Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa
File:                     323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa (raw, json)
Hash identifier:          6soDbcfWnzz/eQ2EpY3hjYUzpJrTIL9t4WZ+hZU6kXU=
Subject key identifier:   41:C5:17:D5:4B:90:A9:D1:0F:37:E5:3E:4D:10:FD:59:2F:33:1F:07
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       57AECC47B37CAE7A56289649C45FEB31AA8179AE
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     269532
IP address blocks:        2804:6614:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ae:cc:47:b3:7c:ae:7a:56:28:96:49:c4:5f:eb:31:aa:81:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:67:8f:f8:8a:08:de:81:d1:46:9c:91:37:
                    3d:29:f3:62:43:86:41:f4:ce:06:46:eb:cb:30:8a:
                    30:9c:fe:8b:8b:bb:5c:3c:9d:6a:62:ca:81:96:29:
                    2c:63:74:62:41:d7:db:3a:c7:a6:73:f1:6e:43:e7:
                    d8:f7:fd:18:22:01:6e:05:6a:25:90:47:42:cc:0e:
                    44:9f:f4:8a:66:e4:c8:fb:4f:92:86:2d:ba:dc:7c:
                    35:c7:02:b9:bc:fa:5f:2c:26:bd:b6:72:86:ad:9c:
                    a7:1c:b9:4f:50:f2:22:94:95:22:45:bb:ae:83:dd:
                    d4:67:49:fb:96:cb:37:4e:47:f9:8a:6c:6f:9c:c5:
                    da:c4:dd:67:4a:19:db:94:19:56:e4:2d:d3:e4:9f:
                    b4:0b:99:72:74:f0:9c:bc:bf:3d:f6:5d:7f:69:8a:
                    bf:4f:39:65:3e:24:26:f3:97:e2:38:77:b9:bc:b7:
                    31:9e:05:d9:3a:21:b3:19:82:38:94:f2:bb:d6:03:
                    73:84:9d:ce:5b:f7:8c:40:3f:f7:70:af:46:de:41:
                    f5:bb:f3:60:c1:bd:a7:5b:21:1b:63:69:bd:19:77:
                    73:d8:81:69:19:e6:a3:83:b1:fb:c0:69:0b:52:58:
                    ac:bf:d6:b8:a3:69:a1:cd:47:dd:dd:b4:1c:c1:a9:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:17:D5:4B:90:A9:D1:0F:37:E5:3E:4D:10:FD:59:2F:33:1F:07
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a323a3a2f34382d3438203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:20:7c:c0:d3:db:84:0a:3c:3d:7f:cc:0d:6e:04:96:59:
         1d:2a:2b:8f:6c:21:44:80:f2:2a:dc:56:d9:91:3a:11:ce:04:
         19:36:52:81:ba:15:9c:15:ad:96:67:38:11:50:5f:38:21:e0:
         60:d6:05:5e:21:1f:1e:75:1c:42:dc:44:d7:ff:e8:1d:ea:8f:
         ea:23:b5:25:e7:65:cf:d7:b3:de:27:0f:dc:52:17:9c:4d:82:
         0a:9f:00:cc:6c:11:a5:ae:80:c2:a3:7a:4e:b3:6e:96:ea:dc:
         77:22:75:75:f0:63:d0:63:de:8c:29:1a:23:85:57:84:ef:51:
         f3:eb:be:9e:1d:2d:11:05:02:58:f0:7e:28:95:f2:98:7b:7d:
         ac:4a:1b:0f:fc:ef:b9:05:40:97:c5:5e:7a:1f:93:7b:14:7f:
         f4:bf:ce:1c:5d:52:53:e3:68:f0:4a:0b:93:04:c4:f1:58:2b:
         5b:4c:9e:d0:93:e0:a1:1b:09:ab:85:2e:53:d4:07:a2:ec:e6:
         db:6a:c7:4d:e4:fc:61:da:f6:3d:0b:69:70:d6:99:08:88:52:
         ad:9f:4a:56:73:cf:9c:42:89:3f:f1:f2:7f:14:0b:1c:8a:af:
         e9:e2:26:79:f2:59:85:e0:30:0c:2f:19:c3:77:7c:cc:7b:90:
         cc:bc:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----