Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e37312e302e302f32302d3230203d3e203238363637.roa
File:                     3137372e37312e302e302f32302d3230203d3e203238363637.roa (raw, json)
Hash identifier:          hMn1XyNXcXY3B7FEEe+x5t74CD1dC0tSW0zELc616d4=
Subject key identifier:   C8:DC:60:08:15:5B:9D:92:B3:21:DF:3C:E8:7F:86:79:84:9F:08:57
Certificate issuer:       /CN=B10C2108505D2DAF88FAF73F54BDEF6BA03F484D
Certificate serial:       618A5C14CD4E21AA5E341DA66BC2242F15EA82CA
Authority key identifier: B1:0C:21:08:50:5D:2D:AF:88:FA:F7:3F:54:BD:EF:6B:A0:3F:48:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10C2108505D2DAF88FAF73F54BDEF6BA03F484D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e37312e302e302f32302d3230203d3e203238363637.roa
Signing time:             Thu 04 May 2023 12:04:06 +0000
ROA not before:           Thu 04 May 2023 11:59:06 +0000
ROA not after:            Thu 02 May 2024 12:04:06 +0000
asID:                     28667
IP address blocks:        177.71.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8a:5c:14:cd:4e:21:aa:5e:34:1d:a6:6b:c2:24:2f:15:ea:82:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10C2108505D2DAF88FAF73F54BDEF6BA03F484D
        Validity
            Not Before: May  4 11:59:06 2023 GMT
            Not After : May  2 12:04:06 2024 GMT
        Subject: CN=C8DC6008155B9D92B321DF3CE87F8679849F0857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:b2:d1:b7:1f:05:dc:92:7c:8b:f7:48:fe:
                    27:a1:bb:9b:c9:d6:0e:6c:18:5b:41:17:bc:25:5f:
                    74:1f:88:8e:f5:4f:e1:b9:d1:9b:78:cc:70:72:12:
                    0c:a7:13:d1:0a:7e:fe:f9:ca:f8:d8:18:e9:1f:98:
                    6c:3a:aa:82:f7:40:ed:65:da:e3:5a:68:53:63:98:
                    46:7c:2b:f0:cc:e1:44:c1:26:f8:60:b3:84:4f:00:
                    8d:6d:a1:a0:5a:37:d5:4c:82:ce:9e:54:36:a8:71:
                    3b:8b:ad:fc:e9:29:40:6f:de:72:a3:e9:8e:66:ba:
                    ee:94:f6:6d:02:ed:67:77:fc:39:cd:61:dd:1d:ab:
                    51:07:60:7c:1a:4d:29:91:ce:a5:06:71:11:28:98:
                    93:23:a6:cf:62:ad:5a:95:2f:8c:f9:3a:d2:37:66:
                    27:43:c9:25:02:0f:23:f0:7c:71:53:06:a8:2d:3e:
                    1f:1e:d8:30:9f:8d:a7:4b:49:cd:fd:81:30:af:72:
                    de:4e:65:5a:d7:95:ec:5a:f6:9d:b4:a1:b5:0b:98:
                    c8:aa:6a:9b:85:4f:65:83:90:e6:a0:97:0f:f9:4a:
                    cc:a5:be:f8:5c:ef:11:df:c3:d0:94:62:9f:9e:0d:
                    ec:b0:6d:b9:b7:52:65:ac:c2:28:38:19:2f:78:53:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DC:60:08:15:5B:9D:92:B3:21:DF:3C:E8:7F:86:79:84:9F:08:57
            X509v3 Authority Key Identifier:
                keyid:B1:0C:21:08:50:5D:2D:AF:88:FA:F7:3F:54:BD:EF:6B:A0:3F:48:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/B10C2108505D2DAF88FAF73F54BDEF6BA03F484D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10C2108505D2DAF88FAF73F54BDEF6BA03F484D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e37312e302e302f32302d3230203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:27:a3:b6:30:09:6e:97:02:ba:14:f6:f7:5b:3a:49:09:0b:
         19:b6:f1:36:f1:77:8d:2b:b9:86:52:3f:4f:b5:70:3b:78:e6:
         cf:0e:3d:c3:85:df:2c:c5:9d:07:7b:ef:1f:cc:42:50:09:4e:
         da:a3:28:f0:aa:4d:3b:82:90:03:03:93:87:17:17:2c:e8:3b:
         7f:e0:d6:a6:e2:9d:51:0e:06:68:46:82:8a:27:37:a2:50:6b:
         a3:ce:c1:a8:4f:6e:96:94:f5:e3:08:e8:5e:36:12:a2:10:af:
         64:97:cb:9a:19:87:44:1e:ab:b3:2e:65:d9:25:80:f5:44:08:
         07:90:64:40:11:2d:5b:93:74:46:8a:a3:73:f7:1a:38:da:1c:
         ea:d7:50:a9:c2:ed:83:b7:4a:99:d4:55:2f:8f:50:7d:b1:7e:
         db:38:f1:ca:9d:de:85:3d:a1:d2:d7:df:00:86:9a:19:2e:1b:
         b8:c7:8d:fb:ea:ce:7e:8a:82:0c:8e:64:99:f1:00:4f:13:53:
         cb:41:5b:1d:d2:ad:99:7e:f9:19:80:42:86:47:52:08:49:72:
         76:88:2c:98:7e:40:09:fc:de:e7:3a:6a:78:af:8a:33:e2:6e:
         6f:9f:74:f4:15:85:b8:e2:41:1b:f0:6b:58:12:da:ac:ef:53:
         0c:34:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----