Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/3133382e39372e3230382e302f32322d3234203d3e20323634323031.roa
File:                     3133382e39372e3230382e302f32322d3234203d3e20323634323031.roa (raw, json)
Hash identifier:          OeN6PQ/lc+jjDq9QZtO9nx5B5ghuoQ1d+qnWLjCIhGY=
Subject key identifier:   88:B9:51:BA:5C:42:C1:41:E4:86:A7:FA:96:C0:D8:95:84:FA:85:07
Certificate issuer:       /CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
Certificate serial:       7049432BE66947C2F095D0951A5EA598E248A923
Authority key identifier: 6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/3133382e39372e3230382e302f32322d3234203d3e20323634323031.roa
Signing time:             Sat 15 Jul 2023 16:00:00 +0000
ROA not before:           Sat 15 Jul 2023 15:55:00 +0000
ROA not after:            Mon 15 Jul 2024 16:00:00 +0000
asID:                     264201
IP address blocks:        138.97.208.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:49:43:2b:e6:69:47:c2:f0:95:d0:95:1a:5e:a5:98:e2:48:a9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
        Validity
            Not Before: Jul 15 15:55:00 2023 GMT
            Not After : Jul 15 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2c:f5:78:f4:4d:08:27:04:3d:3c:28:94:fc:
                    29:75:3b:a2:66:7a:4f:d9:72:52:57:9c:6d:a8:8d:
                    ff:65:77:b0:db:bf:09:73:f6:73:45:9d:5a:89:06:
                    31:0e:46:d9:f7:a9:0f:70:e5:8d:5a:8b:09:aa:c2:
                    d2:a4:69:2a:12:77:d2:32:65:03:94:d2:27:da:2a:
                    6d:f4:63:42:ca:bf:fc:98:ed:26:5f:0b:8e:47:b6:
                    b8:72:b8:77:54:87:42:ea:6e:53:bf:45:75:04:57:
                    95:ed:be:47:70:5d:07:84:11:a1:42:e4:16:0b:9c:
                    6f:0b:84:9e:1d:4a:36:20:25:f3:b4:40:22:a5:b4:
                    cb:c7:8c:45:93:1d:2d:83:64:5d:51:b2:be:92:32:
                    11:f9:5b:42:4b:69:48:ec:90:24:f3:16:74:bf:f4:
                    7b:fe:e4:67:cd:db:76:9e:56:9d:98:d2:89:7f:20:
                    90:4b:52:d9:8f:ba:0f:b4:5e:a9:e4:c9:e7:5d:11:
                    73:ba:46:b1:77:a3:c0:e1:c7:b7:78:aa:71:e3:23:
                    75:c9:58:3f:b7:68:04:06:fc:0e:82:59:54:80:c6:
                    f8:47:3d:bb:b2:93:d1:78:18:0c:dd:9b:2f:07:62:
                    56:d6:e8:a9:39:7b:3f:fa:bd:a5:d5:a3:ab:f0:e6:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B9:51:BA:5C:42:C1:41:E4:86:A7:FA:96:C0:D8:95:84:FA:85:07
            X509v3 Authority Key Identifier:
                keyid:6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/3133382e39372e3230382e302f32322d3234203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:52:9c:45:2e:8b:b3:4d:26:e6:56:62:c2:eb:6f:02:d8:ed:
         8c:46:dd:43:48:bb:44:70:53:93:70:92:bc:37:a4:cb:59:18:
         61:74:ab:ce:27:0a:80:90:2e:bf:ed:c6:29:9f:cb:73:83:30:
         9b:38:64:99:d5:df:b8:22:41:0a:35:69:bf:89:a0:80:4a:8a:
         62:05:8d:7c:71:ac:07:82:08:01:09:97:8c:c3:38:da:a5:2a:
         e5:35:72:77:17:87:71:a2:e4:c1:d9:a6:f7:49:75:09:a7:e6:
         ed:8a:3d:b5:cc:e4:2b:ca:53:0a:1a:d2:2e:36:f2:da:68:71:
         7d:fb:05:04:d1:75:39:b3:37:db:6c:d0:28:10:b7:ef:0d:1d:
         da:d2:92:76:06:66:b7:da:08:ad:f2:80:63:19:73:65:57:fc:
         90:ed:d0:94:7d:b9:ed:dc:61:26:97:6c:84:47:71:f1:92:f0:
         6f:36:04:fc:8a:08:21:02:41:b5:94:91:93:af:be:78:62:39:
         11:13:d7:d4:36:9f:66:99:46:7d:12:dd:e6:72:79:82:5a:da:
         d9:3b:9a:89:e9:ef:c9:76:e5:89:b3:03:65:d8:2e:45:fa:50:
         a5:aa:ff:01:e1:1c:60:bb:d9:cf:c1:e1:2a:04:75:fb:1f:99:
         ac:bc:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 13:08:27 2023 by rpki-client on console-ams.rpki-client.org