Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33322d3332203d3e20323633393234.roa
File:                     323830343a323764343a3a2f33322d3332203d3e20323633393234.roa (raw, json)
Hash identifier:          duRmzmnydDJpRfO/Y7EX38abLQm10lO/WQhaLhaPPy0=
Subject key identifier:   41:FB:17:43:0B:53:82:56:79:01:81:AA:85:47:18:13:25:ED:0E:CA
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       03D0D9FC9F98A81493872E959AEE7D7EA3D32E19
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33322d3332203d3e20323633393234.roa
Signing time:             Tue 10 Oct 2023 03:11:24 +0000
ROA not before:           Tue 10 Oct 2023 03:06:24 +0000
ROA not after:            Tue 08 Oct 2024 03:11:24 +0000
asID:                     263924
IP address blocks:        2804:27d4::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d0:d9:fc:9f:98:a8:14:93:87:2e:95:9a:ee:7d:7e:a3:d3:2e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:24 2023 GMT
            Not After : Oct  8 03:11:24 2024 GMT
        Subject: CN=41FB17430B538256790181AA8547181325ED0ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:cc:f4:3d:b2:52:0f:37:a7:1c:5c:e0:02:
                    da:8f:98:ef:3e:d8:ff:90:7c:c0:78:a3:b5:8e:33:
                    81:c7:a3:1a:64:f5:33:f9:d9:cc:40:d3:ff:26:9d:
                    9d:b8:b0:1a:bc:14:46:ab:f2:f4:df:53:bc:c4:60:
                    0a:db:fb:a6:e6:6e:ed:00:c4:79:29:8e:b0:67:f4:
                    12:d9:04:5d:ad:96:34:28:74:5b:e0:96:82:f8:6a:
                    51:3d:ae:9a:f1:b5:bb:c6:5f:71:eb:fd:c3:b7:ad:
                    69:f8:26:fb:f6:7b:6c:4d:43:7c:ea:ce:fa:b7:92:
                    12:9b:b3:f3:1f:bb:d7:2d:f2:2b:59:3a:75:8c:bd:
                    1c:1c:78:c9:21:c7:6b:a2:ac:8d:0c:34:d0:c3:bb:
                    05:a7:c9:ec:94:9d:1c:73:77:42:62:80:42:56:a5:
                    31:21:9c:6e:33:c9:b4:2e:d4:ea:62:60:3f:42:35:
                    08:f9:b5:5e:e5:52:53:78:8d:9a:34:34:06:74:81:
                    4d:d0:72:f2:da:19:58:52:d1:94:a1:4b:2b:55:f3:
                    b4:44:3e:ee:9e:93:42:32:1f:31:1b:b5:29:d2:83:
                    a6:36:a7:c3:c9:bf:e6:72:50:dd:89:49:47:ba:2c:
                    c8:44:2f:a2:ef:83:f9:f9:b0:cb:57:60:e7:52:70:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:17:43:0B:53:82:56:79:01:81:AA:85:47:18:13:25:ED:0E:CA
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a3a2f33322d3332203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:bc:6c:39:dd:f3:89:27:0c:20:d7:ef:0c:8e:b6:43:1c:
         47:59:4e:6b:f8:78:c5:f5:7e:50:0a:d9:ab:4f:b5:72:e2:da:
         80:58:86:2b:38:5f:3e:7c:97:6f:8a:e0:78:12:30:a8:93:6d:
         89:ac:18:ca:e6:00:62:7c:ce:c4:82:15:0d:59:f6:60:61:ee:
         37:05:48:83:ed:17:07:dc:67:6e:25:91:99:90:d1:75:6c:cf:
         d4:a9:f4:bd:c6:c7:51:f2:0b:f5:f0:33:f7:c0:37:7a:14:ab:
         1c:70:97:7f:29:43:ac:54:84:be:46:ab:47:5d:a4:47:cb:72:
         7d:83:22:d8:c7:4b:a4:c0:5d:42:b9:48:bb:21:a0:7f:c7:70:
         08:c9:c0:9d:ea:11:bd:a7:5b:70:cd:30:be:c4:84:83:b4:5d:
         4f:3d:49:72:9d:3e:ce:1a:db:65:09:70:8c:97:be:bd:c6:8e:
         1c:32:6b:87:c6:95:0e:0e:93:3d:a0:06:c9:c7:85:b0:d7:87:
         fc:bc:fc:df:8a:b2:ae:10:3d:cf:1d:90:15:2e:5f:ad:89:2a:
         46:f3:50:6c:f4:1f:68:34:8d:4a:a2:66:12:6a:01:0f:cc:6f:
         41:5d:a5:2d:0d:e3:7d:5e:58:6b:af:0f:5c:7d:d6:c2:6a:cd:
         1d:db:65:8f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUA9DZ/J+YqBSThy6Vmu59fqPTLhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDRTNGQzYwMDZGRDhGNDcyRTgwOTEyRjhDNUE5MTNB
NUJCQTdCMTAeFw0yMzEwMTAwMzA2MjRaFw0yNDEwMDgwMzExMjRaMDMxMTAvBgNV
BAMTKDQxRkIxNzQzMEI1MzgyNTY3OTAxODFBQTg1NDcxODEzMjVFRDBFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX8z0PbJSDzenHFzgAtqPmO8+
2P+QfMB4o7WOM4HHoxpk9TP52cxA0/8mnZ24sBq8FEar8vTfU7zEYArb+6bmbu0A
xHkpjrBn9BLZBF2tljQodFvgloL4alE9rprxtbvGX3Hr/cO3rWn4Jvv2e2xNQ3zq
zvq3khKbs/Mfu9ct8itZOnWMvRwceMkhx2uirI0MNNDDuwWnyeyUnRxzd0JigEJW
pTEhnG4zybQu1OpiYD9CNQj5tV7lUlN4jZo0NAZ0gU3QcvLaGVhS0ZShSytV87RE
Pu6ek0IyHzEbtSnSg6Y2p8PJv+ZyUN2JSUe6LMhEL6Lvg/n5sMtXYOdScDRVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQfsXQwtTglZ5AYGqhUcYEyXtDsowHwYDVR0j
BBgwFoAUQM4/xgBv2PRy6AkS+MWpE6W7p7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC80MENFM0ZDNjAwNkZEOEY0NzJFODA5MTJGOEM1QTkxM0E1QkJBN0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwQ0UzRkM2MDA2RkQ4RjQ3
MkU4MDkxMkY4QzVBOTEzQTVCQkE3QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzIzODMwMzQzYTMyMzc2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQn1DANBgkqhkiG9w0BAQsFAAOCAQEApVS8bDnd
84knDCDX7wyOtkMcR1lOa/h4xfV+UArZq0+1cuLagFiGKzhfPnyXb4rgeBIwqJNt
iawYyuYAYnzOxIIVDVn2YGHuNwVIg+0XB9xnbiWRmZDRdWzP1Kn0vcbHUfIL9fAz
98A3ehSrHHCXfylDrFSEvkarR12kR8tyfYMi2MdLpMBdQrlIuyGgf8dwCMnAneoR
vadbcM0wvsSEg7RdTz1Jcp0+zhrbZQlwjJe+vcaOHDJrh8aVDg6TPaAGyceFsNeH
/Lz834qyrhA9zx2QFS5frYkqRvNQbPQfaDSNSqJmEmoBD8xvQV2lLQ3jfV5Ya68P
XH3WwmrNHdtljw==
-----END CERTIFICATE-----