Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32332d3233203d3e203532353932.roa
File:                     3137302e3234372e36342e302f32332d3233203d3e203532353932.roa (raw, json)
Hash identifier:          uTs6cr6RlowiVREE5YMPhEHCrn43QuMWhbaZrCsXxig=
Subject key identifier:   39:94:C2:34:83:4D:6C:F3:D5:48:8A:BA:BB:27:45:37:79:C5:AF:89
Certificate issuer:       /CN=0D17135664EB09ADB08E807D5096D1269D3D5F03
Certificate serial:       2A1A152EC3CBD0E6500305DEBF06F5A1C04384B4
Authority key identifier: 0D:17:13:56:64:EB:09:AD:B0:8E:80:7D:50:96:D1:26:9D:3D:5F:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D17135664EB09ADB08E807D5096D1269D3D5F03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32332d3233203d3e203532353932.roa
Signing time:             Mon 28 Aug 2023 01:44:09 +0000
ROA not before:           Mon 28 Aug 2023 01:39:09 +0000
ROA not after:            Mon 26 Aug 2024 01:44:09 +0000
asID:                     52592
IP address blocks:        170.247.64.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1a:15:2e:c3:cb:d0:e6:50:03:05:de:bf:06:f5:a1:c0:43:84:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D17135664EB09ADB08E807D5096D1269D3D5F03
        Validity
            Not Before: Aug 28 01:39:09 2023 GMT
            Not After : Aug 26 01:44:09 2024 GMT
        Subject: CN=3994C234834D6CF3D5488ABABB27453779C5AF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:06:d0:ac:66:62:69:c3:8a:67:f9:e6:45:
                    f5:9d:d3:e2:48:88:b7:db:99:de:f5:d5:57:11:4c:
                    68:8c:57:69:6f:85:e4:34:f4:35:73:7b:44:cb:e0:
                    79:b1:2c:56:ff:47:52:fd:5a:a6:3d:7a:ba:0a:ee:
                    67:a2:be:f5:34:f1:3e:cd:e1:81:10:b4:56:7f:c8:
                    b4:21:7a:6e:36:d8:b8:b6:7d:fe:96:53:65:2b:2b:
                    7e:79:2c:1a:12:97:bb:cb:08:2f:d6:8d:76:bb:60:
                    05:25:75:b6:bc:e4:6e:11:47:b6:21:fd:7d:63:13:
                    60:ff:68:59:45:e4:9e:a9:d2:49:e7:c5:a7:eb:e2:
                    07:82:14:b6:9c:e3:b8:ca:85:c5:7f:ac:25:29:23:
                    96:5a:e1:3d:7a:96:52:44:e1:6a:c7:d2:93:bd:30:
                    6e:ad:5d:73:f3:0e:6d:4f:9b:c6:fd:67:9b:0f:c1:
                    44:75:b0:7c:3f:ec:82:4f:c5:36:f4:b6:4f:a8:cc:
                    0e:f7:e7:4d:67:af:89:2f:42:74:27:22:48:18:19:
                    05:d5:96:d7:e3:00:66:f0:4a:c5:c0:15:10:09:cc:
                    99:01:29:0f:ab:33:8b:93:b7:e4:c1:80:9e:65:30:
                    99:cd:3c:4b:c2:6c:35:41:c2:b2:bf:4c:86:79:d5:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:94:C2:34:83:4D:6C:F3:D5:48:8A:BA:BB:27:45:37:79:C5:AF:89
            X509v3 Authority Key Identifier:
                keyid:0D:17:13:56:64:EB:09:AD:B0:8E:80:7D:50:96:D1:26:9D:3D:5F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/0D17135664EB09ADB08E807D5096D1269D3D5F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D17135664EB09ADB08E807D5096D1269D3D5F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137302e3234372e36342e302f32332d3233203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:a6:0d:ea:fb:3f:ad:f7:42:41:8b:4e:14:ad:4a:46:04:e9:
         58:7d:f7:a9:6d:76:77:9b:93:e9:23:a4:ff:02:ce:8e:9b:a7:
         8a:f4:5c:84:79:30:22:e8:91:cf:49:32:70:01:93:6b:61:0c:
         f8:c8:88:2c:73:6f:5c:94:6a:6b:86:2a:32:0e:0b:05:07:b4:
         98:ea:39:0c:19:90:f9:37:86:ce:b9:2f:ca:00:1d:ac:69:d4:
         5f:4e:b6:d4:1a:77:f2:d8:af:a5:37:a2:47:f6:24:74:a1:b8:
         cf:38:a7:ce:bb:b2:a6:e7:27:6b:45:29:9a:9d:8d:28:6e:6c:
         02:76:74:e0:3d:4f:de:4b:32:89:fd:f8:20:82:85:95:38:82:
         ce:19:1e:60:dd:a9:35:dc:17:a5:5f:d3:cb:24:1d:f9:00:b7:
         c2:ab:d4:9c:71:61:3d:d4:f5:6e:60:0d:5a:e9:4b:a7:4d:c7:
         78:05:85:1c:b2:97:9c:2f:a8:42:89:79:61:38:6c:3c:9b:d8:
         eb:a7:f0:91:6c:1e:89:0d:d5:a4:13:7e:bf:b4:0a:ba:19:19:
         33:5b:ba:f7:06:87:80:69:4b:3f:9b:df:c7:8d:0d:95:02:99:
         c8:1b:33:76:f7:3c:97:da:72:9c:20:2c:bd:59:65:15:f6:9f:
         5e:2f:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----