Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a613030303a3a2f33362d3336203d3e20323636303230.roa
File:                     323830343a333933633a613030303a3a2f33362d3336203d3e20323636303230.roa (raw, json)
Hash identifier:          64XAV4gn4yRJEzQALrZ4SmdhFLjB5/R2PUWxQj1mCvs=
Subject key identifier:   3A:76:F1:F6:CC:F5:CA:20:46:0E:C4:D3:8B:04:A8:04:DE:38:F8:84
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       2209B7795B69DCE04324AA837119A1144444AEDB
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a613030303a3a2f33362d3336203d3e20323636303230.roa
Signing time:             Sat 20 May 2023 11:09:39 +0000
ROA not before:           Sat 20 May 2023 11:04:39 +0000
ROA not after:            Mon 20 May 2024 11:09:39 +0000
asID:                     266020
IP address blocks:        2804:393c:a000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:09:b7:79:5b:69:dc:e0:43:24:aa:83:71:19:a1:14:44:44:ae:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: May 20 11:04:39 2023 GMT
            Not After : May 20 11:09:39 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:cf:77:d4:fd:05:09:3c:96:0e:67:10:c9:
                    d7:71:7d:38:dd:74:af:a8:70:00:f5:52:ca:4c:88:
                    f9:d0:88:bb:a0:53:f7:15:a5:55:8f:64:92:93:7b:
                    34:f6:c2:09:04:3a:b9:2e:9d:4e:d0:7b:1f:10:61:
                    da:e1:17:49:b1:74:aa:c9:e8:19:4a:4b:d4:8f:b1:
                    25:c9:75:c9:68:a1:80:d3:38:1a:59:ac:9c:84:74:
                    81:a3:2b:1e:05:3a:18:3f:3f:2e:ef:b0:b6:d6:07:
                    a1:94:00:d2:85:4a:1f:75:78:be:01:2d:ac:41:57:
                    1a:c7:d8:cd:ef:de:4c:49:92:d3:f9:07:ed:fc:fb:
                    a1:07:70:e3:12:33:82:64:cb:a6:fe:a5:69:7b:33:
                    e7:6c:48:92:36:bd:a8:05:41:1a:f2:f1:1a:56:ed:
                    00:08:48:4d:a1:66:ed:ea:df:94:99:da:76:f3:cc:
                    0a:7a:6b:1d:47:8b:ba:88:49:84:f2:31:cb:41:5f:
                    ef:4f:9d:43:7f:24:e9:6a:de:7e:58:5e:41:f7:6a:
                    b8:7b:4c:95:37:1a:88:96:15:e4:f3:bc:a7:18:f0:
                    a5:67:47:f7:9c:45:b4:13:86:80:15:40:19:42:4d:
                    6d:f3:ff:f3:18:53:31:01:e2:d7:ca:90:cf:f6:97:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:76:F1:F6:CC:F5:CA:20:46:0E:C4:D3:8B:04:A8:04:DE:38:F8:84
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a613030303a3a2f33362d3336203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:e5:cc:80:0b:af:0e:f6:72:b2:fc:0a:fb:86:09:a2:06:7f:
         44:f0:1a:8c:72:3b:20:5f:e2:66:32:67:66:15:f8:10:df:6d:
         a7:78:21:86:70:5b:f3:33:78:63:8b:32:71:a6:f7:14:da:eb:
         a6:63:34:c9:8c:1f:67:b5:36:88:37:a6:b2:01:1d:f3:7b:96:
         89:cb:3c:6e:d4:60:af:3b:31:25:e0:d1:9e:a4:b4:08:bf:8d:
         d7:04:fe:15:3a:0f:3e:26:96:c0:aa:d2:9c:5c:28:c6:ea:bd:
         c2:79:84:ce:50:af:b6:05:bf:70:53:6a:ca:e2:b8:93:ed:a7:
         7c:fc:7e:44:fe:ab:1a:f4:45:77:f3:bb:f7:1d:b4:a4:e4:ed:
         82:8c:9f:80:74:06:bb:0a:5f:bf:cf:3c:6c:95:44:e8:02:9d:
         14:5f:8d:de:7f:30:7b:79:e5:df:b5:0c:54:26:7a:10:cf:d6:
         95:fc:15:9e:2a:7b:a2:fe:e2:ee:b2:2d:cc:14:1b:51:18:7c:
         0c:33:6d:c9:a6:1e:7a:07:2f:54:48:78:0b:5d:ae:06:31:80:
         77:b8:9d:93:cd:62:fb:35:10:ba:3e:66:18:a9:68:c0:0b:94:
         26:b1:8e:db:76:ce:14:62:81:5d:39:71:56:b2:f4:ec:00:f7:
         0c:dc:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----