Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a333030303a3a2f33362d3336203d3e20323632333136.roa
File:                     323830343a3763303a333030303a3a2f33362d3336203d3e20323632333136.roa (raw, json)
Hash identifier:          aWtVHG7r9tTQLSYlIZb+ZhP7MK0F8K+waDM2iPRBsdM=
Subject key identifier:   89:D0:5F:B8:3D:F3:41:D6:D3:28:46:10:C7:3F:7C:7A:D2:FE:6C:85
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       672DEE93A5D3C84B1334A77123FA708016D9A157
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a333030303a3a2f33362d3336203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:37 +0000
ROA not before:           Mon 21 Aug 2023 13:21:37 +0000
ROA not after:            Mon 19 Aug 2024 13:26:37 +0000
asID:                     262316
IP address blocks:        2804:7c0:3000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2d:ee:93:a5:d3:c8:4b:13:34:a7:71:23:fa:70:80:16:d9:a1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:37 2023 GMT
            Not After : Aug 19 13:26:37 2024 GMT
        Subject: CN=89D05FB83DF341D6D3284610C73F7C7AD2FE6C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:e9:cc:a7:0b:7f:b8:48:cf:4d:6c:40:c7:
                    71:3e:d8:cf:c6:3a:74:00:ae:a0:7c:78:d7:c6:77:
                    7a:50:98:18:9d:f4:31:4e:12:97:6c:43:8a:a9:f4:
                    c2:03:b5:d0:fd:7d:85:da:67:ad:d5:20:ef:70:a4:
                    e9:a4:d1:5c:cf:b2:44:45:2f:69:6c:2a:b5:17:88:
                    b4:5b:23:46:85:3f:57:52:f3:59:0c:f1:52:07:9d:
                    2c:a1:04:c4:96:a3:4d:f4:7e:e6:7c:9e:b0:92:84:
                    1a:e2:50:00:ed:a5:34:50:47:17:38:9a:db:aa:35:
                    e4:ff:7c:3b:2a:d1:83:1e:8d:7b:f5:a7:33:07:29:
                    bf:0a:e3:50:74:8a:7f:d3:9d:6f:14:a9:93:8a:b7:
                    56:e3:80:88:ed:7c:cb:fe:df:fc:da:9e:45:48:56:
                    3d:f1:69:35:94:4e:70:39:1c:46:c2:a8:8b:02:ee:
                    0b:f7:47:36:3e:6f:92:a7:a7:b1:f3:b0:d8:e0:1b:
                    cc:d9:36:07:72:b7:67:c8:8b:78:fa:15:10:39:26:
                    af:f5:c1:82:3b:99:c5:35:50:9e:a1:8c:05:61:15:
                    c3:bf:be:bb:ea:ba:92:6e:da:91:8d:09:a3:2d:19:
                    96:3e:c8:d0:f4:1d:e5:e3:5a:0b:de:2b:78:42:85:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D0:5F:B8:3D:F3:41:D6:D3:28:46:10:C7:3F:7C:7A:D2:FE:6C:85
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a333030303a3a2f33362d3336203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cc:7a:13:40:8d:15:cf:c8:96:a7:75:95:b9:f3:ed:5d:56:16:
         2e:42:cb:69:1f:9e:c7:4b:8a:5a:97:99:e8:35:00:ef:4c:d6:
         39:47:06:e0:ed:98:08:c9:55:3e:f6:7b:35:d7:b0:ea:81:ad:
         3d:e6:21:82:2f:52:07:db:87:d1:7e:9d:76:5e:89:cd:6b:6b:
         50:d8:97:ab:54:b9:88:0a:4c:31:87:bb:fd:64:d3:ab:d1:d7:
         2d:51:d7:63:e6:23:56:e4:cf:83:3d:f9:0a:db:73:b1:8e:ad:
         8e:ad:c0:75:54:43:cf:0a:d8:28:72:76:3c:41:34:64:02:63:
         33:3e:6c:cf:78:78:af:a3:ff:7b:39:bf:ca:10:51:bb:db:41:
         aa:d1:44:77:40:ab:05:58:d0:19:91:73:ab:97:e5:79:66:ce:
         a0:78:29:24:6c:74:75:dc:40:cb:e6:e0:f8:27:2c:fd:8d:60:
         3e:c7:ef:0f:d9:fe:ac:7b:98:ea:17:5e:8e:59:a7:b9:58:12:
         a7:90:ee:f8:ef:b0:ae:75:3d:61:e4:f9:e0:47:5b:d3:69:e7:
         6f:58:ed:51:41:30:ed:8c:71:07:53:6d:92:4c:0e:eb:90:c3:
         1d:ee:4b:19:40:4b:a8:e8:47:76:7b:22:85:e7:80:93:dd:10:
         1c:4c:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:40 2023 by rpki-client on console-fra.rpki-client.org