Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333303a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3333303a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          rECCZFMqontkjW0OQmlSwJEtWTCj+QXo8A8kesC8TVE=
Subject key identifier:   67:40:CB:B6:16:09:68:F1:3E:FD:F6:D0:4F:BC:C4:DE:94:76:16:22
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       17EE9538410790C9EB600864F17FD4652831D2C5
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333303a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 22 Jul 2022 12:14:07 +0000
ROA not before:           Fri 22 Jul 2022 12:09:07 +0000
ROA not after:            Fri 21 Jul 2023 12:14:07 +0000
asID:                     262459
IP address blocks:        2804:4b0:330::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ee:95:38:41:07:90:c9:eb:60:08:64:f1:7f:d4:65:28:31:d2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jul 22 12:09:07 2022 GMT
            Not After : Jul 21 12:14:07 2023 GMT
        Subject: CN=6740CBB6160968F13EFDF6D04FBCC4DE94761622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:12:81:04:ba:6e:6e:3d:4f:64:87:35:be:
                    05:99:19:bc:e9:20:9c:20:e7:9b:01:b8:14:90:f5:
                    68:e1:5f:8d:7f:79:00:36:4f:f4:20:1d:ce:96:67:
                    63:fa:9b:ac:33:b7:7f:d3:6f:32:73:cb:31:a6:d0:
                    b1:81:f3:aa:d9:17:a0:71:88:ca:cd:af:df:7d:f7:
                    0b:e3:42:d6:1b:12:55:ab:40:40:9a:2d:9b:49:12:
                    59:af:7d:df:1c:af:d6:d2:b5:32:fe:27:55:75:ec:
                    29:dd:1d:a6:bf:34:49:09:1b:9f:92:1f:f8:66:1f:
                    dd:91:6d:ac:72:74:ac:a0:48:0d:1a:22:62:3d:d0:
                    09:d5:7b:a1:94:c5:57:c4:c6:b5:31:50:a9:ae:19:
                    bb:1c:9e:24:ec:d9:f6:38:6c:8e:44:73:54:44:10:
                    d5:c3:fb:7c:b7:58:8d:6a:77:f9:83:27:02:55:f3:
                    0a:0c:3d:4f:ba:76:6f:78:af:52:88:8d:0a:4b:ba:
                    91:e1:77:b2:10:a7:52:40:f0:6b:53:bd:c1:b0:8d:
                    6a:4a:8b:48:3e:9c:11:09:ca:24:9a:40:97:28:62:
                    74:7d:23:13:1b:db:41:bf:05:b4:1c:74:91:50:fa:
                    b1:23:0f:6b:59:44:f5:01:fc:ae:07:d8:20:7b:9a:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:40:CB:B6:16:09:68:F1:3E:FD:F6:D0:4F:BC:C4:DE:94:76:16:22
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333303a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:330::/46

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:9b:04:67:88:c6:4e:84:1a:a1:e5:54:3c:f3:42:cd:48:
         df:93:81:89:6b:39:24:cc:73:60:22:84:d7:f9:ee:f7:c8:07:
         6c:01:60:32:39:02:d9:cc:8e:68:e0:33:00:86:08:e1:5f:5f:
         9a:e1:9a:8e:88:d1:22:c0:7d:51:94:b0:aa:bb:41:38:0a:41:
         09:c1:d5:7c:f2:c7:48:a6:28:a5:6e:fa:4d:39:a5:64:95:e6:
         ee:e8:d2:4d:48:33:f6:77:77:b9:d4:82:4d:4b:53:80:79:1d:
         1e:ed:d2:3a:c9:77:ed:e1:e8:d7:3a:2c:60:c0:c9:1c:a1:b7:
         60:ef:b5:3a:70:d5:02:10:3e:57:06:bc:13:1e:8a:e0:71:9b:
         30:47:70:22:0f:36:d5:93:ff:54:3e:45:da:bc:42:be:60:8c:
         2e:5a:4b:90:35:65:94:12:8c:3a:75:49:5c:0c:86:2a:8e:0c:
         ec:91:ef:6c:93:f6:45:78:cd:06:47:e4:60:bf:68:10:42:c8:
         2d:12:21:a5:e3:55:2e:a1:e9:57:46:92:85:ba:aa:5a:f3:cd:
         d6:b7:50:56:86:c0:e5:4f:1f:a3:ac:ea:c8:48:3a:2c:f1:14:
         aa:f6:3d:3e:47:28:f3:d3:6a:c8:70:75:d1:42:29:52:63:50:
         f9:ec:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----