Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3338343a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3338343a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          oBXMN3K1gBBqX2BTHFQutjAK5LP2VNIj7084VABhGVc=
Subject key identifier:   C0:C3:2A:CA:E5:EF:9D:A7:5A:5D:0E:87:39:4D:1E:7D:B4:B1:82:0F
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       23BD7F2561B9C1CCA5BCE2998985A4C7BCBE9FA2
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3338343a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 22 Jul 2022 12:14:06 +0000
ROA not before:           Fri 22 Jul 2022 12:09:06 +0000
ROA not after:            Fri 21 Jul 2023 12:14:06 +0000
asID:                     262459
IP address blocks:        2804:4b0:384::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bd:7f:25:61:b9:c1:cc:a5:bc:e2:99:89:85:a4:c7:bc:be:9f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jul 22 12:09:06 2022 GMT
            Not After : Jul 21 12:14:06 2023 GMT
        Subject: CN=C0C32ACAE5EF9DA75A5D0E87394D1E7DB4B1820F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:7e:8a:b1:f2:fd:8f:12:12:03:4a:e2:ac:
                    1e:6a:75:1e:53:16:02:ee:ee:8c:37:7a:11:f7:cf:
                    38:fb:d0:fb:e4:53:56:74:fd:c0:22:8f:f9:46:3d:
                    12:a3:8e:6e:64:1e:7c:b4:2e:cd:9c:86:26:16:43:
                    12:3e:c4:c5:76:ec:2c:20:4e:bc:cc:5d:2a:f1:1e:
                    fa:eb:d2:9a:68:94:55:c7:26:cc:c3:5c:01:b3:6f:
                    b4:82:4c:b5:da:f2:39:75:59:45:17:0a:8f:5a:82:
                    9e:bc:31:ea:42:4d:3a:59:78:d6:62:c4:16:8f:f6:
                    11:35:1e:a8:82:3a:45:59:be:01:44:4d:19:93:be:
                    63:4a:ec:a4:45:ff:c7:8f:63:06:34:b9:71:af:18:
                    c5:69:2f:65:19:74:c8:dd:47:5c:6d:56:95:cc:be:
                    14:aa:a3:0a:cb:b1:c4:f0:f9:c9:60:95:7d:a6:89:
                    d6:6c:51:50:a2:c4:45:ca:8e:0d:94:ce:ff:68:61:
                    f7:f6:4f:f0:96:b0:19:f4:d8:5e:95:a4:be:c5:d1:
                    f2:4f:16:14:53:4e:c0:de:f0:01:94:99:78:67:ef:
                    a8:15:e4:55:e7:66:8e:0f:af:85:0d:18:c2:af:b3:
                    8a:d7:f4:da:67:2d:a3:bf:c9:07:6e:2d:28:11:65:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C3:2A:CA:E5:EF:9D:A7:5A:5D:0E:87:39:4D:1E:7D:B4:B1:82:0F
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3338343a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:384::/46

    Signature Algorithm: sha256WithRSAEncryption
         34:66:6c:d3:68:c3:91:49:db:4a:59:66:b7:19:ce:6e:79:76:
         42:5f:cb:26:6d:b1:85:33:67:6b:91:fa:ad:25:a0:82:b1:df:
         ac:1b:36:67:af:02:e4:f6:9c:b2:bf:29:ee:8d:1c:db:f8:f6:
         ea:ae:57:55:29:dd:d1:6a:fe:34:55:81:10:f9:bf:14:ac:5c:
         fe:b3:9f:5b:de:29:84:8c:58:ad:f7:95:3c:bf:d1:77:f2:05:
         73:78:87:20:b8:9b:8a:16:52:c4:9f:1f:db:cd:aa:8d:cb:c9:
         8d:c3:c6:1e:1f:5c:d0:76:33:6f:4c:f7:45:c2:e0:ff:21:e7:
         41:ee:2c:47:96:cc:8e:ed:8f:27:e5:ea:b9:08:e1:2e:a1:e2:
         74:a3:57:48:f1:30:3b:a6:a8:2e:0e:93:19:41:57:6b:0c:c8:
         e2:39:15:5f:0b:55:22:f4:b4:e0:31:d5:e0:e2:20:89:dd:99:
         9b:50:91:5c:0b:55:fb:2d:5d:38:f8:54:c8:13:f9:c1:02:40:
         ae:f9:8a:48:54:dd:3d:29:1b:4e:22:05:7a:69:26:be:3e:f9:
         3b:48:2f:01:43:8e:6a:2d:55:49:28:1d:8e:6e:02:a1:ef:ca:
         78:af:49:a2:a4:c5:c2:ff:36:4a:70:c7:d0:c6:a8:34:8e:77:
         ae:9f:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----