Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a3a2f33322d3332203d3e20323633333437.roa
File:                     323830343a313462633a3a2f33322d3332203d3e20323633333437.roa (raw, json)
Hash identifier:          Bgpyk7Er06S/at1Bmc6J2xPNsPTPc4w2DYwq4uUaqCA=
Subject key identifier:   19:35:84:FE:2F:89:BA:80:CB:44:F3:BD:7D:B1:1C:EA:64:83:17:A9
Certificate issuer:       /CN=35384C8792858D41C3FB843ACCF3117382141A00
Certificate serial:       72D357A57F1009A3447A35ABFEECEA855C7DF659
Authority key identifier: 35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a3a2f33322d3332203d3e20323633333437.roa
Signing time:             Tue 20 Jun 2023 01:02:40 +0000
ROA not before:           Tue 20 Jun 2023 00:57:40 +0000
ROA not after:            Tue 18 Jun 2024 01:02:40 +0000
asID:                     263347
IP address blocks:        2804:14bc::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d3:57:a5:7f:10:09:a3:44:7a:35:ab:fe:ec:ea:85:5c:7d:f6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35384C8792858D41C3FB843ACCF3117382141A00
        Validity
            Not Before: Jun 20 00:57:40 2023 GMT
            Not After : Jun 18 01:02:40 2024 GMT
        Subject: CN=193584FE2F89BA80CB44F3BD7DB11CEA648317A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:21:fe:a8:4d:12:3b:50:a7:aa:7c:9f:af:
                    87:33:fd:96:48:b4:c3:06:92:e5:0d:09:b5:3c:f1:
                    c4:17:76:ce:d2:2b:ed:4f:12:4d:05:e3:80:72:4a:
                    69:97:8a:3f:d2:01:bc:58:3c:20:89:4a:79:1e:a3:
                    90:c0:0e:61:1a:f1:10:62:5f:b1:a9:e8:db:bf:42:
                    dd:0f:ff:da:f5:b6:73:84:f3:09:9a:b4:2d:91:63:
                    05:91:45:95:d6:82:98:c2:88:41:40:75:13:be:bb:
                    7b:95:99:a8:42:2d:2f:0f:22:d0:be:ea:0c:03:9f:
                    67:77:a9:d0:46:4c:3f:0e:9a:ca:14:56:9e:90:50:
                    b6:b3:e5:08:4b:4b:d5:74:5c:25:1d:68:76:1d:9e:
                    94:a5:5c:2e:4a:96:d4:a0:00:cf:a5:d2:75:1d:28:
                    10:f6:96:3b:43:89:69:40:04:5f:6f:20:84:ff:4a:
                    77:38:41:54:d3:eb:b3:2a:b2:19:1d:66:f9:8b:24:
                    06:b9:70:39:c6:40:a9:15:eb:9b:f7:72:4d:5e:ef:
                    c6:37:37:12:10:6c:c9:81:53:d8:56:5d:82:89:10:
                    9f:d8:d3:8c:95:ec:e6:03:8e:e8:68:f1:01:61:9f:
                    9e:b0:2b:05:88:cc:a2:c5:00:4c:cb:e6:1f:2d:9f:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:35:84:FE:2F:89:BA:80:CB:44:F3:BD:7D:B1:1C:EA:64:83:17:A9
            X509v3 Authority Key Identifier:
                keyid:35:38:4C:87:92:85:8D:41:C3:FB:84:3A:CC:F3:11:73:82:14:1A:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/35384C8792858D41C3FB843ACCF3117382141A00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35384C8792858D41C3FB843ACCF3117382141A00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/0/323830343a313462633a3a2f33322d3332203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:65:78:3f:db:1e:40:62:9b:41:bb:6b:12:3e:15:a6:41:
         2d:d8:74:99:23:d3:5d:7f:e6:fe:ee:7f:c1:79:2e:6e:37:20:
         dc:68:a5:52:e8:24:7c:ff:77:a2:29:84:42:6e:07:ea:1c:72:
         f0:21:25:1e:a1:27:60:9d:c4:e0:be:fd:fe:93:17:09:05:77:
         d2:51:ef:9c:db:fe:e5:88:8c:a2:75:72:63:a1:dd:c4:42:75:
         99:a7:35:6b:c2:91:4a:dd:58:13:c9:80:4f:3c:5e:6c:30:74:
         6b:cb:bd:88:1e:c0:d6:1f:19:28:2f:a8:cd:5b:3e:e8:b4:18:
         d5:78:09:ae:80:30:60:7f:59:15:38:07:55:14:34:29:99:f8:
         3c:49:35:50:6f:68:2b:97:04:96:ff:87:41:b1:e0:0d:d4:ae:
         c7:6d:6f:19:a0:1c:b8:97:a3:87:31:20:6f:59:22:ec:c2:08:
         b9:dd:d8:93:4d:fb:e3:fd:1f:0a:7c:79:b8:e9:2f:ef:43:7a:
         34:01:ee:ce:7d:d1:6f:11:9d:9c:de:23:cc:89:78:46:85:b3:
         7e:ad:1f:58:f3:63:e3:e3:23:64:2b:80:62:d1:5d:da:1f:ba:
         ba:47:66:16:26:21:81:91:f2:42:14:ed:fb:d8:c8:81:2e:51:
         ed:e2:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----