Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3232203d3e203631363936.roa
File:                     3133382e33362e3233322e302f32322d3232203d3e203631363936.roa (raw, json)
Hash identifier:          S0dh3QZobX8fJtnu+ZgghAM1KixAQmZfgG19BARuWiM=
Subject key identifier:   CA:D5:33:90:5F:D9:8D:60:FB:46:0D:09:2F:12:4D:38:45:34:05:DD
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       0DA6A87744AEA99C0DF5639354709E0E619CCCEC
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3232203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:10 +0000
ROA not before:           Fri 06 Oct 2023 19:42:10 +0000
ROA not after:            Fri 04 Oct 2024 19:47:10 +0000
asID:                     61696
IP address blocks:        138.36.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a6:a8:77:44:ae:a9:9c:0d:f5:63:93:54:70:9e:0e:61:9c:cc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:10 2023 GMT
            Not After : Oct  4 19:47:10 2024 GMT
        Subject: CN=CAD533905FD98D60FB460D092F124D38453405DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:94:a2:30:89:ac:f8:cb:48:c4:c9:5a:78:
                    44:bf:9a:97:a8:5c:38:b6:4e:49:74:80:a3:e2:ff:
                    9f:a6:65:ac:ef:cc:03:34:0e:c8:e6:ca:82:62:38:
                    08:6d:58:5e:b0:4d:5f:e6:46:81:ca:ec:52:0b:0c:
                    b3:a1:8c:13:f3:34:7a:e0:93:86:73:f9:5e:d6:8f:
                    f7:47:48:10:df:b4:40:5c:43:2d:39:3e:d8:1f:fa:
                    61:f0:83:dd:31:b1:1c:06:82:93:bd:72:20:36:63:
                    cc:eb:a7:41:a4:39:ae:da:78:2c:f5:13:b0:a9:9d:
                    84:02:51:9c:9b:78:de:28:ff:ec:0e:ac:3d:66:d1:
                    6a:92:82:96:bb:df:f5:fd:a9:d7:91:22:a2:9f:6e:
                    9d:bc:54:b3:73:a5:01:75:0c:66:39:c4:ea:ae:a3:
                    c0:d6:e7:bc:a2:9c:38:a4:eb:0f:1e:f9:fc:96:ec:
                    5f:65:0a:b7:47:67:17:90:0c:4c:98:5a:ff:d7:86:
                    ee:59:de:8f:cf:41:6f:0f:5b:09:5e:4c:29:f9:82:
                    62:04:96:ed:b5:87:76:c7:b6:ff:45:85:ab:11:aa:
                    fa:8c:6d:5c:f5:9e:14:c9:4e:db:5e:04:f6:c5:49:
                    1d:57:3a:52:59:0a:33:38:63:7f:b5:2f:f5:42:0b:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:33:90:5F:D9:8D:60:FB:46:0D:09:2F:12:4D:38:45:34:05:DD
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32322d3232203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:2d:88:a9:58:2f:74:46:8b:3d:91:ca:3a:7c:65:ed:54:
         39:af:6c:9d:c3:3a:a3:b6:a7:9b:cb:5c:f1:63:57:93:40:fd:
         07:bb:6b:f2:e3:fa:cd:d1:bd:34:da:8f:af:b0:0b:62:ea:a6:
         f8:b7:42:3e:9a:15:3e:12:7b:6c:fb:db:d8:ff:a9:33:63:89:
         a3:a7:5d:fb:06:b0:2a:05:cc:53:77:17:40:92:76:3b:81:4e:
         f4:04:48:19:c0:11:9a:40:cd:a6:97:9f:2e:e1:d2:7b:7e:5a:
         d4:21:f1:ac:66:df:fc:a6:6e:c5:1c:1b:9e:e2:cd:80:60:79:
         b2:d9:27:95:9f:35:8f:2e:2d:be:3b:6e:f2:91:ce:8d:e1:47:
         8d:0e:aa:56:2f:1a:42:54:63:36:58:01:f9:8b:35:2d:eb:c8:
         38:09:c8:be:e4:78:bd:c2:5b:16:4a:f3:07:0d:0a:31:4f:58:
         23:bf:5d:59:3e:a9:f5:78:e6:9d:cd:41:a3:cf:d7:9d:3b:9e:
         6b:6c:9b:e9:55:9b:1d:0a:dd:56:c7:9e:23:e7:9a:4d:05:6a:
         fe:9d:18:98:ca:ef:75:3c:4f:47:d8:bf:e2:65:d4:6b:9f:6e:
         0d:be:5b:ed:0f:88:ee:d2:b4:99:37:fb:55:c7:0e:13:98:40:
         22:84:bb:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDaaod0SuqZwN9WOTVHCeDmGczOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDMDJFOUJBODIwRDJFNzA2NTI4QkM4NzNDODA0NDNE
MDJDRTY2NzAeFw0yMzEwMDYxOTQyMTBaFw0yNDEwMDQxOTQ3MTBaMDMxMTAvBgNV
BAMTKENBRDUzMzkwNUZEOThENjBGQjQ2MEQwOTJGMTI0RDM4NDUzNDA1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2ZSiMIms+MtIxMlaeES/mpeo
XDi2Tkl0gKPi/5+mZazvzAM0DsjmyoJiOAhtWF6wTV/mRoHK7FILDLOhjBPzNHrg
k4Zz+V7Wj/dHSBDftEBcQy05Ptgf+mHwg90xsRwGgpO9ciA2Y8zrp0GkOa7aeCz1
E7CpnYQCUZybeN4o/+wOrD1m0WqSgpa73/X9qdeRIqKfbp28VLNzpQF1DGY5xOqu
o8DW57yinDik6w8e+fyW7F9lCrdHZxeQDEyYWv/Xhu5Z3o/PQW8PWwleTCn5gmIE
lu21h3bHtv9FhasRqvqMbVz1nhTJTtteBPbFSR1XOlJZCjM4Y3+1L/VCC+CnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUytUzkF/ZjWD7Rg0JLxJNOEU0Bd0wHwYDVR0j
BBgwFoAUw8Aum6gg0ucGUovIc8gEQ9As5mcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX
c3gvMC9DM0MwMkU5QkE4MjBEMkU3MDY1MjhCQzg3M0M4MDQ0M0QwMkNFNjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzQzAyRTlCQTgyMEQyRTcw
NjUyOEJDODczQzgwNDQzRDAyQ0U2NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJYRWlSSk5VZVV3dmVjWGI2TWh6TURpTUpVb1lhZXI4N2ozcXljalRjV3N4LzAv
MzEzMzM4MmUzMzM2MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzYzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCiiToMA0GCSqGSIb3DQEBCwUAA4IBAQBMny2IqVgv
dEaLPZHKOnxl7VQ5r2ydwzqjtqeby1zxY1eTQP0Hu2vy4/rN0b002o+vsAti6qb4
t0I+mhU+Ents+9vY/6kzY4mjp137BrAqBcxTdxdAknY7gU70BEgZwBGaQM2ml58u
4dJ7flrUIfGsZt/8pm7FHBue4s2AYHmy2SeVnzWPLi2+O27ykc6N4UeNDqpWLxpC
VGM2WAH5izUt68g4Cci+5Hi9wlsWSvMHDQoxT1gjv11ZPqn1eOadzUGjz9edO55r
bJvpVZsdCt1Wx54j55pNBWr+nRiYyu91PE9H2L/iZdRrn24NvlvtD4ju0rSZN/tV
xw4TmEAihLuA
-----END CERTIFICATE-----
Generated at Fri Oct 6 21:07:32 2023 by rpki-client on console-fra.rpki-client.org