Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3332203d3e20323637323439.roa
File:                     323830343a346139303a3a2f33322d3332203d3e20323637323439.roa (raw, json)
Hash identifier:          BTAd8FXp3FVxzsMuC2R78mQImjGpFZCrl9VhxBi95yo=
Subject key identifier:   5E:1E:47:5D:06:53:81:49:E8:4A:4B:1F:43:27:B3:A6:E0:00:D2:E7
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       702ACAE3F57CAF30346919EB6429A99F9A93B94D
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3332203d3e20323637323439.roa
Signing time:             Thu 15 Feb 2024 13:49:27 +0000
ROA not before:           Thu 15 Feb 2024 13:44:27 +0000
ROA not after:            Thu 13 Feb 2025 13:49:27 +0000
asID:                     267249
IP address blocks:        2804:4a90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 13:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2a:ca:e3:f5:7c:af:30:34:69:19:eb:64:29:a9:9f:9a:93:b9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Feb 15 13:44:27 2024 GMT
            Not After : Feb 13 13:49:27 2025 GMT
        Subject: CN=5E1E475D06538149E84A4B1F4327B3A6E000D2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:62:52:84:11:16:64:2e:43:1a:0d:86:5e:
                    94:b3:07:20:9a:40:32:79:25:49:f0:0c:9e:5a:43:
                    2b:b5:62:83:53:c3:1d:9c:86:42:d2:9f:1f:ea:d2:
                    b3:40:dc:b7:d5:16:43:38:1f:35:1f:a5:ff:25:24:
                    73:7f:99:af:06:a7:02:c4:dd:ce:58:23:c6:7b:a3:
                    f6:1d:c7:3a:b8:0d:f1:a4:e1:85:96:8b:5a:74:da:
                    e1:bc:02:d5:38:5d:f7:13:82:c8:78:3f:95:a8:65:
                    81:ea:ba:02:ce:53:d9:3d:5d:a9:4d:02:29:d1:0c:
                    4a:8a:d7:5c:f4:df:35:5e:22:08:7f:f7:e1:42:b7:
                    52:bf:9e:b7:f4:d7:e5:c6:c1:79:62:03:3d:ce:dc:
                    f3:af:f7:53:71:5a:8c:2b:54:04:48:cd:3a:48:67:
                    bf:53:18:e7:1a:1f:2e:33:91:68:46:60:40:cb:33:
                    af:20:f0:a0:e9:84:15:0c:e8:72:75:c7:78:9f:5f:
                    db:a7:9e:6e:de:89:1b:f3:e7:6b:62:55:71:0a:68:
                    47:f6:ed:1c:9b:bc:e1:92:e8:8d:9e:e9:57:ef:8a:
                    40:a2:a1:56:17:98:36:c0:0c:bb:42:7a:de:c7:a8:
                    2c:ce:8b:39:82:42:27:b1:d5:81:b1:52:8e:23:03:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1E:47:5D:06:53:81:49:E8:4A:4B:1F:43:27:B3:A6:E0:00:D2:E7
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/323830343a346139303a3a2f33322d3332203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:55:6c:85:ee:2d:ad:14:0f:1d:6f:11:9b:c5:aa:d8:ab:e2:
