Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32322d3232203d3e20323636343839.roa
File:                     3137302e3234342e32342e302f32322d3232203d3e20323636343839.roa (raw, json)
Hash identifier:          F+FXbOCaVh7/tmxOI53EgiB7PaX1TWEdcaCgF9zqTCE=
Subject key identifier:   64:48:7D:05:DE:87:48:60:47:FC:B1:B5:2D:05:80:72:C5:A7:06:D4
Certificate issuer:       /CN=220AE1280604BECE0967859CB7EF5F59A2813C95
Certificate serial:       0130451224593B7276D7E24714AB99313187506F
Authority key identifier: 22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32322d3232203d3e20323636343839.roa
Signing time:             Tue 16 May 2023 12:41:29 +0000
ROA not before:           Tue 16 May 2023 12:36:29 +0000
ROA not after:            Tue 14 May 2024 12:41:29 +0000
asID:                     266489
IP address blocks:        170.244.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:30:45:12:24:59:3b:72:76:d7:e2:47:14:ab:99:31:31:87:50:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE1280604BECE0967859CB7EF5F59A2813C95
        Validity
            Not Before: May 16 12:36:29 2023 GMT
            Not After : May 14 12:41:29 2024 GMT
        Subject: CN=64487D05DE87486047FCB1B52D058072C5A706D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:e6:2c:d6:1b:67:2c:39:e4:5b:eb:cf:d7:
                    fd:81:2c:a2:83:42:b1:ab:29:32:21:d4:0d:6f:ea:
                    c3:ac:c8:43:a0:6b:61:ec:3a:d3:e2:36:08:06:e8:
                    0b:d6:c2:f8:a0:75:d5:1d:7b:c8:5d:c8:68:2e:4c:
                    07:41:ac:4e:e4:b2:03:bd:7c:45:11:4b:fc:ff:f0:
                    bd:82:63:41:9b:80:67:5f:19:24:33:80:0e:4c:3d:
                    0c:d9:45:53:6e:32:79:3e:cc:60:bc:8d:4c:aa:24:
                    9e:7f:ba:f6:4d:ec:e6:4d:91:91:a4:1d:97:13:98:
                    93:2c:72:82:c6:f4:47:a3:d9:3d:72:8a:63:93:ce:
                    0b:3a:f5:88:7b:39:e0:01:3d:d4:13:44:43:09:2f:
                    a8:10:6f:9d:2f:5b:dc:e5:af:4a:52:55:27:35:32:
                    a6:d1:da:9d:cb:46:92:44:6b:27:bd:20:61:46:92:
                    4a:01:26:cf:e1:cf:87:9d:0c:2c:b0:33:a0:c9:1f:
                    80:f1:8b:97:cf:66:94:69:6f:29:1c:c3:7f:20:ee:
                    37:07:4c:c8:a1:78:30:8e:a0:e7:03:22:b6:71:57:
                    6c:b0:9e:9e:b4:91:db:80:57:5d:dc:75:7b:f2:96:
                    fc:1d:a4:be:c9:a6:ef:43:8e:b9:4e:00:bd:a5:1b:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:7D:05:DE:87:48:60:47:FC:B1:B5:2D:05:80:72:C5:A7:06:D4
            X509v3 Authority Key Identifier:
                keyid:22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32322d3232203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:40:1b:84:10:67:2d:66:ea:9f:52:79:6e:13:c8:8f:0e:
