Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a666666663a3a2f34382d3438203d3e20323634353835.roa
File:                     323830343a323230303a666666663a3a2f34382d3438203d3e20323634353835.roa (raw, json)
Hash identifier:          bsD2pzS9czDMxlQcisnHSw63HwlzrrQ030qOh8yyWRM=
Subject key identifier:   9C:E2:C3:16:A9:89:6A:58:24:CA:41:51:DA:1F:92:99:86:E4:6F:45
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       34872F785584ACEAEF67B6D1BD6CF8F3D31C9DC8
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a666666663a3a2f34382d3438203d3e20323634353835.roa
Signing time:             Tue 22 Aug 2023 18:22:50 +0000
ROA not before:           Tue 22 Aug 2023 18:17:50 +0000
ROA not after:            Tue 20 Aug 2024 18:22:50 +0000
asID:                     264585
IP address blocks:        2804:2200:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:87:2f:78:55:84:ac:ea:ef:67:b6:d1:bd:6c:f8:f3:d3:1c:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Aug 22 18:17:50 2023 GMT
            Not After : Aug 20 18:22:50 2024 GMT
        Subject: CN=9CE2C316A9896A5824CA4151DA1F929986E46F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:0e:d8:32:c9:8f:e7:4f:8a:15:24:40:74:
                    6b:c9:7d:94:e2:c1:9f:38:40:64:a8:02:a4:e3:68:
                    8d:13:1d:6a:8a:79:9b:27:fc:e1:a1:dd:dc:b5:ba:
                    18:d0:2f:90:95:13:dc:e4:6a:66:1c:8e:4f:7b:fb:
                    a0:74:b3:d4:ae:c0:6d:59:b9:b3:4a:e6:0a:67:8c:
                    9c:1b:c9:48:33:23:2d:e3:76:4c:70:4b:40:e4:11:
                    5a:94:df:4c:d4:c1:57:41:89:27:a3:8b:5f:3e:b7:
                    8c:59:ba:24:b8:f2:c8:3d:02:5e:e0:3e:be:43:cb:
                    ce:70:79:d9:0c:e8:d6:9f:9f:47:47:a8:3d:94:c9:
                    1d:31:9a:0c:c1:c0:3f:7d:96:6f:16:58:6d:1b:87:
                    2c:91:ca:6e:a0:07:70:01:70:17:87:46:c0:2a:8a:
                    4d:08:d8:fa:56:c6:d8:a1:6d:35:87:57:bb:4f:26:
                    23:3e:96:94:f3:29:67:da:06:b0:06:de:0f:c9:37:
                    94:2e:d1:af:d7:9a:bb:c1:7b:a8:9f:f1:c5:3f:e8:
                    06:4e:ea:55:75:19:cc:81:14:14:0d:02:a6:4f:6f:
                    52:90:fa:5d:20:fc:20:38:e1:f9:40:a3:4e:e8:ba:
                    b2:99:69:03:2d:8b:3f:6a:00:f4:01:ab:fb:52:86:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:C3:16:A9:89:6A:58:24:CA:41:51:DA:1F:92:99:86:E4:6F:45
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/323830343a323230303a666666663a3a2f34382d3438203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2200:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:69:25:1c:e0:a4:04:04:3e:7f:de:4c:f6:68:e6:52:63:cc:
         88:cc:93:9a:f0:eb:44:d5:3d:27:0b:16:67:03:95:c6:36:ce:
         9c:64:24:fa:c4:69:82:e8:96:dc:a8:67:ef:f1:6d:28:7e:0b:
         44:28:03:21:7c:8d:4b:73:e6:09:c0:6f:20:09:c5:4f:13:ac:
         2a:9c:ed:1f:68:d4:77:a2:2e:67:bb:1a:40:34:2c:7d:50:e8:
         b3:19:8d:12:3b:48:cc:22:2b:1d:7a:09:0f:93:c6:17:f7:5c:
         9a:87:a4:ef:a0:2e:a5:e4:02:8b:f8:06:a5:8b:80:ce:ab:11:
         80:36:8a:f5:4f:bf:4c:42:fa:76:1c:bd:78:7d:34:8e:96:f1:
         d0:0a:b7:b3:a2:02:fb:45:76:ae:b5:07:7b:41:14:68:ef:e2:
         43:5b:f0:1c:44:0e:52:d5:e0:90:1f:e9:3f:d7:81:07:39:6d:
         aa:43:73:d4:a9:85:0e:c8:f6:24:b2:a0:92:9e:0c:3b:49:76:
         d6:cf:d2:22:14:8d:dc:6b:f7:27:51:13:49:aa:f9:0d:de:86:
         8a:93:7c:d1:50:88:d3:be:f2:84:38:bb:0f:31:8d:44:c3:56:
         11:1c:75:41:41:49:e0:62:94:a7:7a:7a:3e:1a:55:c6:71:e5:
         9f:be:bf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----