Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3231303a3a2f34352d3435203d3e20323637323730.roa
File:                     323830343a346165343a3231303a3a2f34352d3435203d3e20323637323730.roa (raw, json)
Hash identifier:          RmYT0jSPyP5ehFo7xt9dRm14WOfR3y67dLJ+jryPqnQ=
Subject key identifier:   76:5C:6E:60:F1:F0:DC:C0:20:B6:49:BF:FF:2E:A3:28:C1:72:27:B0
Certificate issuer:       /CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
Certificate serial:       75091C31034118030007FEC55B3CF971187089D2
Authority key identifier: 81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3231303a3a2f34352d3435203d3e20323637323730.roa
Signing time:             Wed 16 Aug 2023 18:44:39 +0000
ROA not before:           Wed 16 Aug 2023 18:39:39 +0000
ROA not after:            Wed 14 Aug 2024 18:44:39 +0000
asID:                     267270
IP address blocks:        2804:4ae4:210::/45 maxlen: 45

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:09:1c:31:03:41:18:03:00:07:fe:c5:5b:3c:f9:71:18:70:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Validity
            Not Before: Aug 16 18:39:39 2023 GMT
            Not After : Aug 14 18:44:39 2024 GMT
        Subject: CN=765C6E60F1F0DCC020B649BFFF2EA328C17227B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:c9:4f:b7:6e:d1:71:bc:ec:a2:d9:18:7d:
                    0e:14:c2:a3:c0:eb:d3:fb:c9:2d:3e:67:6a:3c:4e:
                    4e:4c:ed:88:47:20:69:41:51:50:28:af:11:7a:81:
                    11:55:c6:4c:88:eb:88:8b:e7:af:06:20:86:15:5d:
                    16:6a:53:cb:33:25:7e:d6:84:27:6c:99:00:ae:69:
                    72:4e:bd:61:59:aa:63:33:a1:ec:bb:7f:d0:cd:eb:
                    d5:84:a5:58:99:b9:c3:73:13:c1:20:5b:f5:16:5a:
                    e2:6d:ad:81:02:ca:5d:94:44:99:48:3a:f3:64:c8:
                    c0:91:82:c8:d3:c4:dc:8f:0c:17:9c:5c:9f:15:9d:
                    a0:14:18:08:fd:f8:1c:db:29:5f:f6:84:30:27:2d:
                    63:51:08:99:c2:66:bc:7c:37:c3:65:15:ec:13:ab:
                    55:d0:6d:4a:b6:dc:2f:1f:fe:83:67:ba:cb:02:aa:
                    93:62:ef:7d:fc:0b:82:6e:51:dc:e7:dd:13:5f:f1:
                    70:54:a8:cf:35:1c:8a:9c:d2:9d:6f:7c:02:bd:b0:
                    ab:cb:3f:43:1c:30:2e:06:e5:97:81:57:8f:63:e5:
                    15:fe:f8:81:81:73:6a:6b:29:ae:d3:9b:83:8b:b9:
                    88:c9:21:c0:79:a5:a2:a3:bc:c3:04:8d:cb:2c:da:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:6E:60:F1:F0:DC:C0:20:B6:49:BF:FF:2E:A3:28:C1:72:27:B0
            X509v3 Authority Key Identifier:
                keyid:81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3231303a3a2f34352d3435203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4:210::/45

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:af:37:5f:c1:e7:62:de:1f:eb:0e:e7:e3:34:d7:e3:04:
         7e:44:93:dd:91:92:9f:60:c2:01:c1:e4:d4:9c:61:af:79:ae:
         6f:c7:4a:38:98:fb:42:95:62:31:64:d9:43:58:02:6e:6c:7f:
         d2:0f:59:65:d2:e5:29:7e:b9:b1:41:74:92:5e:c7:3d:a4:5b:
         ea:89:45:f9:84:33:90:6a:e8:88:80:9f:7e:f0:19:25:44:1a:
         75:05:bd:fc:13:86:48:7f:ef:89:51:3c:a8:02:65:9f:a8:90:
         8e:c3:a5:01:8b:73:ad:42:e7:e2:01:b4:9a:ad:74:55:ba:e4:
         8f:9b:a8:73:1d:d5:9e:df:e6:57:c2:21:55:11:36:38:45:57:
         00:e6:e8:0e:06:73:93:63:41:5f:2f:17:a4:f5:fe:44:e0:e7:
         e3:7b:70:b0:4f:1c:ad:bf:7c:5e:6b:6c:cf:1c:17:ee:a2:8a:
         72:44:1f:32:f8:54:93:85:76:8f:55:f4:5e:24:b4:6b:ee:57:
         c4:b2:3d:7a:dc:01:62:ba:e6:23:89:75:c0:a0:09:4e:0f:33:
         00:53:3f:40:3d:0e:a0:80:20:4b:78:c1:36:47:17:01:f1:97:
         4e:ad:1b:79:9c:3e:d4:c5:93:a2:63:c5:c7:95:10:df:d8:54:
         01:a5:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----