
                    a1:2e:92:09:e6:53:05:51:bf:56:56:c5:6a:40:c1:
                    59:f0:25:6e:b0:7e:8e:20:b1:95:0e:94:71:c9:0d:
                    ff:83:b3:51:27:ff:ed:6b:01:a1:b5:10:7b:aa:d2:
                    3f:37:ea:54:6f:5a:28:83:75:af:d3:14:9f:02:bb:
                    76:1a:bc:1a:81:ce:bb:f6:3a:6b:94:61:7d:64:18:
                    b5:6d:d1:43:a4:a8:43:22:2b:47:de:09:f1:fd:6d:
                    a2:41:5f:41:e1:f9:96:f2:41:15:85:9f:6e:62:04:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B6:ED:8A:B8:CD:57:FA:43:F9:FC:8F:9C:27:E5:A2:DC:A9:97:12
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a383030303a3a2f33342d3334203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:d4:e4:a4:bc:2b:83:66:a9:41:c2:56:35:3f:f7:91:96:2c:
         0f:64:16:64:43:75:8e:25:24:8c:11:43:4c:05:89:a8:23:c7:
         fe:76:00:65:9c:a4:91:48:1d:b0:17:7e:be:cc:65:76:01:70:
         9c:dc:b8:62:69:c8:3d:bb:ed:8e:e3:b2:35:ad:13:b0:38:59:
         67:cf:c5:9f:71:4a:dd:64:62:b6:0c:33:e4:77:d3:6b:0b:dc:
         f8:3e:06:a5:2d:11:f4:f6:79:9d:5c:b9:87:fd:fd:be:8f:2d:
         76:a0:ac:d9:eb:07:3d:c0:8b:ea:44:2e:22:61:9d:96:c2:1d:
         53:57:37:8a:ec:50:04:04:49:a8:ef:dd:f1:9c:ac:3e:b6:25:
         6d:d8:67:e9:35:35:4b:13:a9:62:9e:74:6d:5d:b4:a1:34:a2:
         99:5f:19:b5:09:04:30:b2:4e:4a:6a:b1:2c:13:05:f9:02:d8:
         46:b6:69:18:dd:29:93:5c:42:4c:74:81:93:bd:83:a6:3c:31:
         74:1f:c2:e1:fd:52:09:75:d9:9b:f0:36:b8:80:d9:c6:41:94:
         52:56:1f:e6:e8:f5:2e:04:f3:96:a2:5b:be:9c:e0:85:c8:13:
         4c:ce:07:54:73:b2:d3:4b:85:26:9d:fb:7b:64:97:32:a7:b6:
         93:dc:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----