Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030303a3a2f34362d3436203d3e20323732353534.roa
File:                     323830343a383530633a313030303a3a2f34362d3436203d3e20323732353534.roa (raw, json)
Hash identifier:          fkdfLWHyAU7gTqglY4uHdKk137dW/09cM2l5zVptz74=
Subject key identifier:   CF:BD:9A:AF:FD:E1:45:16:26:63:11:C2:21:B0:4A:DB:24:73:D3:92
Certificate issuer:       /CN=F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC
Certificate serial:       65321257DEF2A59E683981756E040A6B82DC4A5D
Authority key identifier: F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030303a3a2f34362d3436203d3e20323732353534.roa
Signing time:             Wed 02 Nov 2022 15:13:40 +0000
ROA not before:           Wed 02 Nov 2022 15:08:40 +0000
ROA not after:            Wed 01 Nov 2023 15:13:40 +0000
asID:                     272554
IP address blocks:        2804:850c:1000::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:32:12:57:de:f2:a5:9e:68:39:81:75:6e:04:0a:6b:82:dc:4a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC
        Validity
            Not Before: Nov  2 15:08:40 2022 GMT
            Not After : Nov  1 15:13:40 2023 GMT
        Subject: CN=CFBD9AAFFDE14516266311C221B04ADB2473D392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:a6:f0:a2:62:f6:dd:8e:6c:4a:b1:50:fa:
                    3e:7d:b3:f0:34:22:0c:73:a9:11:eb:3d:d4:4d:4d:
                    1a:de:cc:47:ec:ab:21:9c:fd:c8:b2:0f:94:6d:20:
                    df:6e:f5:e4:fa:40:cc:c2:e3:b7:1c:a4:9c:1e:35:
                    c0:aa:0e:58:e8:f9:b9:39:10:b2:1d:8e:3d:01:12:
                    6b:06:ce:41:6d:a9:c8:7b:3e:56:eb:05:27:9a:95:
                    64:88:bc:d2:ba:ee:ab:0f:01:bd:40:44:bd:68:93:
                    84:30:59:34:f1:1c:52:58:09:48:1e:f6:ce:2f:1f:
                    17:e4:31:76:8b:84:50:73:1a:af:d7:03:0e:03:cc:
                    db:ca:2e:d0:e6:c8:05:a0:05:be:80:5e:8d:75:cb:
                    78:32:d9:d4:7e:57:5c:ab:f9:6e:99:59:11:23:f4:
                    9b:3e:80:4f:df:ea:5f:03:f0:d5:6e:50:a6:80:59:
                    0a:fc:fa:9e:b3:92:ec:24:7c:3a:70:41:06:16:d5:
                    01:7d:5f:76:d3:6e:eb:64:5d:bd:09:f6:59:a8:96:
                    73:35:3d:ac:38:91:20:ab:8d:55:12:ae:13:f6:ba:
                    64:17:e7:7f:3a:6f:23:e1:75:6c:c1:79:e7:12:40:
                    4e:ed:40:99:79:d5:d7:95:64:44:fd:67:9b:b8:34:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BD:9A:AF:FD:E1:45:16:26:63:11:C2:21:B0:4A:DB:24:73:D3:92
            X509v3 Authority Key Identifier:
                keyid:F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030303a3a2f34362d3436203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:1000::/46

