Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33332d3333203d3e20323633323633.roa
File:                     323830343a313831343a3a2f33332d3333203d3e20323633323633.roa (raw, json)
Hash identifier:          kDS411B+iyXAm5sMkEJknm90APsTIxDiRhqHmqf9+Ik=
Subject key identifier:   D5:3D:F2:2E:22:74:BE:3A:7F:39:19:54:40:42:44:B1:34:69:D6:D7
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       0DC93A12F54756D9B0DF161ABFF115A738D33DCA
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33332d3333203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 11:59:49 +0000
ROA not before:           Tue 16 May 2023 11:54:49 +0000
ROA not after:            Tue 14 May 2024 11:59:49 +0000
asID:                     263263
IP address blocks:        2804:1814::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c9:3a:12:f5:47:56:d9:b0:df:16:1a:bf:f1:15:a7:38:d3:3d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:54:49 2023 GMT
            Not After : May 14 11:59:49 2024 GMT
        Subject: CN=D53DF22E2274BE3A7F391954404244B13469D6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:d7:e2:b6:0e:09:24:31:80:70:e8:6c:6a:
                    e0:60:8b:cf:12:be:2f:ef:73:79:cb:d4:ec:a7:1d:
                    18:73:5f:7d:a0:c5:b5:67:1d:b4:32:04:b7:cd:ad:
                    3b:7b:e0:77:53:86:4a:70:ef:86:29:3d:9c:36:d5:
                    a1:c1:3a:f7:56:42:f7:c9:91:a3:b9:af:68:5c:8a:
                    3a:cc:e7:86:40:47:0a:37:2c:c7:bf:31:d8:c7:26:
                    83:58:1b:1b:6b:2c:d2:0d:59:d0:60:cd:33:c4:6a:
                    13:0a:8d:a1:0f:0e:e5:96:77:69:d6:30:31:69:42:
                    98:03:7a:b4:e7:14:ba:e1:60:6f:3d:ee:70:73:b4:
                    78:a2:cf:78:9c:93:21:7e:71:96:b0:af:cc:72:21:
                    12:70:83:e1:fa:b2:c6:51:da:95:1c:e1:0b:b8:58:
                    a2:a4:d1:3f:e7:aa:aa:ef:c6:a2:f3:2e:fc:c9:b9:
                    e7:0a:4a:32:a2:12:52:a4:e9:49:3a:e9:91:b6:96:
                    cb:e1:69:4e:48:4b:9b:76:5d:66:2c:c5:c1:19:c7:
                    5d:01:cb:c3:83:ad:5d:b8:de:36:e0:77:8e:35:cb:
                    be:d5:58:10:81:ce:64:29:a2:db:8f:40:04:68:53:
                    a0:62:ad:f9:25:9d:7e:4f:11:98:ce:30:fc:2f:ac:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3D:F2:2E:22:74:BE:3A:7F:39:19:54:40:42:44:B1:34:69:D6:D7
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a3a2f33332d3333203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1814::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:c6:a3:39:d6:7b:6a:15:12:71:90:38:30:0a:2c:1e:e0:
         cc:3a:3e:0b:8e:7e:14:0e:0f:61:4b:e4:c7:f4:37:f9:09:52:
         76:71:b6:ba:95:0e:19:17:65:8c:e1:28:67:92:67:af:9d:21:
         39:e5:04:8a:1b:13:a0:df:aa:38:9e:56:a2:c6:cb:59:2e:2b:
         3b:c1:57:b5:d7:a0:87:62:49:5a:26:12:bd:a4:e3:aa:90:4e:
         c9:56:a8:62:a4:98:18:b9:60:6a:48:2f:38:cb:53:6e:76:74:
         c6:ce:a9:8a:18:82:be:e0:ae:aa:89:bc:e4:26:95:9e:b0:b4:
         1b:c3:a3:31:c7:46:44:e3:35:ab:2b:dd:14:88:36:03:ea:e7:
         7b:5d:c7:a9:78:20:fa:2e:58:c1:09:c9:48:35:45:a3:aa:c0:
         bc:da:45:2e:8e:ea:1d:c5:aa:a1:c5:4f:b5:12:5c:e4:c9:4e:
         80:bf:50:16:85:c1:e2:42:88:dd:3c:03:ce:19:80:d3:f1:a7:
         f6:35:e9:a6:69:19:47:84:c8:15:15:7b:e5:15:28:c0:c1:bf:
         8e:a9:5a:7a:33:f8:32:e0:af:d6:13:c2:76:be:ad:ea:4c:ea:
         0f:7a:0e:e3:59:89:3e:a6:74:77:ec:9c:b8:b0:25:7e:d3:b4:
         33:49:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----