Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34392e3139322f32362d3236203d3e20323632353838.roa
File:                     3137372e37352e34392e3139322f32362d3236203d3e20323632353838.roa (raw, json)
Hash identifier:          GkT7vZR6yiiG/8BliPiZnvYGbuMpIFsZvwOPQVjBKv8=
Subject key identifier:   AD:88:5E:02:F9:00:3C:B3:C4:36:25:0E:ED:71:95:5E:71:0C:6A:A2
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       5AD80504652C92FD49EFC706901FFEAE497A1CE7
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34392e3139322f32362d3236203d3e20323632353838.roa
Signing time:             Sat 17 Dec 2022 11:42:31 +0000
ROA not before:           Sat 17 Dec 2022 11:37:31 +0000
ROA not after:            Sat 16 Dec 2023 11:42:31 +0000
asID:                     262588
IP address blocks:        177.75.49.192/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d8:05:04:65:2c:92:fd:49:ef:c7:06:90:1f:fe:ae:49:7a:1c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Dec 17 11:37:31 2022 GMT
            Not After : Dec 16 11:42:31 2023 GMT
        Subject: CN=AD885E02F9003CB3C436250EED71955E710C6AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d4:8a:20:21:f0:b0:1e:8d:8c:a0:5b:be:d8:
                    e8:0a:c6:d9:c7:90:0b:62:58:27:d8:ab:97:a4:57:
                    32:7d:0a:a8:01:a3:65:fb:5f:28:59:01:18:b6:bd:
                    34:e5:98:0b:70:6f:83:2e:c8:61:fd:ea:af:60:a5:
                    ec:c6:64:f8:7a:3b:0b:71:51:58:20:19:78:51:c5:
                    60:67:f7:b6:9b:2d:4c:37:92:39:1b:26:3a:31:ef:
                    12:b2:32:9c:f5:0d:b4:1f:82:e1:9f:3f:14:68:36:
                    de:9d:93:b9:9b:12:46:53:ca:f2:39:a0:dd:e7:34:
                    4e:a9:8f:48:90:19:9c:7c:57:32:80:b2:0c:3f:9e:
                    f3:7d:d7:28:1d:c1:ae:4c:9a:36:38:9e:a4:70:44:
                    db:e9:a6:36:d9:ab:c8:30:43:d7:76:34:4c:dd:e8:
                    30:52:8f:b3:c8:93:48:e8:6c:59:6a:ab:87:0c:6c:
                    9d:b1:8f:4f:e6:db:07:2d:45:12:53:d2:58:f4:00:
                    83:d4:db:d2:a6:f0:51:b3:ef:33:11:fd:0c:c9:12:
                    a8:4c:82:2a:fe:71:99:7a:87:9f:37:0c:a2:c7:f7:
                    64:95:e7:af:e6:19:2b:6f:c4:ec:7d:46:aa:7c:37:
                    f1:17:7a:85:9f:6d:cb:34:f6:5d:68:61:97:89:8c:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:88:5E:02:F9:00:3C:B3:C4:36:25:0E:ED:71:95:5E:71:0C:6A:A2
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34392e3139322f32362d3236203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.49.192/26

    Signature Algorithm: sha256WithRSAEncryption
         c2:f7:34:84:43:5f:e0:60:fc:8e:18:81:c5:8c:de:06:33:a2:
         15:4b:9d:99:c8:7f:e7:89:be:0d:71:22:75:85:cb:e8:d5:1c:
         fa:93:23:11:c5:49:98:46:f6:bc:59:c1:ff:0b:98:63:da:73:
         7f:6f:be:e3:fa:9d:c3:d9:1e:c3:69:e3:30:0b:a3:b0:6b:bc:
         65:71:c3:d1:06:11:24:9b:a6:d5:a4:75:fa:67:2b:bb:04:f7:
         38:02:45:38:af:b8:ce:be:c5:21:80:05:02:93:53:95:79:2c:
         f4:97:0b:27:bc:98:5f:49:2e:5d:06:ec:75:ce:ed:76:7b:2b:
         4a:00:fa:9c:0a:3b:1b:f0:39:79:55:c5:a4:04:94:24:88:83:
         ac:31:0a:4d:6f:5c:e5:97:49:55:ce:f2:e8:3e:27:c0:dc:02:
         f6:ae:b5:fe:87:e2:7d:16:f4:b4:19:86:e5:40:fc:7c:c6:43:
         55:6b:48:48:de:90:28:5b:e5:f4:20:63:3e:fb:f0:a6:93:03:
         be:72:21:01:64:f8:e0:05:d2:a2:d0:84:93:78:4a:41:d6:9a:
         8f:3e:9c:57:0d:c6:9a:26:71:3f:33:75:84:ed:c8:ec:14:17:
         55:2a:27:6c:df:ef:0c:38:8a:44:9f:8b:25:f6:79:b5:63:2c:
         cd:27:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----