Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3334343a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3334343a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          uBMaIG7aB9wFm4I9NAFxc0G+tLMR9UeYjuRDngl84sg=
Subject key identifier:   AB:2A:96:A0:59:C7:E0:67:5B:9F:46:12:CE:B6:A3:E5:AB:05:62:34
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       6EB4038947AABC16E33C3426C30FDF9BC1B82483
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3334343a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 22 Jul 2022 12:14:06 +0000
ROA not before:           Fri 22 Jul 2022 12:09:06 +0000
ROA not after:            Fri 21 Jul 2023 12:14:06 +0000
asID:                     262459
IP address blocks:        2804:4b0:344::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b4:03:89:47:aa:bc:16:e3:3c:34:26:c3:0f:df:9b:c1:b8:24:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jul 22 12:09:06 2022 GMT
            Not After : Jul 21 12:14:06 2023 GMT
        Subject: CN=AB2A96A059C7E0675B9F4612CEB6A3E5AB056234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:9f:8c:f3:df:a7:66:94:6f:c9:f2:f0:ec:
                    b0:b8:91:70:c4:6e:3f:a6:19:71:dd:35:6b:05:fb:
                    c1:ea:4b:1d:07:e3:c8:60:77:8a:f0:e5:f0:df:4e:
                    41:be:8f:c6:b1:f7:65:77:42:ab:34:c1:04:ad:b6:
                    0a:7b:29:a5:51:7a:83:73:ab:a4:64:f1:0f:f3:37:
                    fc:95:8a:83:fd:3f:6c:c7:00:cb:28:cc:e7:2a:bd:
                    e3:d0:c4:1c:ff:c7:23:19:00:4a:e4:59:db:bb:5d:
                    22:d6:fd:50:97:9f:da:ef:b5:7b:d3:e1:e0:6f:b4:
                    ab:e2:ed:66:50:c9:14:06:51:52:87:ee:80:e6:86:
                    0d:a5:6d:78:0d:07:4f:97:ea:a3:7f:4b:26:51:0d:
                    47:6e:34:8e:09:fa:bf:ad:e8:c5:21:25:7e:05:83:
                    58:02:8a:83:bf:49:2f:19:d1:b5:a8:8a:f8:74:ac:
                    8e:95:9c:80:3f:60:a9:f2:f2:98:7d:b9:4e:29:11:
                    dd:9b:1f:2b:3a:a7:37:15:45:61:f8:29:e8:75:cc:
                    2d:67:b5:13:e6:39:b3:41:91:04:1d:8d:6e:c1:aa:
                    fa:7d:ef:db:31:a1:4e:54:2f:03:09:53:41:7f:d6:
                    c0:64:76:d9:8d:8f:54:37:73:df:41:75:ee:b5:63:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:96:A0:59:C7:E0:67:5B:9F:46:12:CE:B6:A3:E5:AB:05:62:34
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3334343a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:344::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:95:7d:0f:ab:91:fe:08:8c:19:b2:a0:1a:08:2e:79:4b:
         a3:5b:aa:24:74:c6:ca:9c:29:3f:99:0b:ff:c4:87:d7:ed:44:
         03:f9:74:f3:db:0d:3b:82:4f:4b:0c:96:02:41:b6:e2:23:20:
         07:3d:89:ce:43:70:41:3a:c6:44:a5:0b:e4:52:d6:16:81:c9:
         9f:88:60:17:37:40:64:27:bb:5c:ec:69:32:11:f8:41:ac:94:
         14:2d:a4:78:4e:45:a3:16:b5:3b:fc:8f:79:23:0a:50:07:bd:
         13:e4:ba:82:5f:1f:ac:25:3b:2e:a1:f5:9f:f2:15:5d:ad:76:
         bb:f5:58:99:1e:fc:c0:0d:13:b4:0d:ae:c1:a3:72:84:74:5b:
         5a:ca:5f:ac:3a:79:f3:54:6e:95:76:6b:13:04:a7:a1:28:ae:
         0a:b6:20:c9:47:3b:10:c9:f3:06:9e:cb:78:6e:66:e2:40:6b:
         4c:01:07:f8:2d:85:d9:f7:1c:c7:84:a6:e4:a3:c8:ce:65:a8:
         5c:61:d1:f5:31:3b:5b:e4:57:3e:f9:d2:d2:85:52:04:b5:3d:
         86:6c:e3:14:66:02:eb:e8:2e:df:5f:ec:82:bd:96:71:39:8d:
         8d:98:19:0e:9a:c8:e1:19:3d:cb:69:28:cf:36:a3:b2:e6:47:
         43:3d:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----