Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3135302e302f32332d3233203d3e20323636393638.roa
File:                     34352e3232362e3135302e302f32332d3233203d3e20323636393638.roa (raw, json)
Hash identifier:          mPkqmL+F4EkOfXY01+S+4KHZIbwWVTIL3+Aok3ygTUs=
Subject key identifier:   A9:DC:DD:2C:9F:1D:50:C7:12:01:42:40:D2:33:BB:3E:7B:B5:39:5F
Certificate issuer:       /CN=1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3
Certificate serial:       676756213CEBA9A007EB32871F624392B060173F
Authority key identifier: 13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3135302e302f32332d3233203d3e20323636393638.roa
Signing time:             Wed 14 Dec 2022 20:03:23 +0000
ROA not before:           Wed 14 Dec 2022 19:58:23 +0000
ROA not after:            Wed 13 Dec 2023 20:03:23 +0000
asID:                     266968
IP address blocks:        45.226.150.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:67:56:21:3c:eb:a9:a0:07:eb:32:87:1f:62:43:92:b0:60:17:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3
        Validity
            Not Before: Dec 14 19:58:23 2022 GMT
            Not After : Dec 13 20:03:23 2023 GMT
        Subject: CN=A9DCDD2C9F1D50C712014240D233BB3E7BB5395F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:55:2d:a9:71:ce:44:86:96:d2:5d:8e:89:
                    77:30:32:45:2a:b7:d6:94:38:d6:db:9e:0f:31:98:
                    7d:6d:6f:cd:56:18:12:a2:65:46:4d:cb:18:ed:61:
                    b2:3c:88:52:30:a9:d3:9c:c2:fe:a1:a9:36:aa:be:
                    df:a9:c1:27:91:d1:63:b2:45:3f:e5:66:e7:68:73:
                    95:66:6f:e6:04:26:a7:9a:e2:b4:11:45:90:18:a8:
                    28:c6:e8:41:6b:9f:2e:34:5a:28:2d:eb:da:fb:64:
                    2b:56:aa:d2:c3:53:39:d6:81:99:2c:7b:91:d4:82:
                    c4:be:fd:55:03:c9:ff:7c:2f:6e:36:5a:42:88:38:
                    c1:ce:84:e5:88:7c:25:db:b5:95:8d:f9:19:dc:d2:
                    40:a1:92:ac:1d:c4:10:56:11:bd:30:10:e4:07:fb:
                    60:08:e3:dd:2d:a1:dc:ae:61:81:ae:8f:48:7f:ae:
                    5e:d6:17:b4:7c:b4:27:39:1a:9e:bb:3a:45:fc:c5:
                    38:bb:b6:b5:3b:a9:4c:22:b8:b5:29:e3:e5:a5:50:
                    bc:ce:ac:4e:50:3e:32:bb:9a:93:0c:0d:f7:02:e6:
                    eb:b6:fc:cc:6a:31:4a:12:4e:08:fd:3e:29:2b:d4:
                    d2:4b:03:ed:6a:d2:12:14:7d:96:dc:73:eb:b3:76:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:DD:2C:9F:1D:50:C7:12:01:42:40:D2:33:BB:3E:7B:B5:39:5F
            X509v3 Authority Key Identifier:
                keyid:13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/34352e3232362e3135302e302f32332d3233203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:4a:60:7b:4d:80:a7:b6:f9:db:b9:6b:cd:0f:93:60:3b:
         0f:a2:d2:9c:08:a8:d6:4e:95:0e:15:e8:9d:66:89:48:39:7c:
         5b:c5:46:27:6b:1b:8b:dc:08:63:39:eb:ab:40:59:04:ce:a5:
         7b:f6:e7:c8:72:38:fe:e5:9f:0b:b4:9f:9e:10:16:b2:4a:59:
         24:ad:7e:a8:61:3a:2a:49:2d:bc:55:f8:fe:a1:f9:25:f0:9a:
         a4:f9:78:f3:9a:83:c5:46:9d:d8:8b:1b:24:95:eb:9c:65:64:
         0a:26:82:25:1c:1d:f3:8f:c4:0a:47:02:22:b4:93:09:18:64:
         21:55:e8:f3:6b:62:68:5d:1a:cc:14:06:a2:0d:22:47:74:1c:
         6e:0d:58:b3:fa:d9:32:e4:cf:81:a3:a7:e0:2d:b0:cc:d0:10:
         c0:93:1c:37:1f:18:ac:66:5a:9a:1d:ad:68:fd:d3:e4:a6:f5:
         ca:5d:e2:64:44:b2:f1:2f:6b:27:23:7d:cb:a8:b7:8c:f8:b2:
         bc:f8:6e:24:bb:7e:07:45:a0:61:f5:e5:8c:33:80:a5:96:8e:
         74:d0:fc:1e:be:ec:6f:f1:e6:14:a8:c4:29:65:8d:64:ce:27:
         2a:a7:c9:d8:ef:26:d3:08:ee:60:94:00:87:57:6c:1a:ad:94:
         65:b8:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----