Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3431383a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3431383a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          mVgkgduJM6KxKmRi2SO7dJQWkg/DlsU2gBVBAnW5TG8=
Subject key identifier:   BF:32:78:7B:2A:C3:46:5D:C0:BB:B2:24:69:6E:52:81:83:26:1C:2E
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       722B0F0F12C7B72562136CB53034DE681E1BFFC4
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3431383a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Fri 22 Jul 2022 12:14:05 +0000
ROA not before:           Fri 22 Jul 2022 12:09:05 +0000
ROA not after:            Fri 21 Jul 2023 12:14:05 +0000
asID:                     262459
IP address blocks:        2804:4b0:418::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2b:0f:0f:12:c7:b7:25:62:13:6c:b5:30:34:de:68:1e:1b:ff:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jul 22 12:09:05 2022 GMT
            Not After : Jul 21 12:14:05 2023 GMT
        Subject: CN=BF32787B2AC3465DC0BBB224696E528183261C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0c:aa:11:01:ac:d0:3b:11:93:da:58:58:7f:
                    d4:83:d0:81:9f:32:2d:1a:cf:2c:aa:78:56:dd:f8:
                    20:94:aa:93:f2:12:5b:f9:19:f3:88:12:f1:35:c0:
                    fd:96:f2:f5:f0:dc:1b:69:e2:37:00:4f:34:1c:e5:
                    ef:53:08:f5:36:59:09:05:52:44:67:2e:5e:db:8d:
                    3a:ea:80:37:b8:40:ca:69:2f:d5:54:c1:cd:6c:72:
                    8e:c8:51:db:ec:1d:72:92:1e:e6:70:a8:49:e4:e7:
                    59:4e:da:ab:cc:90:fb:79:d7:cd:ed:86:32:65:02:
                    62:93:88:57:29:69:20:75:35:5b:69:39:47:28:95:
                    39:32:93:4f:65:ea:25:95:a9:2c:50:65:17:40:d7:
                    57:00:49:30:5b:e3:a1:f9:e9:4c:2a:f5:8a:11:17:
                    15:12:4f:cf:90:0b:b9:d1:d5:9a:cc:b3:72:1f:2c:
                    0a:3d:84:c9:0c:b2:f0:37:1a:c7:47:b4:d7:cf:d5:
                    c6:ae:1a:68:be:ba:26:7b:c5:69:01:35:b6:88:91:
                    32:04:be:96:ec:a9:31:26:cd:4e:2f:48:61:a1:ff:
                    98:6a:fc:9f:42:52:98:aa:a2:ed:61:d1:8b:e3:68:
                    50:a4:45:08:8f:bc:d5:f2:87:7b:f6:e6:ce:24:ea:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:78:7B:2A:C3:46:5D:C0:BB:B2:24:69:6E:52:81:83:26:1C:2E
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3431383a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:418::/46

    Signature Algorithm: sha256WithRSAEncryption
         b1:e8:1e:22:07:1c:e8:d9:6a:1e:1b:37:f1:84:4f:b3:37:b6:
         cb:bf:58:4e:a6:f8:16:2e:23:57:6d:05:55:f8:b1:4f:a4:a3:
         e9:8d:60:95:6c:fd:6e:bb:82:be:09:3f:eb:c7:df:05:0f:65:
         e1:8c:67:d3:ba:19:59:fa:7c:82:cf:27:ce:bd:24:b0:2c:20:
         1c:c0:b5:0d:15:97:64:bd:ed:f9:41:e2:16:23:a1:22:88:d4:
         5a:9a:52:65:f8:cd:df:9e:a8:42:6a:e5:48:48:93:ca:aa:67:
         ab:12:f3:90:7a:eb:a3:dc:78:2a:39:fc:1d:c2:ff:b7:2d:6c:
         73:45:52:9e:6a:6d:67:80:9e:33:15:4f:10:13:c7:89:bd:a7:
         f9:3b:02:0a:5b:2d:29:29:34:41:63:55:4d:8b:b6:ed:fe:11:
         2f:5b:f3:f4:f2:ed:1a:3f:67:73:e2:b4:2e:42:cf:63:30:88:
         be:cd:d1:96:6c:12:12:86:f4:7b:39:12:5f:87:aa:f4:b3:05:
         fe:83:e9:fe:3f:b0:ca:34:cb:6a:08:40:71:54:90:a5:f5:95:
         f8:29:21:84:48:7d:f0:84:70:83:4b:c5:b6:ef:6a:4f:89:af:
         1a:0e:16:8b:2c:32:0d:f1:c8:08:bb:6f:da:e1:4f:f3:9e:70:
         5d:ff:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----