Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030303a3a2f34382d3438203d3e20323732353534.roa
File:                     323830343a383530633a313030303a3a2f34382d3438203d3e20323732353534.roa (raw, json)
Hash identifier:          gvMhMpu7TQYmPfWluKVkwX6DG9gVAM5mvlaJMXAx+QE=
Subject key identifier:   18:83:D3:DD:CC:F9:EE:80:F7:8A:57:3D:30:B8:5C:B9:82:F7:CD:06
Certificate issuer:       /CN=F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC
Certificate serial:       74C3DB85EC885844EC9BD04371C66962AE2BE0C2
Authority key identifier: F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030303a3a2f34382d3438203d3e20323732353534.roa
Signing time:             Wed 02 Nov 2022 15:13:41 +0000
ROA not before:           Wed 02 Nov 2022 15:08:41 +0000
ROA not after:            Wed 01 Nov 2023 15:13:41 +0000
asID:                     272554
IP address blocks:        2804:850c:1000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c3:db:85:ec:88:58:44:ec:9b:d0:43:71:c6:69:62:ae:2b:e0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC
        Validity
            Not Before: Nov  2 15:08:41 2022 GMT
            Not After : Nov  1 15:13:41 2023 GMT
        Subject: CN=1883D3DDCCF9EE80F78A573D30B85CB982F7CD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f6:d0:37:80:b5:42:15:c0:4c:0d:8c:68:4c:
                    89:93:ea:72:ed:51:28:ee:2c:76:57:6d:40:4e:2f:
                    4d:87:2f:80:0d:30:ac:4b:2d:2d:2d:46:7e:3a:de:
                    fa:ef:15:08:ff:58:cb:04:92:d4:c9:48:05:3f:b7:
                    88:dc:1a:79:9f:9a:b7:25:04:b2:ce:36:fb:0a:1b:
                    2b:7f:0d:dd:04:04:a6:12:3d:08:9d:c2:71:9e:06:
                    dd:5a:77:25:61:1a:6e:e7:75:94:25:97:fb:81:c8:
                    e7:ff:69:08:c8:04:bc:03:b9:17:87:d2:f1:4e:02:
                    e1:c8:6d:a7:39:71:2e:fa:6a:08:98:6e:11:fb:bd:
                    d1:0d:cb:31:47:34:16:91:ce:59:51:d5:bd:d6:fa:
                    7f:29:99:4a:04:bf:8f:ac:f4:ce:10:30:c2:29:b1:
                    83:a8:7a:95:ca:10:fb:e3:a3:52:3e:c6:77:d1:43:
                    b7:ae:ac:96:6e:ad:5b:39:d1:bb:1f:66:f2:4a:65:
                    47:20:a7:44:a1:ab:57:3e:b7:d5:f5:55:fd:ca:dc:
                    3f:20:71:61:4b:1b:6f:99:32:d9:2d:e4:4e:73:8c:
                    4d:d7:2e:f8:d8:66:40:a6:9a:0e:a7:b4:86:80:5c:
                    60:1d:3e:15:d7:25:35:76:e2:ba:13:da:0d:2b:5f:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:83:D3:DD:CC:F9:EE:80:F7:8A:57:3D:30:B8:5C:B9:82:F7:CD:06
            X509v3 Authority Key Identifier:
                keyid:F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030303a3a2f34382d3438203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:ae:71:aa:3b:84:ee:81:28:d4:4b:9c:1b:21:0c:2d:97:
         fe:48:d4:87:e7:97:79:2c:94:62:df:5f:cb:d3:3c:8d:35:3e:
         85:74:2e:28:ef:d6:9d:46:1b:82:37:9d:35:f8:09:c9:83:b8:
         ac:bd:11:ca:78:c9:6e:c2:c5:5d:73:cc:ff:f7:d7:78:b7:3c:
         de:44:59:0d:3a:52:c9:ff:0d:6f:2f:14:74:55:63:bc:70:43:
         80:8f:97:ab:87:a8:ca:fa:63:7f:d6:d0:d1:fe:e7:67:a2:13:
         69:8d:45:40:96:91:11:3c:c1:f9:cc:09:99:f6:6d:52:71:6e:
         b1:96:bb:44:45:bb:91:60:a6:aa:f6:12:c7:d4:67:5e:c2:e1:
         2a:d0:5b:15:21:6d:fa:cc:5b:71:1a:3d:96:c2:aa:15:13:1b:
         da:15:92:e9:03:e1:04:9b:bb:99:9f:d2:2e:18:2e:e1:be:1f:
         7a:23:1b:b1:59:95:e0:e4:84:84:85:80:ba:cf:89:e2:5b:95:
         b3:19:64:5f:15:10:39:93:cf:d5:b8:e2:b4:e4:66:2d:4e:f3:
         f4:87:fa:ba:d5:01:9e:61:9c:34:66:ef:bb:d1:05:f3:cf:35:
         6d:5b:99:18:84:7e:de:1d:22:b4:ab:dd:bd:01:f1:c8:1e:15:
         a6:eb:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----