Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323634323231.roa
File:                     3137372e38342e33382e302f32332d3233203d3e20323634323231.roa (raw, json)
Hash identifier:          iStsoI1biTambYVH+rANXcGvJM2waBd64QatW1xNhqY=
Subject key identifier:   F2:9A:26:FE:64:16:40:69:C6:9A:B7:46:66:B1:59:B2:DF:A9:70:E2
Certificate issuer:       /CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
Certificate serial:       02AB74E3351FD1B3BBD5FA1C3F5B280BCECDCFEC
Authority key identifier: 4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323634323231.roa
Signing time:             Wed 23 Aug 2023 15:37:27 +0000
ROA not before:           Wed 23 Aug 2023 15:32:27 +0000
ROA not after:            Wed 21 Aug 2024 15:37:27 +0000
asID:                     264221
IP address blocks:        177.84.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ab:74:e3:35:1f:d1:b3:bb:d5:fa:1c:3f:5b:28:0b:ce:cd:cf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EA6E0F8825C1688C91572C81C17F1E935C353D8
        Validity
            Not Before: Aug 23 15:32:27 2023 GMT
            Not After : Aug 21 15:37:27 2024 GMT
        Subject: CN=F29A26FE64164069C69AB74666B159B2DFA970E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:8a:b9:9e:f1:bb:34:99:01:fa:03:a2:fa:
                    4e:5e:3c:bf:e0:1b:e3:69:66:3f:cf:42:8f:5a:00:
                    c1:6d:24:75:1d:03:43:4b:6a:b6:29:0c:3c:6b:a7:
                    a2:61:36:41:9a:88:64:74:70:00:d4:f2:6a:b7:79:
                    a4:88:8b:19:ea:e6:1d:6d:73:a2:98:12:d7:38:b5:
                    9b:e0:2b:f9:68:f6:34:0e:cf:8d:f6:70:0c:a0:9f:
                    35:45:6f:7c:ce:a4:ea:8a:a6:a3:66:53:97:e8:ce:
                    c7:b7:2b:77:2f:fd:53:2d:3a:9a:08:e0:74:64:8c:
                    57:10:79:b8:4c:d5:39:fe:73:f5:3c:cb:03:02:31:
                    4a:3a:93:0e:86:c5:c2:f5:76:e9:8c:f2:6c:60:19:
                    90:d6:48:32:4c:89:16:5e:30:78:30:3b:30:f0:73:
                    18:0d:2f:7b:77:0b:03:bf:4e:2e:3f:13:a2:87:ac:
                    ec:f0:27:52:23:d7:bb:3a:dd:a8:15:58:c9:bf:2d:
                    a8:6b:0f:ca:61:56:6d:8c:a1:84:7d:41:5b:ed:52:
                    8a:9c:0b:0b:03:21:6c:71:51:6d:09:c2:f7:87:60:
                    b2:00:a9:48:d9:b2:35:8f:65:62:89:8d:fd:0d:7d:
                    ca:26:f1:ff:99:48:cd:9e:ff:4d:15:00:4a:26:86:
                    c6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9A:26:FE:64:16:40:69:C6:9A:B7:46:66:B1:59:B2:DF:A9:70:E2
            X509v3 Authority Key Identifier:
                keyid:4E:A6:E0:F8:82:5C:16:88:C9:15:72:C8:1C:17:F1:E9:35:C3:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EA6E0F8825C1688C91572C81C17F1E935C353D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32332d3233203d3e20323634323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:0c:65:36:ed:a1:e9:cf:e3:4d:13:24:5a:1e:34:68:5f:41:
         52:7f:dd:de:2a:66:28:5d:05:57:4b:87:b3:43:0f:29:f5:66:
         66:bc:92:25:06:9f:27:89:4c:91:04:3f:17:65:79:ec:67:bd:
         47:9a:54:44:f1:f8:f2:2c:f7:db:8b:33:6f:5d:6e:e5:a8:73:
         a7:1f:2d:cd:0e:0f:24:0f:08:f2:1e:5d:d6:6a:e1:05:ca:5d:
         13:2d:44:10:60:b0:91:e2:56:d4:2a:8f:79:23:98:be:fb:eb:
         2f:09:ba:9a:ea:2e:a6:3f:49:92:4c:14:e3:1e:78:27:88:c1:
         7e:21:b3:41:29:b4:86:40:2d:45:e1:d3:3a:f7:bf:2c:c5:5f:
         2f:06:6a:4f:5b:48:16:c1:3c:f7:4a:16:16:6a:9b:08:2c:ad:
         79:e7:89:29:c5:0b:ae:fe:92:d9:de:55:83:a5:1f:2e:bc:76:
         4d:d9:bb:4d:3b:21:78:b0:82:a1:8b:f0:4a:96:ea:0f:4c:f4:
         a0:70:db:e3:fe:d6:60:b6:46:b1:30:18:bf:34:9e:39:8b:92:
         4c:3b:fe:77:46:79:37:4a:42:38:ae:27:86:c1:d9:70:3e:24:
         64:50:26:3c:da:ed:76:5d:03:fa:cd:33:44:78:99:9e:5e:3e:
         68:8a:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----