Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3334633a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3334633a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          KHbtJzVxg90908pYE1+QwqusYLP/ZoiHe05494zdCg4=
Subject key identifier:   DB:0F:5E:A4:8E:EA:6C:79:E4:F7:D2:D2:A8:93:02:49:71:DD:D4:F0
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       047DD21EEC9F897E9D59C5EBC68BA469B1962707
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3334633a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 22 Jul 2022 12:14:06 +0000
ROA not before:           Fri 22 Jul 2022 12:09:06 +0000
ROA not after:            Fri 21 Jul 2023 12:14:06 +0000
asID:                     262459
IP address blocks:        2804:4b0:34c::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:d2:1e:ec:9f:89:7e:9d:59:c5:eb:c6:8b:a4:69:b1:96:27:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jul 22 12:09:06 2022 GMT
            Not After : Jul 21 12:14:06 2023 GMT
        Subject: CN=DB0F5EA48EEA6C79E4F7D2D2A893024971DDD4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:b9:fd:c3:d0:27:93:4c:2c:da:46:bb:8b:
                    15:61:44:64:51:5a:46:07:66:88:4f:3a:c6:55:62:
                    60:1b:48:d6:5d:7d:57:44:9b:c3:8f:f3:11:dc:8b:
                    85:92:a8:a6:ff:77:40:c7:d7:a1:c5:60:32:2f:6f:
                    e9:f2:56:fc:20:ab:a5:99:b1:0b:9d:ba:72:03:43:
                    12:99:f1:11:68:84:38:93:d9:5e:42:48:4e:d2:1c:
                    62:8f:da:83:97:87:64:4b:46:98:55:a6:78:97:75:
                    1c:3b:b3:15:e0:52:85:d0:70:39:69:d7:3f:64:8f:
                    9a:25:e4:67:a2:22:69:69:21:94:23:79:8e:ed:84:
                    55:a4:c0:53:df:de:ea:67:5e:5f:f0:10:02:8f:b1:
                    bf:94:cb:40:d6:eb:b8:e7:5a:9d:e6:d3:a6:cb:51:
                    1b:84:4c:7c:c4:b3:a4:44:ef:7c:de:94:50:61:85:
                    1b:2f:59:0c:d4:00:fd:3c:7b:3c:48:29:71:e0:8a:
                    32:54:ac:16:19:c9:8f:aa:0d:a1:bf:28:fb:fe:13:
                    55:56:ad:6b:f6:ba:ed:b3:cb:cd:c1:c8:cd:17:60:
                    d1:30:a1:6b:09:6b:c3:d3:a9:aa:e6:ab:c8:11:21:
                    8e:b6:1a:7e:76:57:6f:21:5e:d2:11:42:9f:98:40:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0F:5E:A4:8E:EA:6C:79:E4:F7:D2:D2:A8:93:02:49:71:DD:D4:F0
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3334633a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:34c::/46

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:ac:89:5c:f4:19:65:29:9c:b3:e7:ec:c7:5b:5a:2d:df:
         8e:c2:72:0d:31:66:2d:75:9d:bd:7a:59:7c:64:ed:e8:c4:95:
         3e:b3:84:64:40:fe:36:3b:e5:62:47:3f:2f:b4:20:05:1a:f0:
         c5:26:6f:21:49:4e:e3:3a:14:a6:83:ac:8c:4b:67:00:66:32:
         55:c1:d3:4c:8d:79:ed:84:f8:af:b1:d5:60:ac:8d:43:6c:d6:
         41:26:3b:cc:e9:04:a2:3b:79:2e:66:86:66:7f:58:62:9e:74:
         08:ff:cf:bf:5a:35:cd:7f:a8:48:ec:ae:0b:02:32:d4:99:06:
         87:35:e3:b9:7d:52:00:47:a9:97:7e:10:bd:a8:49:11:2f:56:
         36:28:b3:42:96:0a:d8:f2:08:75:87:04:3e:b7:c4:7a:19:f1:
         d5:56:0f:35:c7:9b:5c:a5:00:c2:f3:a6:a3:49:f0:cb:0b:7b:
         ea:33:3f:86:43:93:cd:83:4a:57:c4:9d:83:af:7a:97:98:fa:
         14:c4:58:2a:78:2b:c7:aa:5f:93:6c:94:3e:72:76:6f:9b:1a:
         eb:ff:d7:89:1c:95:90:33:6f:22:c9:68:e9:1e:f6:50:b3:26:
         23:65:39:a6:f3:49:47:51:c9:7f:e1:ae:15:80:22:da:5d:cb:
         39:1f:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----