Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/323830343a313163383a3a2f33322d3336203d3e20323633343339.roa
File:                     323830343a313163383a3a2f33322d3336203d3e20323633343339.roa (raw, json)
Hash identifier:          80N8J+Okr0pOZaUjofN1iH1nhObovHKgXeQOpcZJcx0=
Subject key identifier:   CF:0F:12:53:A7:5C:7F:43:2C:CE:9E:52:65:85:91:83:4F:4C:6D:FA
Certificate issuer:       /CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
Certificate serial:       432DF549EFEC6B85A8271C65E0BD282E6D113519
Authority key identifier: FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/323830343a313163383a3a2f33322d3336203d3e20323633343339.roa
Signing time:             Wed 13 Sep 2023 18:58:10 +0000
ROA not before:           Wed 13 Sep 2023 18:53:10 +0000
ROA not after:            Wed 11 Sep 2024 18:58:10 +0000
asID:                     263439
IP address blocks:        2804:11c8::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2d:f5:49:ef:ec:6b:85:a8:27:1c:65:e0:bd:28:2e:6d:11:35:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
        Validity
            Not Before: Sep 13 18:53:10 2023 GMT
            Not After : Sep 11 18:58:10 2024 GMT
        Subject: CN=CF0F1253A75C7F432CCE9E52658591834F4C6DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:9e:e5:60:d5:c7:17:fa:f3:5b:46:27:32:
                    ca:b4:eb:92:50:cc:86:7e:9c:c1:ed:1f:1e:c6:69:
                    08:b6:ef:b4:9e:56:7e:f3:de:87:f6:9d:95:c6:55:
                    32:f3:49:6c:9b:cf:31:00:a2:72:70:f3:6e:f7:0e:
                    bc:a1:dc:8c:b8:72:17:d2:60:9e:df:4d:49:02:88:
                    82:3c:6d:e1:0b:1a:43:4b:cf:66:ec:6b:2c:d6:6d:
                    92:de:3c:a4:34:3f:f6:c7:fb:db:17:3e:26:62:dc:
                    7f:85:07:bb:1c:9a:8b:e0:bb:e0:81:11:1b:20:52:
                    18:97:8b:dd:18:44:8c:41:49:83:04:af:be:9d:45:
                    7d:00:e3:26:fa:0e:26:4a:1a:b4:01:a6:31:f3:ec:
                    0d:96:bb:cb:5a:bf:17:c6:ec:89:01:53:4a:a3:79:
                    70:92:96:f1:5d:fa:c2:14:40:4d:dc:30:6a:0e:ce:
                    eb:ad:c9:94:e9:ac:a1:4d:84:11:5d:bb:b9:4d:84:
                    a9:ec:47:7b:7c:a8:57:07:98:f5:a1:94:6d:86:d2:
                    8a:db:9e:51:a3:5d:d9:74:af:ee:40:fb:d8:3a:f9:
                    58:97:88:07:56:40:c0:9a:c3:c7:3e:70:45:22:0a:
                    9f:b7:1b:7f:38:e4:d5:d3:93:d5:df:50:8a:51:5d:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:12:53:A7:5C:7F:43:2C:CE:9E:52:65:85:91:83:4F:4C:6D:FA
            X509v3 Authority Key Identifier:
                keyid:FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/323830343a313163383a3a2f33322d3336203d3e20323633343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:11:b6:ae:22:b6:0e:90:e3:ee:fb:84:63:14:7c:20:d7:84:
         66:88:f0:9e:3f:7f:11:04:1a:6d:1f:ea:f3:a2:be:4f:cf:d6:
         53:ee:7e:85:09:78:46:14:89:fb:89:80:3b:ca:cb:b5:4c:97:
         d6:9f:8e:e8:dc:9f:63:d6:91:c4:d4:00:da:3d:35:ce:e1:fb:
         20:c4:14:bb:04:8c:86:e8:b1:3c:0e:35:ca:11:8f:e8:85:75:
         da:89:77:99:b3:0b:68:a4:78:5a:de:10:0d:79:fe:1f:1c:11:
         45:e7:63:96:cb:ae:2b:5b:8e:ae:ab:04:59:28:4d:31:d6:a1:
         90:ac:fd:80:86:02:6e:a9:26:76:46:99:18:7a:86:f7:fd:0f:
         e8:c0:20:db:3d:e6:c0:80:3e:e9:63:37:ce:f2:72:c8:b4:4f:
         e8:af:53:b8:b0:c6:e9:60:a4:e1:e9:2b:43:2c:f2:50:bd:56:
         4e:ea:7b:58:8e:f0:de:4b:86:fe:2c:5f:2b:7e:11:a9:59:7e:
         38:1a:72:b0:90:bf:56:83:f5:51:a9:87:fd:10:e5:18:d7:41:
         ba:b0:b9:58:b0:cf:8a:68:d0:a5:85:fc:17:fd:f7:66:2c:75:
         91:a1:d4:16:ab:5a:22:cb:2d:5e:f9:ac:03:23:65:e9:46:98:
         53:6c:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 17:55:01 2023 by rpki-client on console-fra.rpki-client.org