Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a383030303a3a2f33332d3333203d3e20323637333238.roa
File:                     323830343a346263343a383030303a3a2f33332d3333203d3e20323637333238.roa (raw, json)
Hash identifier:          SHQwlhHJT6pviPjrQcj5euFU6jBHU0+ugaRmug6+1KY=
Subject key identifier:   5A:B8:17:5F:98:23:F0:22:92:02:DE:C5:9C:93:93:23:07:7E:A6:65
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       074FB01C75500D5AE7C94E0ADAE19223EE9E6324
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a383030303a3a2f33332d3333203d3e20323637333238.roa
Signing time:             Wed 03 May 2023 19:02:00 +0000
ROA not before:           Wed 03 May 2023 18:57:00 +0000
ROA not after:            Wed 01 May 2024 19:02:00 +0000
asID:                     267328
IP address blocks:        2804:4bc4:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4f:b0:1c:75:50:0d:5a:e7:c9:4e:0a:da:e1:92:23:ee:9e:63:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May  3 18:57:00 2023 GMT
            Not After : May  1 19:02:00 2024 GMT
        Subject: CN=5AB8175F9823F0229202DEC59C939323077EA665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:34:8e:58:56:bc:36:d9:6f:c4:ee:50:06:
                    3f:53:b7:18:61:19:11:00:08:51:2a:29:6d:b3:55:
                    d4:fc:3e:3f:1c:a3:c8:8e:2a:bb:20:32:cb:a5:8d:
                    5f:dd:e3:bd:91:ed:74:57:b6:a9:1a:bd:c1:71:0b:
                    a6:7a:86:3e:f0:66:87:c3:fb:9c:c2:30:cf:e9:ac:
                    df:54:e4:5e:36:1a:ce:29:7c:ec:42:0a:2b:21:a2:
                    29:d0:88:34:fb:00:31:d4:8a:78:65:44:d2:41:79:
                    31:38:a1:0f:15:e7:8b:25:dd:45:d0:46:32:61:a3:
                    59:26:70:c1:b7:41:2d:01:e3:1d:04:6f:d1:f7:e4:
                    95:36:47:cb:a4:df:75:f2:68:87:97:0f:21:76:1b:
                    9b:ff:6e:3e:7d:80:45:eb:19:1d:33:96:9d:43:79:
                    a8:d8:ac:d8:f8:19:5b:68:fe:04:f6:df:c5:dd:a0:
                    7c:37:96:f1:19:97:db:c9:2c:a1:d7:e7:3a:36:87:
                    67:5e:54:5f:f4:57:13:aa:14:93:eb:07:58:66:24:
                    a5:37:9c:0a:3d:54:66:a1:af:29:f0:60:30:eb:c4:
                    ef:4c:cd:b2:c2:41:b2:a7:8c:ea:bd:04:c9:f3:48:
                    3a:3e:8f:d4:6f:a5:6d:35:73:d9:85:c9:9f:66:4e:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B8:17:5F:98:23:F0:22:92:02:DE:C5:9C:93:93:23:07:7E:A6:65
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/323830343a346263343a383030303a3a2f33332d3333203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:03:66:88:88:6f:d1:46:fa:c4:8a:cc:1d:08:33:af:33:e2:
         19:96:09:77:aa:96:fe:93:1c:d0:a1:e0:6b:24:3d:f7:49:0a:
         52:68:68:11:0c:db:d4:4c:60:cc:1e:90:f1:fe:a5:70:6a:a2:
         8a:cf:94:ca:07:c0:72:2b:c1:4c:54:e7:2d:df:66:fc:a5:42:
         93:b0:6f:16:10:2a:73:7d:95:7b:9d:d0:21:9b:91:8e:57:88:
         ea:1b:43:40:b4:fd:cf:07:46:47:f9:bc:cc:73:88:fb:70:12:
         b0:75:d1:97:67:8f:76:4e:39:af:e0:64:20:46:d6:1b:c3:11:
         0a:07:7c:d6:97:e4:37:f4:ac:e3:6d:c1:a1:12:6d:dc:db:8f:
         5a:f8:f9:59:10:3b:b5:80:32:1b:78:54:47:78:c3:e2:e5:3c:
         f6:b7:0c:f3:2d:b8:e8:2d:a9:48:48:7c:36:3b:90:5c:a5:fa:
         54:8d:08:53:ec:60:e4:17:7c:bd:ce:0f:81:6e:06:9c:7c:b6:
         03:8d:15:89:5a:0c:d6:c1:18:c3:0d:94:80:b1:ee:a1:c9:92:
         d2:20:9f:6e:96:73:4d:9a:8c:21:4e:0a:5d:67:be:af:97:61:
         98:33:d5:85:a7:b2:0c:b0:86:dc:d2:61:fd:aa:9e:2f:93:84:
         6a:98:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----