Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a6131313a3a2f34382d3438203d3e20323632353838.roa
File:                     323830343a323930343a6131313a3a2f34382d3438203d3e20323632353838.roa (raw, json)
Hash identifier:          +wI2fUkmFkV95/NBOwiJDmTN/oSIy222vE/4M8PwfYg=
Subject key identifier:   35:79:09:73:92:D1:79:7F:CF:D1:A4:A4:D5:FB:2E:61:C5:DC:86:BD
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       45AD6721BEE20747C16A7A9ADEE10FE591EE11EF
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a6131313a3a2f34382d3438203d3e20323632353838.roa
Signing time:             Tue 12 Sep 2023 20:43:44 +0000
ROA not before:           Tue 12 Sep 2023 20:38:44 +0000
ROA not after:            Tue 10 Sep 2024 20:43:44 +0000
asID:                     262588
IP address blocks:        2804:2904:a11::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ad:67:21:be:e2:07:47:c1:6a:7a:9a:de:e1:0f:e5:91:ee:11:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Sep 12 20:38:44 2023 GMT
            Not After : Sep 10 20:43:44 2024 GMT
        Subject: CN=3579097392D1797FCFD1A4A4D5FB2E61C5DC86BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:63:f7:81:dd:54:7f:17:02:d9:e4:b2:b8:
                    65:76:16:4b:a9:d2:2f:81:54:8c:02:73:1d:cf:fe:
                    3e:f7:c2:89:c1:93:84:67:93:e4:14:8d:33:4f:f9:
                    09:60:54:12:6a:55:4d:1a:70:eb:eb:69:76:38:f6:
                    88:1c:59:cc:7e:80:db:f0:09:0a:6d:2e:7a:c8:51:
                    8b:8f:b2:7f:c3:da:cf:f6:e6:3f:eb:cd:64:06:9b:
                    98:59:8c:bd:fd:06:a1:48:ae:a6:8a:0a:72:63:b7:
                    46:dd:b7:49:0d:0b:97:6e:6d:7e:41:fe:1e:b5:9d:
                    71:84:a1:40:de:76:f0:4b:58:02:4a:df:56:b0:53:
                    31:73:d4:52:43:ca:01:e4:17:33:89:71:de:91:6f:
                    e1:a0:b0:7c:9d:a7:30:fa:c9:1d:a2:0b:c9:f5:c1:
                    41:d7:99:47:0e:64:e9:ec:74:ef:54:46:78:75:a7:
                    32:ab:4f:ec:1b:a4:1b:c4:a2:3a:5c:1a:b7:16:ea:
                    6c:b1:db:3b:4c:2b:5c:da:07:90:e4:c2:46:14:2b:
                    42:75:23:89:76:a8:e4:7e:07:83:fa:ee:4f:39:09:
                    ce:de:8e:7f:bc:61:14:06:bb:30:e1:22:38:d0:0a:
                    b2:f2:c5:4e:82:80:b9:3f:17:63:25:4c:e9:a0:78:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:79:09:73:92:D1:79:7F:CF:D1:A4:A4:D5:FB:2E:61:C5:DC:86:BD
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a6131313a3a2f34382d3438203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:a11::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:b6:77:bb:bd:75:d8:e1:73:31:51:64:df:0e:16:ee:dc:
         82:3a:00:9a:77:77:35:d8:a5:69:08:53:ce:bd:40:f7:25:ed:
         d6:4c:06:cf:f0:6b:5f:9f:d1:b7:af:01:99:4b:f3:5c:8f:8b:
         fc:84:ab:7b:2c:e8:a2:17:c8:92:38:64:1e:e5:ad:b5:54:71:
         01:36:77:fb:de:53:d9:6f:8d:0b:5f:d0:be:95:5d:6f:02:2c:
         2d:c6:44:12:d6:49:c5:53:b3:1f:c3:9f:08:3b:67:0f:0e:d2:
         26:33:83:cb:68:44:bc:c6:e7:c5:a3:fe:9e:5a:0a:32:61:db:
         59:b0:20:64:54:cb:aa:ef:9c:7a:14:cf:4e:dc:5b:e8:75:c1:
         7f:c9:43:12:19:37:8a:57:08:b0:b5:fe:1f:8e:ca:f1:9e:78:
         99:49:58:1f:5c:b9:3a:84:38:b0:4d:c8:9d:67:b7:84:be:6a:
         dd:0e:73:90:c7:e1:67:7c:46:78:ac:a1:c3:62:fc:ad:db:b6:
         dc:6a:01:05:bf:1d:d9:bc:1a:49:41:57:42:a6:8e:36:4a:c7:
         9d:56:da:1a:1f:e5:60:33:de:b4:cc:c1:f3:0b:4f:84:a4:50:
         17:58:14:e9:fb:11:f0:b7:49:db:b3:a4:c8:c8:b9:f1:84:e3:
         82:4c:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----