Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a663930303a313a3a2f36342d3634203d3e20323632353838.roa
File:                     323830343a323930343a663930303a313a3a2f36342d3634203d3e20323632353838.roa (raw, json)
Hash identifier:          e4x2EcXV1HiUqVOLSH1Rf2+eu5Kka3R4bCESGlA2NJk=
Subject key identifier:   03:CE:1A:BA:C0:73:BC:31:7B:C2:BE:67:50:E2:9B:FB:45:74:97:7E
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       5A4588FD550E664CDF7303C6F242C195C771E704
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a663930303a313a3a2f36342d3634203d3e20323632353838.roa
Signing time:             Sat 17 Dec 2022 11:42:55 +0000
ROA not before:           Sat 17 Dec 2022 11:37:55 +0000
ROA not after:            Sat 16 Dec 2023 11:42:55 +0000
asID:                     262588
IP address blocks:        2804:2904:f900:1::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:45:88:fd:55:0e:66:4c:df:73:03:c6:f2:42:c1:95:c7:71:e7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Dec 17 11:37:55 2022 GMT
            Not After : Dec 16 11:42:55 2023 GMT
        Subject: CN=03CE1ABAC073BC317BC2BE6750E29BFB4574977E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:58:1c:58:5b:9d:24:45:d8:b6:16:35:d2:
                    47:2f:3f:1b:c7:7f:45:18:75:5a:07:08:16:bd:48:
                    c4:b3:68:e6:3c:4f:cb:1f:8b:10:55:63:ee:ae:ce:
                    7f:8e:97:39:fc:51:4b:ef:d8:a1:bb:22:4f:ac:06:
                    f6:99:62:c5:63:f0:54:a2:bf:5e:70:0e:17:bf:f6:
                    a2:42:20:e6:c7:e7:58:c3:51:a2:8e:94:5c:ef:c8:
                    6e:cc:bf:fe:2b:5f:6c:35:36:06:1b:7c:71:bb:25:
                    d3:c0:a0:a9:fb:6a:d0:32:4e:ac:db:5e:a1:34:8c:
                    b1:84:a0:8d:7f:c0:b5:4a:ac:bc:b7:4c:ae:a4:77:
                    77:fd:df:16:ed:9c:b5:ea:73:bb:fb:13:c0:07:64:
                    42:80:da:88:3d:f9:71:19:46:ff:63:f4:b2:4d:73:
                    ae:3b:38:5d:30:ec:a9:03:3c:fb:d1:07:a9:f9:bf:
                    40:b5:c0:2f:e4:37:d7:4d:1d:3c:7f:06:84:de:37:
                    76:8e:5e:90:d6:ce:02:f5:bf:99:2d:1a:66:ed:9f:
                    59:11:9c:63:5c:eb:f7:d1:a4:10:65:4d:4f:7e:2c:
                    4f:48:07:1a:e7:c1:3e:f2:e9:4d:30:b0:53:47:32:
                    66:0d:a8:74:5d:14:01:50:9e:f2:24:3b:61:04:ff:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CE:1A:BA:C0:73:BC:31:7B:C2:BE:67:50:E2:9B:FB:45:74:97:7E
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a663930303a313a3a2f36342d3634203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904:f900:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         06:3f:63:04:98:38:e1:91:86:61:f7:c1:ed:d2:0c:1c:eb:65:
         eb:43:77:1e:d4:69:29:c7:96:1d:47:11:ff:68:5c:46:76:26:
         a0:26:17:2f:65:e5:60:4c:a6:0b:86:ac:b1:3c:c4:b2:bf:8b:
         a6:4b:fe:9c:e0:bd:48:91:95:f7:ab:d5:dc:77:3f:9a:0d:d3:
         84:18:93:02:a7:85:5e:71:be:29:e0:ca:6a:70:93:9d:4b:51:
         e6:9f:e4:c7:dc:fb:c9:61:4a:d0:b6:62:20:de:3a:ee:f0:cc:
         0f:36:4d:89:34:4c:83:c2:53:38:7c:d2:1e:92:39:06:3a:f8:
         94:32:ed:0d:06:54:c7:a5:eb:6b:3d:46:09:c5:2f:22:ab:bf:
         10:a0:06:26:75:41:44:d1:1b:bf:3e:0e:a9:67:cc:d8:62:c2:
         46:ee:17:05:8b:f0:46:74:71:c8:8f:a0:3a:d7:a1:a4:03:a1:
         6b:69:05:23:12:63:9e:18:1d:ec:df:fa:44:ab:4b:8c:c4:4e:
         03:22:4a:a9:e4:46:20:3e:4b:d2:5e:60:80:82:38:91:66:33:
         57:5b:f8:12:d3:ea:f9:6c:8f:b9:60:52:96:d3:95:6c:aa:92:
         5e:13:32:38:18:2a:12:f9:36:95:0c:74:fc:77:1a:58:61:4a:
         4f:80:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----