Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/323830343a333530343a3a2f33322d3332203d3e20323635343935.roa
File:                     323830343a333530343a3a2f33322d3332203d3e20323635343935.roa (raw, json)
Hash identifier:          NVPFe9JVS9+1bNNqWhOi0xTvjb9KHJLxayN8OWzwF9w=
Subject key identifier:   84:DA:F0:65:37:83:3C:2D:CA:F8:2F:07:18:F9:6A:26:58:8E:78:BE
Certificate issuer:       /CN=5D7C936A02A87484DC75839C6718D62DF72983BF
Certificate serial:       3231B7916CACF049AFA8ADC2C1739FA8D9EF5E89
Authority key identifier: 5D:7C:93:6A:02:A8:74:84:DC:75:83:9C:67:18:D6:2D:F7:29:83:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7C936A02A87484DC75839C6718D62DF72983BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/323830343a333530343a3a2f33322d3332203d3e20323635343935.roa
Signing time:             Tue 06 Sep 2022 13:03:50 +0000
ROA not before:           Tue 06 Sep 2022 12:58:50 +0000
ROA not after:            Tue 05 Sep 2023 13:03:50 +0000
asID:                     265495
IP address blocks:        2804:3504::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:31:b7:91:6c:ac:f0:49:af:a8:ad:c2:c1:73:9f:a8:d9:ef:5e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7C936A02A87484DC75839C6718D62DF72983BF
        Validity
            Not Before: Sep  6 12:58:50 2022 GMT
            Not After : Sep  5 13:03:50 2023 GMT
        Subject: CN=84DAF06537833C2DCAF82F0718F96A26588E78BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:6c:37:e6:fe:5c:d8:75:67:c5:f6:7e:68:
                    87:3e:2b:d8:4e:bf:80:83:6b:ec:b9:87:0c:c9:89:
                    37:8a:87:3b:67:76:c8:f6:bb:19:db:84:80:03:b7:
                    df:f8:fd:c7:09:25:c2:0c:80:6e:5f:5c:58:d8:44:
                    42:6f:99:b8:36:ce:35:f1:15:53:3d:aa:35:72:07:
                    4f:7d:a7:c4:19:3d:4e:a0:55:29:3f:cc:d6:ac:b9:
                    fe:f0:d2:35:82:ae:8d:10:b0:3e:95:cb:32:bc:65:
                    de:8d:94:c1:a0:e2:c9:85:ff:49:4f:05:eb:d1:00:
                    0f:ea:74:fd:a5:23:06:6b:29:ef:9e:e2:2e:40:6e:
                    08:59:d8:27:7e:0e:5e:21:36:e4:a4:72:bf:78:89:
                    40:a6:ae:6d:23:2f:44:cc:78:c3:ae:58:8a:c8:f2:
                    96:bd:bc:bc:2e:bb:7e:d9:76:08:1b:af:7b:99:fa:
                    1e:f5:0c:78:bd:46:4d:6c:7d:49:1f:96:87:a8:5f:
                    e0:14:aa:46:5a:ee:05:5e:21:dc:8f:60:50:b1:2e:
                    4f:ea:b9:57:bc:57:eb:2d:9b:5b:40:e7:9f:5a:74:
                    a8:48:11:76:f3:ed:86:d8:7c:8f:fd:37:0c:6f:f0:
                    dd:9e:b7:0d:17:d7:58:7e:d6:b7:79:82:8b:13:f3:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DA:F0:65:37:83:3C:2D:CA:F8:2F:07:18:F9:6A:26:58:8E:78:BE
            X509v3 Authority Key Identifier:
                keyid:5D:7C:93:6A:02:A8:74:84:DC:75:83:9C:67:18:D6:2D:F7:29:83:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7C936A02A87484DC75839C6718D62DF72983BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/323830343a333530343a3a2f33322d3332203d3e20323635343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3504::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:0f:0b:39:a2:84:34:85:8d:b2:cd:60:04:11:a0:77:b2:
         ee:e9:29:33:49:7a:5c:d5:99:3a:51:31:be:92:e9:be:eb:b3:
         bd:d2:9b:83:b3:af:c1:73:f8:d8:f3:46:7e:16:6e:1e:c0:23:
         44:1b:c3:9a:86:f0:cb:23:1f:7a:f1:bd:c0:0c:c3:f6:f3:7d:
         33:69:8d:e8:7f:e0:5f:86:a5:0c:e8:71:25:0c:3d:90:7f:fc:
         72:86:80:c0:5f:0d:c1:4b:02:f8:27:45:c8:59:89:1d:e8:db:
         3f:97:94:94:b2:82:87:f6:c5:02:9c:25:1d:82:ad:65:25:e9:
         66:a1:b8:24:8f:5e:4c:93:71:a3:8d:e4:41:66:7e:3d:eb:6f:
         4c:80:59:70:e5:76:f7:e2:6f:02:9c:8d:1d:4e:cd:18:1d:ea:
         ae:69:57:81:a1:a1:c0:17:1d:ff:88:a9:9f:92:e7:93:3b:29:
         4b:a8:a8:0c:75:b0:02:f6:a2:10:1c:b8:21:4f:5d:66:bc:0e:
         fd:d4:af:e7:c7:58:ab:cd:d1:32:f5:2f:be:cb:e9:a2:7d:54:
         d0:72:e6:2d:9c:2d:fe:79:de:2c:1a:ba:8f:62:20:74:54:4f:
         01:24:83:a8:40:05:84:b7:f2:17:83:aa:41:6a:be:ff:fa:bf:
         aa:3f:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----