Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32322d3232203d3e203532383732.roa
File:                     3133322e3235352e34342e302f32322d3232203d3e203532383732.roa (raw, json)
Hash identifier:          3nkIYXRt/q0u2OHhwenlvve5bN4UeeEsSj11NgsuTXo=
Subject key identifier:   C3:B4:E9:E1:B5:38:CD:B0:4A:1F:0A:51:EA:15:51:74:9B:15:4F:9E
Certificate issuer:       /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial:       52D4C11AD33E9B38AF932A96B93A012C2357AC4A
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32322d3232203d3e203532383732.roa
Signing time:             Mon 13 Nov 2023 19:11:23 +0000
ROA not before:           Mon 13 Nov 2023 19:06:23 +0000
ROA not after:            Mon 11 Nov 2024 19:11:23 +0000
asID:                     52872
IP address blocks:        132.255.44.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:c1:1a:d3:3e:9b:38:af:93:2a:96:b9:3a:01:2c:23:57:ac:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C015248532BCE3959F73092749FDE164934402
        Validity
            Not Before: Nov 13 19:06:23 2023 GMT
            Not After : Nov 11 19:11:23 2024 GMT
        Subject: CN=C3B4E9E1B538CDB04A1F0A51EA1551749B154F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:57:7a:2c:3c:6e:41:f3:e9:49:44:8c:df:
                    49:d4:6d:1a:7f:9b:0d:1b:49:d2:cf:1d:61:58:09:
                    a0:62:ec:f1:c2:df:fe:37:98:1d:a3:04:1b:b7:56:
                    e5:82:a9:2c:05:fa:fc:b5:00:8f:d6:67:66:f0:7c:
                    d9:a4:07:b5:a4:d5:6b:a1:26:f9:cf:1a:03:56:17:
                    6c:52:d4:95:bd:35:20:af:ad:1e:a0:a2:5e:0e:6a:
                    05:58:bb:8c:73:fa:50:b1:b1:37:6b:96:94:4e:8f:
                    26:cd:43:a3:b4:d5:b3:c4:b7:19:91:ca:1e:97:88:
                    0a:6c:91:33:ae:9b:95:7f:a9:26:54:87:d8:45:83:
                    40:d8:bc:75:4a:2e:9d:8c:20:0b:24:cb:97:19:29:
                    10:44:c0:25:e2:e3:4f:d5:af:64:b2:ac:f8:cb:c3:
                    b6:04:5f:4f:e3:94:af:18:21:12:38:cf:c1:ef:4c:
                    bd:a4:16:93:6a:0c:ba:40:e3:7f:63:e7:f3:12:5b:
                    95:8a:f3:20:ad:3c:70:18:3f:f7:bd:23:84:f5:78:
                    6d:76:be:c7:79:f6:3c:11:d0:85:59:17:8d:61:76:
                    c8:0e:81:29:1b:f5:18:cd:23:b1:ba:24:c6:bc:7c:
                    d7:1d:37:29:de:90:b9:e8:dc:0b:7c:35:b0:6c:91:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:E9:E1:B5:38:CD:B0:4A:1F:0A:51:EA:15:51:74:9B:15:4F:9E
            X509v3 Authority Key Identifier:
                keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32322d3232203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:10:ec:d3:63:53:7b:3d:b3:a9:53:ac:93:d2:50:bc:43:92:
         7b:23:00:bd:a9:ab:d4:fe:7f:30:76:49:ed:0c:5c:4f:cb:4f:
         53:c0:9f:c1:c1:85:93:ac:c0:8d:e8:5f:42:28:68:8f:5e:93:
         34:29:19:f4:23:20:5c:04:f7:93:be:9c:ca:38:ee:5b:4f:c8:
         d3:38:2b:fc:3c:cb:3a:1f:79:2c:22:b8:88:59:11:f3:e4:fd:
         50:ca:07:03:97:f7:3d:a7:e3:53:f0:74:dd:a9:56:8f:ad:37:
         76:82:22:0b:11:7d:ce:a1:61:21:33:b6:41:ba:ee:37:fc:03:
         f6:38:24:75:07:b3:40:17:8e:c0:30:cc:65:6a:9a:25:9c:df:
         e3:7e:cd:29:60:4c:7a:00:cd:db:65:5e:8d:1b:9e:5e:0c:79:
         d4:a4:3f:50:df:22:8b:fb:bd:68:65:38:dd:82:d2:43:f7:e5:
         98:cd:d7:c5:b5:29:c3:26:63:31:3e:f9:27:56:2e:63:30:55:
         24:50:cf:1a:00:bf:94:d7:b5:fb:43:3f:82:8f:44:de:4e:f1:
         8e:b2:77:b4:68:b4:62:ce:0f:70:60:07:16:7b:79:52:1f:66:
         3d:d7:ea:06:9c:97:0b:36:47:6e:18:40:de:83:5d:05:d1:b9:
         8f:30:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----