    Signature Algorithm: sha256WithRSAEncryption
         40:84:6f:8a:f0:57:8a:f3:0d:f9:56:d1:a2:f5:64:ed:c2:77:
         73:e6:37:ff:4e:0a:a7:15:49:9d:93:1d:a7:75:21:f0:73:ab:
         f4:e6:1c:94:19:40:52:0c:d1:60:fa:0a:7d:ed:39:66:07:9b:
         51:4e:d5:a2:e5:48:a9:e6:1c:e5:4f:3e:0a:5b:21:09:c2:15:
         13:f0:e6:16:db:7e:97:f7:23:43:21:16:28:49:c5:63:14:06:
         6f:27:15:ba:6f:c7:43:dc:c6:3b:3b:c6:95:49:c6:83:8d:65:
         e3:63:f8:8b:fd:bc:b2:64:80:ad:2f:42:2a:fc:e5:82:8c:1f:
         e2:8c:de:11:da:7c:f9:ea:7d:65:9f:e3:4f:53:cf:90:9d:be:
         67:a0:95:71:53:02:44:70:30:4b:34:bb:9c:66:10:aa:60:65:
         8e:b3:54:99:27:b0:b8:5e:6c:f0:22:fb:cc:4e:de:67:fb:64:
         a1:49:10:ed:9f:b8:6c:ed:33:46:49:d4:7a:f1:6c:cf:c6:66:
         32:88:8d:45:33:fc:4d:cd:71:84:02:83:1c:bc:58:6c:77:c3:
         13:23:bc:b2:da:c1:2a:51:cd:ce:bc:b0:a3:e7:62:2d:bc:1b:
         ef:1e:a6:c9:3a:4b:87:a4:67:30:2a:ea:df:39:91:1f:b6:ba:
         12:ae:79:50
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUZTISV97ypZ5oOYF1bgQKa4LcSl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg5MDU1QjkzQTBFOUMzRkU2RjExMDEwMUU0OEZCNEJB
N0M2QzdBQzAeFw0yMjExMDIxNTA4NDBaFw0yMzExMDExNTEzNDBaMDMxMTAvBgNV
BAMTKENGQkQ5QUFGRkRFMTQ1MTYyNjYzMTFDMjIxQjA0QURCMjQ3M0QzOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLqbwomL23Y5sSrFQ+j59s/A0
IgxzqRHrPdRNTRrezEfsqyGc/ciyD5RtIN9u9eT6QMzC47ccpJweNcCqDljo+bk5
ELIdjj0BEmsGzkFtqch7PlbrBSealWSIvNK67qsPAb1ARL1ok4QwWTTxHFJYCUge
9s4vHxfkMXaLhFBzGq/XAw4DzNvKLtDmyAWgBb6AXo11y3gy2dR+V1yr+W6ZWREj
9Js+gE/f6l8D8NVuUKaAWQr8+p6zkuwkfDpwQQYW1QF9X3bTbutkXb0J9lmolnM1
Paw4kSCrjVUSrhP2umQX5386byPhdWzBeecSQE7tQJl51deVZET9Z5u4NKUpAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUz72ar/3hRRYmYxHCIbBK2yRz05IwHwYDVR0j
BBgwFoAU+JBVuToOnD/m8RAQHkj7S6fGx6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9WdmVTQ3FCWUoyRzM3TjNjbnQyUlcyYTdjckNrRldvSEhGSGZVWFly
ZWYvMC9GODkwNTVCOTNBMEU5QzNGRTZGMTEwMTAxRTQ4RkI0QkE3QzZDN0FDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y4OTA1NUI5M0EwRTlDM0ZF
NkYxMTAxMDFFNDhGQjRCQTdDNkM3QUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvVnZlU0NxQllKMkczN04zY250MlJXMmE3Y3JDa0ZXb0hIRkhmVVhZcmVmLzAv
MzIzODMwMzQzYTM4MzUzMDYzM2EzMTMwMzAzMDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzczMjM1MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEhQwQADANBgkqhkiG9w0BAQsF
AAOCAQEAQIRvivBXivMN+VbRovVk7cJ3c+Y3/04KpxVJnZMdp3Uh8HOr9OYclBlA
UgzRYPoKfe05ZgebUU7VouVIqeYc5U8+ClshCcIVE/DmFtt+l/cjQyEWKEnFYxQG
bycVum/HQ9zGOzvGlUnGg41l42P4i/28smSArS9CKvzlgowf4ozeEdp8+ep9ZZ/j
T1PPkJ2+Z6CVcVMCRHAwSzS7nGYQqmBljrNUmSewuF5s8CL7zE7eZ/tkoUkQ7Z+4
bO0zRknUevFsz8ZmMoiNRTP8Tc1xhAKDHLxYbHfDEyO8strBKlHNzrywo+diLbwb
7x6myTpLh6RnMCrq3zmRH7a6Eq55UA==
-----END CERTIFICATE-----