         b6:cf:56:e5:26:0c:3d:23:69:8f:4f:73:61:08:be:b5:16:d5:
         fc:3c:7b:3a:24:ef:cd:f4:c4:1b:8e:c7:c8:da:79:ae:a7:39:
         66:b4:df:e3:0d:e2:f6:48:72:e6:c8:81:19:7f:1b:b8:bd:69:
         92:de:06:3b:c6:8e:0f:82:71:84:95:e1:6f:7d:08:ed:17:69:
         e5:13:5f:11:e4:0a:7e:ba:dc:47:cb:b3:a4:ad:ba:b0:16:f6:
         3e:37:50:9b:6c:99:0e:bb:28:83:42:0c:68:85:8a:4b:bf:09:
         1a:fd:5a:39:74:58:da:0b:04:aa:e7:dc:f8:b3:40:2b:62:17:
         a9:56:26:87:f4:f9:f5:79:82:87:7c:2b:ce:a0:4b:58:66:fc:
         11:52:88:f0:f0:eb:16:b5:cc:41:2d:9a:72:41:9b:6e:ed:7a:
         eb:73:2d:5a:32:ca:a7:a7:21:2e:1d:36:9b:b7:a2:c5:ba:0c:
         77:3f:77:ad:b1:d6:03:7f:1a:c5:41:5e:8f:cc:5f:08:1f:94:
         c0:1c:e2:9a:8c:20:90:8a:75:04:0a:19:bb:d1:ae:08:98:f3:
         2c:5a:11:a1:d7:c6:89:7e:ce:15:20:84:e8:a4:4b:ef:1e:39:
         9e:17:cd:c1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcCrK4/V8rzA0aRnrZCmpn5qTuU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThEODYwQjQyMkVDQzI3QjBGRTQ2NzJDNjI1NEQzRDEy
MkUxNUY2MDAeFw0yNDAyMTUxMzQ0MjdaFw0yNTAyMTMxMzQ5MjdaMDMxMTAvBgNV
BAMTKDVFMUU0NzVEMDY1MzgxNDlFODRBNEIxRjQzMjdCM0E2RTAwMEQyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+2JShBEWZC5DGg2GXpSzByCa
QDJ5JUnwDJ5aQyu1YoNTwx2chkLSnx/q0rNA3LfVFkM4HzUfpf8lJHN/ma8GpwLE
3c5YI8Z7o/Ydxzq4DfGk4YWWi1p02uG8AtU4XfcTgsh4P5WoZYHqugLOU9k9XalN
AinRDEqK11z03zVeIgh/9+FCt1K/nrf01+XGwXliAz3O3POv91NxWowrVARIzTpI
Z79TGOcaHy4zkWhGYEDLM68g8KDphBUM6HJ1x3ifX9unnm7eiRvz52tiVXEKaEf2
7RybvOGS6I2e6VfvikCioVYXmDbADLtCet7HqCzOizmCQiex1YGxUo4jA42dAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXh5HXQZTgUnoSksfQyezpuAA0ucwHwYDVR0j
BBgwFoAU6NhgtCLswnsP5GcsYlTT0SLhX2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGttb2lxN2hINFF0YXJLTmtZTU5UdVVMamJLYTdoNzFqdnJmV3l1RzY1
NlUvMC9FOEQ4NjBCNDIyRUNDMjdCMEZFNDY3MkM2MjU0RDNEMTIyRTE1RjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4RDg2MEI0MjJFQ0MyN0Iw
RkU0NjcyQzYyNTREM0QxMjJFMTVGNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrbW9pcTdoSDRRdGFyS05rWU1OVHVVTGpiS2E3aDcxanZyZld5dUc2NTZVLzAv
MzIzODMwMzQzYTM0NjEzOTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzIzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARKkDANBgkqhkiG9w0BAQsFAAOCAQEAaFVshe4t
rRQPHW8Rm8Wq2Kvits9W5SYMPSNpj09zYQi+tRbV/Dx7OiTvzfTEG47HyNp5rqc5
ZrTf4w3i9khy5siBGX8buL1pkt4GO8aOD4JxhJXhb30I7Rdp5RNfEeQKfrrcR8uz
pK26sBb2PjdQm2yZDrsog0IMaIWKS78JGv1aOXRY2gsEqufc+LNAK2IXqVYmh/T5
9XmCh3wrzqBLWGb8EVKI8PDrFrXMQS2ackGbbu1663MtWjLKp6chLh02m7eixboM
dz93rbHWA38axUFej8xfCB+UwBzimowgkIp1BAoZu9GuCJjzLFoRodfGiX7OFSCE
6KRL7x45nhfNwQ==
-----END CERTIFICATE-----