         07:ce:ae:90:0f:2d:dd:f2:83:5a:30:54:cb:e2:61:62:3a:5e:
         fb:60:10:8d:c7:0b:26:89:db:07:b0:b2:63:e7:36:87:19:bf:
         55:f5:48:5f:50:88:48:6a:43:84:0c:37:e7:20:11:5c:48:ec:
         93:a2:3d:d3:91:63:d7:4d:df:2f:c8:34:c0:b0:f0:12:d4:f8:
         53:e6:87:ce:4a:b4:e7:7f:a7:0a:46:81:74:7e:a2:3d:62:16:
         a0:b2:00:cf:2e:e9:16:3b:1b:56:37:59:0b:ed:fb:a7:37:7b:
         c8:53:16:55:99:1d:25:e8:75:26:c6:e5:19:04:8d:11:f2:29:
         cf:23:71:33:f4:54:9d:15:7b:a7:fc:14:79:88:68:59:ae:62:
         36:e4:0d:43:0c:c6:ee:ea:ea:d1:35:63:65:9f:d3:5d:c0:47:
         83:a1:22:38:24:7f:aa:d9:83:b6:27:8b:33:93:7d:b5:f9:02:
         c7:c2:39:d3:67:7b:f1:c6:c0:38:59:a2:07:2c:db:d5:9a:e7:
         45:e8:8f:a5:03:78:6d:02:62:85:4e:93:bc:07:31:40:96:ea:
         ff:28:18:ef:91:6c:c3:45:7b:0f:1e:eb:c7:6f:f2:9d:d8:85:
         19:15:5b:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUATBFEiRZO3J21+JHFKuZMTGHUG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIwQUUxMjgwNjA0QkVDRTA5Njc4NTlDQjdFRjVGNTlB
MjgxM0M5NTAeFw0yMzA1MTYxMjM2MjlaFw0yNDA1MTQxMjQxMjlaMDMxMTAvBgNV
BAMTKDY0NDg3RDA1REU4NzQ4NjA0N0ZDQjFCNTJEMDU4MDcyQzVBNzA2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpueYs1htnLDnkW+vP1/2BLKKD
QrGrKTIh1A1v6sOsyEOga2HsOtPiNggG6AvWwvigddUde8hdyGguTAdBrE7ksgO9
fEURS/z/8L2CY0GbgGdfGSQzgA5MPQzZRVNuMnk+zGC8jUyqJJ5/uvZN7OZNkZGk
HZcTmJMscoLG9Eej2T1yimOTzgs69Yh7OeABPdQTREMJL6gQb50vW9zlr0pSVSc1
MqbR2p3LRpJEaye9IGFGkkoBJs/hz4edDCywM6DJH4Dxi5fPZpRpbykcw38g7jcH
TMiheDCOoOcDIrZxV2ywnp60kduAV13cdXvylvwdpL7Jpu9DjrlOAL2lG8rpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZEh9Bd6HSGBH/LG1LQWAcsWnBtQwHwYDVR0j
BBgwFoAUIgrhKAYEvs4JZ4Wct+9fWaKBPJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNOeW0zQWh3REpLYWlzdHcyekIzc2hHU1dNU0E0UGZtNmo5NG9mUFU0
dEIvMC8yMjBBRTEyODA2MDRCRUNFMDk2Nzg1OUNCN0VGNUY1OUEyODEzQzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIyMEFFMTI4MDYwNEJFQ0Uw
OTY3ODU5Q0I3RUY1RjU5QTI4MTNDOTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTnltM0Fod0RKS2Fpc3R3MnpCM3NoR1NXTVNBNFBmbTZqOTRvZlBVNHRCLzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9BgwDQYJKoZIhvcNAQELBQADggEBAJGgQBuE
EGctZuqfUnluE8iPDgfOrpAPLd3yg1owVMviYWI6XvtgEI3HCyaJ2wewsmPnNocZ
v1X1SF9QiEhqQ4QMN+cgEVxI7JOiPdORY9dN3y/INMCw8BLU+FPmh85KtOd/pwpG
gXR+oj1iFqCyAM8u6RY7G1Y3WQvt+6c3e8hTFlWZHSXodSbG5RkEjRHyKc8jcTP0
VJ0Ve6f8FHmIaFmuYjbkDUMMxu7q6tE1Y2Wf013AR4OhIjgkf6rZg7YnizOTfbX5
AsfCOdNne/HGwDhZogcs29Wa50Xoj6UDeG0CYoVOk7wHMUCW6v8oGO+RbMNFew8e
68dv8p3YhRkVW1Q=
-----END CERTIFICATE-----