Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313064323a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a313064323a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          mLdnvNYhfxniMSoiW4eN9LizprLoV5QoHUhmu+hb2bA=
Subject key identifier:   2F:76:6E:A0:46:F1:64:8E:0C:B5:FF:3C:FB:8D:1C:63:38:6B:9B:98
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       01F91566B9ED9B54A42C65D2A9D1CE2E8DC921EB
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313064323a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Mon 11 Sep 2023 19:38:51 +0000
ROA not before:           Mon 11 Sep 2023 19:33:51 +0000
ROA not after:            Mon 09 Sep 2024 19:38:51 +0000
asID:                     262316
IP address blocks:        2804:7c0:10d2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:15:66:b9:ed:9b:54:a4:2c:65:d2:a9:d1:ce:2e:8d:c9:21:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 11 19:33:51 2023 GMT
            Not After : Sep  9 19:38:51 2024 GMT
        Subject: CN=2F766EA046F1648E0CB5FF3CFB8D1C63386B9B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:8b:5e:23:a2:51:ac:42:ee:ff:5a:14:a0:
                    bc:a5:29:90:3b:41:0d:9b:33:15:82:fb:62:e7:74:
                    c8:0d:a7:68:88:dc:e3:02:b3:47:82:47:4d:29:6c:
                    d6:34:7b:2a:7d:33:6d:ee:fd:4e:82:cf:5b:ec:ba:
                    12:26:f2:56:c8:1e:98:96:54:93:fc:e0:d6:81:14:
                    b4:29:1a:d1:39:70:b0:a8:ba:fa:62:5e:1d:48:ea:
                    50:e5:23:c9:63:ba:5f:be:45:55:cc:07:28:ec:57:
                    2d:37:fa:bd:b3:e2:dd:04:a1:30:9c:38:f8:75:b8:
                    7b:8e:a6:80:2e:2b:5c:cb:bf:64:16:f9:58:fb:9a:
                    2e:95:1e:66:03:eb:e5:12:47:de:e0:35:03:78:6b:
                    c7:2f:f8:16:e7:0e:0b:3d:11:02:ba:c9:e6:5f:45:
                    be:82:7b:26:6b:79:72:ec:dc:ba:ac:40:64:51:92:
                    7d:e9:09:f7:76:c2:58:e7:75:0c:69:a8:45:a9:70:
                    8f:fb:38:d5:c6:d1:4e:10:99:a1:01:3b:97:89:74:
                    b6:60:48:19:3f:6b:59:b0:6f:11:79:2c:20:41:62:
                    74:47:3f:53:f4:ea:a3:b2:dd:60:58:f3:38:bc:cc:
                    82:6c:56:45:05:e5:47:3d:b9:c9:00:0a:f8:a8:74:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:76:6E:A0:46:F1:64:8E:0C:B5:FF:3C:FB:8D:1C:63:38:6B:9B:98
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313064323a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:10d2::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:8f:9b:cd:4c:3f:1b:30:d6:fc:00:27:d8:69:85:33:d3:b5:
         41:e0:ee:62:fc:26:03:e3:d7:41:51:d3:21:ac:5c:b1:5b:c1:
         bd:ba:90:77:df:1e:88:51:59:29:d0:67:96:89:0f:44:65:22:
         db:4e:a2:ac:b9:84:d4:bb:0d:1b:3f:21:39:8c:e8:97:db:a9:
         b8:a9:d9:54:d5:1a:ad:8f:24:93:4b:ef:18:54:1d:38:c6:54:
         e6:41:c7:7e:25:af:2d:ac:08:26:fd:bc:85:94:60:66:7c:8c:
         89:b9:e0:23:62:6b:8f:e2:a0:cc:8b:5f:74:7d:88:8e:69:77:
         fe:14:3b:50:9d:dc:c9:e7:cf:be:a2:76:6a:81:68:ae:2f:f5:
         ed:da:0f:1b:da:c4:a2:d6:97:b5:e0:a8:0d:6a:59:bc:f5:65:
         0b:e7:96:cd:6f:cf:46:e2:f2:cf:06:33:7c:20:69:6f:77:8d:
         5e:56:9c:7d:5a:e6:64:76:b2:6f:70:c9:c8:11:3f:34:32:7b:
         5d:28:52:b1:54:72:8c:db:11:02:34:38:32:ef:cc:59:83:d2:
         21:40:c1:2e:51:e3:3f:8a:ad:06:99:15:75:52:3a:4b:4d:55:
         41:2e:70:cb:3f:61:d9:c8:0e:da:d8:fc:7e:24:78:ce:e6:71:
         57:08:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----