Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233332e302f32342d3234203d3e203631363936.roa
File:                     3133382e33362e3233332e302f32342d3234203d3e203631363936.roa (raw, json)
Hash identifier:          KD4tsIE9d7YT+5+AmTulLQX2vU4s31rrr83S5xN57KY=
Subject key identifier:   B9:C6:35:4F:C6:FB:09:BC:1C:C1:34:EF:D4:33:5E:44:27:38:64:5E
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       6F4AD3AD0C1CC287B0DF14D86730A93B7DF5C4FB
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233332e302f32342d3234203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:15 +0000
ROA not before:           Fri 06 Oct 2023 19:42:15 +0000
ROA not after:            Fri 04 Oct 2024 19:47:15 +0000
asID:                     61696
IP address blocks:        138.36.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:d3:ad:0c:1c:c2:87:b0:df:14:d8:67:30:a9:3b:7d:f5:c4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:15 2023 GMT
            Not After : Oct  4 19:47:15 2024 GMT
        Subject: CN=B9C6354FC6FB09BC1CC134EFD4335E442738645E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0c:a6:0e:53:3b:88:d1:ce:7b:dd:af:cb:06:
                    4e:f7:41:b8:d2:f9:dd:ad:0f:e3:78:e9:76:ed:fe:
                    22:bb:28:39:bc:73:db:27:9e:bf:7a:11:20:e7:56:
                    ad:3a:af:2b:6b:47:79:5a:5b:2f:6a:71:59:8b:39:
                    90:ff:48:57:4d:4e:36:45:65:93:92:c6:a0:db:ae:
                    7e:fb:91:02:1b:06:7d:eb:10:07:cd:94:0c:7b:3e:
                    3e:0c:5b:bc:0c:d7:a4:5a:c3:dd:e9:1a:b3:b9:d8:
                    78:aa:a5:71:0f:4a:77:07:1c:9f:75:31:3f:ed:a1:
                    fd:57:a1:eb:14:ef:0f:6e:b5:f1:b6:15:cb:7e:a0:
                    a1:ba:a2:0b:82:11:fe:6d:35:31:59:36:46:bd:0a:
                    ab:f1:51:cf:df:72:4e:1d:01:94:32:2d:49:d5:62:
                    00:d5:a6:ce:76:2e:f1:3c:c9:84:ed:84:f6:ba:1f:
                    16:bc:32:09:38:20:4f:b8:6b:d5:47:85:49:a8:fb:
                    e7:fc:c2:89:11:b1:d5:c8:96:4e:7e:c8:d8:eb:f3:
                    e5:64:79:ae:66:2b:5a:01:a7:86:37:45:9a:46:d0:
                    fd:78:b7:8e:3e:1b:c5:86:2f:62:8f:47:fa:80:2e:
                    2b:95:91:a7:5d:0a:7d:4a:b2:9e:16:0a:ee:4e:92:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C6:35:4F:C6:FB:09:BC:1C:C1:34:EF:D4:33:5E:44:27:38:64:5E
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233332e302f32342d3234203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:0e:37:0d:02:7c:55:f5:43:55:f7:2e:fc:18:cc:5a:b6:
         0c:95:44:2e:10:6a:c7:ca:83:b2:b7:a6:03:86:c1:34:ad:bc:
         5e:c9:f9:89:fd:88:b3:40:b5:c4:6f:1b:45:94:60:cf:c6:17:
         15:01:bd:68:b9:ee:f6:b7:06:9a:60:bd:bf:7f:29:82:d5:f4:
         af:2c:f9:e4:d0:41:9f:b2:d1:de:01:ba:a5:67:2d:a6:6f:73:
         14:e2:d3:6a:6c:45:cb:99:51:c0:17:4e:7b:cd:ac:2c:ec:48:
         e9:d6:03:b4:fa:33:89:ae:21:31:09:eb:c9:32:2c:a0:ab:52:
         6f:ba:5e:87:68:3c:8a:80:29:13:a4:2e:3e:68:2d:c2:8d:f3:
         39:9c:f4:89:7c:14:c2:99:b3:8c:f9:fd:2c:dd:5c:ce:e5:57:
         fa:43:c3:5f:44:8e:9f:f2:19:e4:ca:c6:33:f2:de:c0:a8:cc:
         40:45:69:2f:d0:6f:d3:2a:9c:96:62:cb:e7:10:51:37:1b:c9:
         df:2d:44:18:ac:ff:25:6a:7e:e8:ba:8b:0d:65:0d:e2:eb:ff:
         22:ab:c9:35:48:07:a2:98:6c:94:d2:af:fb:9d:bf:2e:8c:0f:
         8a:b2:22:c7:4f:77:fa:06:c1:06:81:72:08:58:ad:e9:ce:ff:
         62:c4:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 21:13:27 2023 by rpki-client on console-ams.rpki-client.org