Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33342d3334203d3e20323636303636.roa
File:                     323830343a336130383a3a2f33342d3334203d3e20323636303636.roa (raw, json)
Hash identifier:          Kn6nd8Gsns8z8R23z1hiBLZLJnVOdtH7nf8Fcmda2fs=
Subject key identifier:   C9:AA:7D:7C:5A:1E:A5:C6:96:73:65:65:4A:68:20:A2:8D:9B:4C:14
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       3D8D9480514EED6D7E37475067DB03619A7239B9
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33342d3334203d3e20323636303636.roa
Signing time:             Sat 18 Nov 2023 00:21:04 +0000
ROA not before:           Sat 18 Nov 2023 00:16:04 +0000
ROA not after:            Sat 16 Nov 2024 00:21:04 +0000
asID:                     266066
IP address blocks:        2804:3a08::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8d:94:80:51:4e:ed:6d:7e:37:47:50:67:db:03:61:9a:72:39:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Nov 18 00:16:04 2023 GMT
            Not After : Nov 16 00:21:04 2024 GMT
        Subject: CN=C9AA7D7C5A1EA5C6967365654A6820A28D9B4C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:52:2f:8a:b1:05:5d:48:02:4b:db:1c:6e:
                    5f:58:db:72:f7:85:be:64:a8:9f:98:bb:e0:61:62:
                    fb:0f:80:e9:10:c4:92:86:a1:18:51:3b:be:48:a5:
                    5e:7e:88:a8:29:36:2b:99:1e:bd:de:14:70:0c:37:
                    20:be:39:ae:95:5a:08:c9:2e:1e:e1:8e:10:2a:e6:
                    f2:c3:56:82:3e:37:08:0a:db:bd:74:9c:2f:b3:27:
                    8b:c6:5d:e1:de:6d:e0:d4:ac:2e:b7:cf:98:08:d0:
                    a8:41:e6:b8:48:b8:bd:14:fb:4f:6c:b4:65:10:cb:
                    53:19:56:b6:bd:8d:a5:da:5e:b5:27:d5:67:d0:5e:
                    95:19:df:f2:0f:41:41:8a:26:33:e2:4f:08:45:bd:
                    12:db:82:43:58:4d:0f:2a:43:ea:26:df:6b:77:9a:
                    c4:28:51:1f:1d:98:df:63:3a:de:ec:cc:90:57:a5:
                    ba:5d:d9:42:9e:f6:d6:b7:0f:54:18:b2:62:4b:56:
                    0e:44:aa:29:45:06:43:bd:5f:b4:d8:27:38:7f:d8:
                    ac:f9:cb:66:f8:0d:3c:97:80:41:63:3f:73:37:3f:
                    bd:b0:ef:46:b4:2b:61:01:13:ae:6a:24:0d:94:06:
                    23:7e:fb:c0:fd:29:4b:0f:88:ef:2d:87:9e:0d:0c:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AA:7D:7C:5A:1E:A5:C6:96:73:65:65:4A:68:20:A2:8D:9B:4C:14
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33342d3334203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08::/34

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:64:a2:d1:c9:c8:24:7e:b9:7e:8d:c2:1f:3d:7b:14:62:
         a4:1d:a3:06:54:2a:6e:b7:78:8c:db:35:1b:06:3c:34:00:76:
         8e:1d:a5:ba:c5:25:5f:cb:c3:e1:be:3a:8d:4e:e5:ac:01:ac:
         85:c5:38:e3:ed:a2:14:05:84:a5:2a:b2:e8:b9:11:33:c0:77:
         af:f4:7d:a5:d1:cb:74:1f:99:cd:cf:cd:27:f6:71:45:50:ed:
         09:2b:06:2d:c6:4f:b1:30:39:54:55:89:67:cf:51:ac:b3:41:
         ea:64:c6:28:d6:44:b8:7d:89:65:4f:be:00:d7:41:0f:34:04:
         26:12:dc:c9:0a:ef:f8:af:04:70:48:71:f4:1c:d9:86:ff:23:
         ba:c1:a0:82:d5:b6:02:be:42:08:9b:4c:fa:b8:c9:6c:7c:eb:
         0b:ae:5d:7e:5d:50:95:be:0c:2d:45:70:47:43:bd:a4:34:46:
         94:b9:80:9d:1c:29:e8:3b:f3:0c:15:92:19:79:09:f1:aa:d3:
         0f:e8:66:7c:6b:46:b5:d2:c0:25:c8:48:36:69:66:63:89:47:
         3f:af:3b:c3:cd:32:72:49:97:7f:5f:6c:47:bb:fe:69:6f:4c:
         f4:04:6f:3c:37:aa:e1:15:b5:d3:0c:31:ea:db:1e:09:dc:d9:
         af:5d:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 02:19:30 2023 by rpki-client on console-fra.rpki-client.org