Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa
File:                     3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa (raw, json)
Hash identifier:          85Re0tNpN/JreooNz/L0R/wEHCJ9ABDgUo5+JE5LgN4=
Subject key identifier:   7D:BD:FE:09:64:68:FA:B2:04:29:D2:1B:AA:2C:88:A7:40:49:5D:A2
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       5D7CFEC1466FD96A46B97CF7EB631F5B50E5F136
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa
Signing time:             Wed 08 Mar 2023 12:54:29 +0000
ROA not before:           Wed 08 Mar 2023 12:49:29 +0000
ROA not after:            Wed 06 Mar 2024 12:54:29 +0000
asID:                     262459
IP address blocks:        186.208.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7c:fe:c1:46:6f:d9:6a:46:b9:7c:f7:eb:63:1f:5b:50:e5:f1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Mar  8 12:49:29 2023 GMT
            Not After : Mar  6 12:54:29 2024 GMT
        Subject: CN=7DBDFE096468FAB20429D21BAA2C88A740495DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:b8:fa:8b:39:7c:7c:d9:f5:85:d2:e3:96:
                    bd:ff:97:94:35:1b:b8:ee:99:04:4a:6b:ef:7d:08:
                    1f:42:02:e5:7f:78:48:33:50:4c:11:67:c7:70:03:
                    6b:f7:79:4e:26:08:01:06:7e:88:42:1a:52:2c:84:
                    a0:ad:bc:af:2a:2b:8e:9b:47:ba:41:bc:3f:a3:1c:
                    d0:32:f0:b0:ee:8c:d9:86:17:13:1f:bd:87:90:65:
                    82:eb:f0:c0:e6:b4:bd:4d:90:b1:dd:67:56:6a:9c:
                    cf:44:b7:0b:f8:f8:53:65:a9:b3:6c:fc:b4:44:27:
                    e3:3e:29:c5:7b:7e:7d:41:0d:c9:d5:c3:1b:eb:3f:
                    01:0f:40:2b:1c:c3:90:1b:8f:fd:8c:45:57:11:c4:
                    7a:ac:88:1a:14:6c:4d:d5:f2:6f:36:4e:f3:ac:52:
                    96:18:38:50:de:d9:16:ae:d0:7c:15:cb:15:b9:43:
                    84:9e:70:15:03:47:17:e4:86:dc:8a:0a:98:b6:6f:
                    b8:45:9e:14:e9:1f:d8:58:87:2d:fb:32:c2:cb:ca:
                    41:b8:d3:e3:8e:a1:05:8f:bf:d1:0a:6d:e3:94:b1:
                    07:e5:36:05:81:d3:98:4b:ea:1d:13:2b:ff:2e:80:
                    84:40:cf:1b:4b:cc:9b:ac:38:e9:27:82:c5:8a:fa:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:FE:09:64:68:FA:B2:04:29:D2:1B:AA:2C:88:A7:40:49:5D:A2
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:98:53:0f:65:30:ee:38:57:c7:de:16:e8:1e:a2:d5:04:
         ce:2d:4a:eb:4c:42:57:52:d6:24:44:df:85:83:c2:dc:2c:01:
         40:b7:24:4a:b2:85:48:56:6a:8b:d0:ff:2f:0f:11:7e:4e:d9:
         c3:51:48:95:10:15:43:7f:bf:dc:67:ca:a9:87:62:93:2d:04:
         8d:22:1c:54:27:77:2a:4b:a0:63:56:91:1c:34:c8:6b:ae:67:
         b4:f8:ba:5e:36:20:12:f6:ff:c4:a6:42:cb:ba:ee:e6:66:1f:
         86:13:16:5f:e4:78:31:6a:7c:fa:48:2a:61:7b:d3:29:8a:dd:
         9d:6c:0c:9b:79:d4:e2:7e:64:05:c0:09:c2:91:e4:6b:6a:34:
         14:33:50:76:19:f9:84:63:55:c1:19:ee:02:58:02:6d:0f:cf:
         61:5e:30:23:42:9c:f5:0d:64:dc:7b:06:44:b6:8c:7b:f2:f7:
         df:35:6b:0e:a0:13:cf:8b:f6:a4:ab:02:82:94:60:cf:e7:5c:
         cd:bb:73:f4:8e:f0:ea:e0:17:ed:d3:26:ec:0f:ea:db:5b:87:
         6d:45:86:5e:22:18:ea:04:c7:f7:26:08:05:b2:30:83:75:b1:
         f3:0c:b9:32:9f:b8:de:09:f0:c4:bb:cd:45:d6:df:ad:8e:d3:
         16:d5:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----