Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/323830343a6333383a3a2f33322d3332203d3e203532363835.roa
File:                     323830343a6333383a3a2f33322d3332203d3e203532363835.roa (raw, json)
Hash identifier:          9X1YpN93/heFARegYead512tD2B4TwBjmxVfiuEc5rk=
Subject key identifier:   9C:E4:2C:D3:6C:EE:87:E1:F4:78:B4:50:1C:F2:1F:20:BE:90:80:81
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       7BC91991AA86D2A7210F26F7DBA97D3E53DCC6C4
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/323830343a6333383a3a2f33322d3332203d3e203532363835.roa
Signing time:             Mon 08 May 2023 19:00:50 +0000
ROA not before:           Mon 08 May 2023 18:55:50 +0000
ROA not after:            Mon 06 May 2024 19:00:50 +0000
asID:                     52685
IP address blocks:        2804:c38::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c9:19:91:aa:86:d2:a7:21:0f:26:f7:db:a9:7d:3e:53:dc:c6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: May  8 18:55:50 2023 GMT
            Not After : May  6 19:00:50 2024 GMT
        Subject: CN=9CE42CD36CEE87E1F478B4501CF21F20BE908081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:02:19:c5:de:90:e6:c0:51:c6:79:82:f0:
                    4c:c5:80:be:d3:11:8d:7b:a8:f9:fc:85:bc:3d:e9:
                    9c:b1:70:ff:a5:49:a8:a2:e3:58:ae:a7:78:7b:fd:
                    6a:0c:21:85:28:06:f1:c2:1a:fb:18:9d:09:d7:33:
                    32:d6:49:05:6c:10:de:49:78:41:09:3e:a9:88:3a:
                    07:26:61:ce:f7:16:fe:5f:04:18:13:da:9f:69:c4:
                    6e:52:61:b1:42:59:f9:02:3c:a5:2c:f0:d4:df:7e:
                    16:f6:77:6e:54:8c:a3:cd:34:46:5f:bf:5f:c6:db:
                    87:72:14:15:2f:ec:5a:53:e7:84:05:ea:ae:79:c9:
                    47:a5:c8:dc:cf:73:83:f9:01:12:ca:6d:9e:88:f1:
                    ab:77:93:3e:86:74:c8:f5:90:e1:1d:63:78:71:ad:
                    85:60:43:53:e9:2c:83:5d:c7:48:9a:62:2d:05:61:
                    0b:2b:d2:d9:e3:e4:6d:8f:4e:a8:fe:0c:aa:f5:b0:
                    76:5e:f4:1c:b8:1d:e9:e9:00:aa:e9:0d:b6:4b:de:
                    0f:22:5d:f1:77:ff:9b:85:e5:b8:ae:3a:db:41:94:
                    bf:93:f4:16:2e:44:b7:69:38:6c:ab:95:12:5c:c4:
                    ea:16:ba:ec:4e:a7:cf:88:36:bd:96:3d:8b:dc:dc:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:2C:D3:6C:EE:87:E1:F4:78:B4:50:1C:F2:1F:20:BE:90:80:81
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/323830343a6333383a3a2f33322d3332203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:38:06:a4:6b:51:50:e8:9e:82:f5:5c:1e:ee:47:03:92:28:
         1f:19:f6:77:01:71:c3:42:0f:5d:71:5a:ea:f9:93:91:45:8e:
         3a:75:09:1f:84:69:c1:33:ed:46:32:cf:bf:5e:b6:41:f8:c5:
         38:b3:2c:a6:b7:ad:b2:46:64:fd:72:40:7b:bb:8c:89:e0:65:
         bd:47:c3:72:14:57:e4:41:bd:e5:30:58:92:26:3b:64:2c:f1:
         2c:91:b4:f0:08:f4:31:f1:ac:02:01:cf:89:31:a3:49:20:6f:
         2a:32:fa:72:85:77:4f:6e:ae:8b:51:ae:cd:4d:e7:37:b9:7f:
         36:96:7d:dd:7c:33:2a:24:ad:70:e9:4a:ec:9d:d4:2b:1b:a7:
         59:a9:82:51:45:bd:e2:87:a6:93:e5:a7:1f:00:f8:ad:77:61:
         5d:35:22:6d:06:a9:8e:e1:6a:56:a1:30:ad:37:97:d0:32:36:
         eb:fe:7c:15:7e:b6:8b:a4:2e:34:4b:95:89:44:c6:b3:f7:4c:
         b0:78:4d:06:8b:5c:6b:41:01:8f:2d:03:ca:d1:81:3d:93:ee:
         fd:fb:87:26:51:75:7a:ee:94:80:07:2a:9f:af:f6:a4:00:db:
         c3:a6:bc:d9:d4:39:b4:2d:d4:39:f2:ea:9c:e2:e3:1c:1d:e4:
         fe:c9:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----