Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3a2f33322d3332203d3e20323634343931.roa
File:                     323830343a323037343a3a2f33322d3332203d3e20323634343931.roa (raw, json)
Hash identifier:          nLVHzqozgwrZp9l9jZLiOdCwrqZ6UJaVul4LuuvxDgA=
Subject key identifier:   A2:ED:13:8F:68:E1:B0:DB:5A:60:D5:F9:BF:E2:B0:1E:A6:96:66:EB
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       9419082DB009E531CE3F5EBA33B4DB9E5BE73E
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3a2f33322d3332203d3e20323634343931.roa
Signing time:             Tue 10 Oct 2023 03:11:25 +0000
ROA not before:           Tue 10 Oct 2023 03:06:25 +0000
ROA not after:            Tue 08 Oct 2024 03:11:25 +0000
asID:                     264491
IP address blocks:        2804:2074::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:19:08:2d:b0:09:e5:31:ce:3f:5e:ba:33:b4:db:9e:5b:e7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:25 2023 GMT
            Not After : Oct  8 03:11:25 2024 GMT
        Subject: CN=A2ED138F68E1B0DB5A60D5F9BFE2B01EA69666EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:21:2f:04:e8:96:76:8e:4b:1e:f9:3b:28:64:
                    0a:28:02:dd:52:57:54:ad:6e:99:8f:da:1f:77:89:
                    83:4e:b8:dc:6f:bd:98:07:f7:22:d0:e1:da:53:ca:
                    aa:a5:4e:89:af:6c:9b:c6:34:bc:37:8f:1f:6c:36:
                    97:65:73:31:47:a5:a7:d6:b7:f5:fd:1e:6c:45:b8:
                    44:64:53:41:a6:cc:82:5b:c1:ca:f0:5c:66:8c:26:
                    a5:79:80:a3:b8:46:1b:bf:36:55:eb:ef:40:98:f5:
                    ea:5b:51:65:a7:57:7e:6f:68:f3:2f:51:72:b9:4c:
                    63:68:39:78:75:d5:14:b6:93:fe:04:8f:39:2f:39:
                    9e:95:ba:4e:b1:f7:e8:83:f3:e2:64:0a:c8:81:84:
                    c6:45:49:cc:23:ed:c4:60:99:d0:51:c8:bb:a6:80:
                    83:55:66:86:15:9d:1b:33:1e:11:44:5c:a4:95:b5:
                    a1:e6:70:aa:88:b4:58:9e:fe:ff:1d:8f:f1:6f:ad:
                    60:a7:c5:d9:8e:11:c5:42:1c:67:0d:ad:3c:09:7d:
                    15:fc:df:55:45:92:ea:db:84:0c:11:bb:ed:bd:50:
                    b6:3f:c0:02:8a:0b:b5:2b:c4:47:20:bf:11:43:28:
                    b1:56:88:fa:1f:aa:7d:c6:a2:b9:42:3f:63:af:ff:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:ED:13:8F:68:E1:B0:DB:5A:60:D5:F9:BF:E2:B0:1E:A6:96:66:EB
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3a2f33322d3332203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:74:a5:00:25:b7:aa:7d:65:c0:14:13:a3:bd:b2:5f:a5:fb:
         0b:d9:69:88:4a:44:08:58:8e:f2:9a:8a:4c:be:45:14:55:a6:
         01:48:44:ab:45:ca:04:84:ba:a3:d4:bf:c8:f2:a0:3a:67:29:
         81:1b:29:f1:4d:4e:aa:85:86:5d:16:f7:73:3d:db:37:70:82:
         a3:1b:a1:95:cf:d3:0d:20:bc:2f:c1:d3:f7:9a:fd:d0:ca:aa:
         bc:e8:33:0a:c7:3e:2f:69:8d:7a:f0:e9:b9:a6:6d:93:e7:0f:
         b5:87:84:84:30:4e:45:dd:d5:97:c2:73:0d:23:bc:ae:cb:e4:
         24:e4:38:81:c1:85:25:dd:03:6e:94:ff:2e:6a:e3:ff:87:db:
         56:56:1b:57:b6:39:aa:1e:9b:77:e5:b1:b2:6f:db:a2:8c:f5:
         c2:7d:cd:29:17:cb:3c:73:cf:8d:6b:49:c5:0e:1b:05:9c:29:
         f9:b0:fa:68:aa:cd:25:68:21:2b:b4:5a:3c:5d:15:8d:f7:5a:
         2c:43:71:1e:c2:75:22:e2:ef:6a:a5:52:8d:56:51:c3:56:cc:
         64:61:12:1b:94:73:e7:0b:9d:4f:70:40:74:21:74:24:a7:c2:
         1e:d1:4e:62:6f:3d:b3:8c:b1:ce:2a:52:e1:b8:d6:13:d5:f1:
         5f:3d:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----