Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa
File:                     3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa (raw, json)
Hash identifier:          wLR2CYtPkWPL4e0xxDarcS45taFA2sX90BMTzc19E10=
Subject key identifier:   66:98:74:F9:C4:B6:6A:3F:10:2A:AB:77:67:22:87:E6:FB:23:F9:5E
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       36F4B7823DDA84549A8BF17EECA8FBF98011337F
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa
Signing time:             Thu 13 Jul 2023 17:55:01 +0000
ROA not before:           Thu 13 Jul 2023 17:50:01 +0000
ROA not after:            Thu 11 Jul 2024 17:55:01 +0000
asID:                     264195
IP address blocks:        138.97.198.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f4:b7:82:3d:da:84:54:9a:8b:f1:7e:ec:a8:fb:f9:80:11:33:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 13 17:50:01 2023 GMT
            Not After : Jul 11 17:55:01 2024 GMT
        Subject: CN=669874F9C4B66A3F102AAB77672287E6FB23F95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:86:b3:f4:45:61:b2:31:e4:8f:0c:4f:82:
                    8f:83:3c:7c:d9:f0:c0:6f:ff:72:07:b0:7e:a2:3b:
                    70:27:8f:d7:b0:a1:8a:3a:00:99:05:bb:9e:06:8a:
                    9a:85:d2:6e:c8:d0:4a:6e:9a:1c:d1:c6:58:21:a0:
                    4d:cf:6e:67:82:ce:d1:fd:d5:fd:7b:0a:b5:e7:9e:
                    54:f7:63:82:4c:86:e4:2c:85:5c:0a:9b:93:6c:e6:
                    94:01:4a:4e:ab:54:65:07:cc:57:57:d0:df:fe:3d:
                    4d:f6:bf:eb:a2:78:33:2b:7c:5f:34:51:61:38:0a:
                    88:c3:c5:07:b3:d7:69:8f:47:73:56:19:a3:62:7e:
                    df:85:cc:bd:18:01:ae:2e:8d:19:be:ab:67:8b:77:
                    e2:41:74:ff:99:fe:81:4a:5f:31:f9:d8:bb:34:0c:
                    97:45:35:45:ef:94:85:19:5e:27:07:6c:77:29:5b:
                    2e:dc:e9:4f:42:66:18:3c:fe:71:aa:c3:79:70:57:
                    a1:32:57:71:de:18:a3:64:10:fc:98:36:57:af:ca:
                    c1:4c:75:97:42:c2:6f:bc:9b:0a:b3:0c:c5:d2:1c:
                    a7:46:3f:af:a0:8a:a9:da:aa:b3:86:ce:a5:cb:fe:
                    79:ae:94:83:1f:a5:f2:d8:6e:82:78:31:5a:d7:44:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:74:F9:C4:B6:6A:3F:10:2A:AB:77:67:22:87:E6:FB:23:F9:5E
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139382e302f32332d3233203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:18:22:a9:4d:76:d2:cb:d8:ca:ad:49:7a:7b:3e:c2:c3:a4:
         48:8b:d8:86:e5:ea:44:09:95:4a:b3:4c:9d:03:9c:4c:78:67:
         88:e7:3a:f1:a3:48:42:a9:1b:66:fa:1b:a9:e6:3d:59:3e:55:
         59:b3:46:e8:52:6a:e6:a9:7d:7c:93:f5:40:59:bd:88:af:b1:
         38:cc:49:cc:a8:ea:d1:ab:c6:cc:d0:87:ea:57:1b:90:98:b0:
         0a:66:a3:df:90:b7:b3:11:09:c9:13:62:87:36:d1:a3:9e:42:
         23:5f:5c:f2:b2:8c:87:e3:98:e8:9b:b9:b5:c4:c7:1b:3b:42:
         9e:62:99:79:cf:df:f6:69:8b:a1:39:06:d0:be:f3:7a:3e:e2:
         08:a8:af:44:7d:c8:f9:71:58:69:0f:b8:13:1e:a9:77:1b:6d:
         4b:e9:aa:37:c7:19:10:e2:e0:b4:0e:97:27:bf:a8:b7:7f:97:
         aa:46:89:4d:22:c7:81:05:ae:96:ae:d9:4b:f2:de:55:b9:7a:
         32:60:b6:d7:e3:f8:32:6d:c3:b4:be:cb:fa:6e:99:55:1e:12:
         58:48:04:22:b5:b7:d2:c9:81:07:33:ec:c7:03:98:4e:73:cd:
         ab:89:2b:37:24:1c:45:66:ae:ba:a6:b9:28:2a:c4:ed:ba:bf:
         d1:88:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----