Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32332d3233203d3e20323636343839.roa
File:                     3137302e3234342e32342e302f32332d3233203d3e20323636343839.roa (raw, json)
Hash identifier:          Uae0lnoT8XCve5YxYvUMIqiPuTqRl/whDCIH9UC08pQ=
Subject key identifier:   E1:72:08:B1:AC:D5:4B:DE:31:31:2D:72:5E:73:4E:BE:8E:5B:66:9E
Certificate issuer:       /CN=220AE1280604BECE0967859CB7EF5F59A2813C95
Certificate serial:       B76E24F7B504D88454D2AF505437C448DDD0EF
Authority key identifier: 22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32332d3233203d3e20323636343839.roa
Signing time:             Tue 16 May 2023 12:41:31 +0000
ROA not before:           Tue 16 May 2023 12:36:31 +0000
ROA not after:            Tue 14 May 2024 12:41:31 +0000
asID:                     266489
IP address blocks:        170.244.24.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b7:6e:24:f7:b5:04:d8:84:54:d2:af:50:54:37:c4:48:dd:d0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE1280604BECE0967859CB7EF5F59A2813C95
        Validity
            Not Before: May 16 12:36:31 2023 GMT
            Not After : May 14 12:41:31 2024 GMT
        Subject: CN=E17208B1ACD54BDE31312D725E734EBE8E5B669E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:45:21:79:dd:00:1b:03:af:d1:89:29:93:
                    b6:b7:f3:9d:12:54:7e:85:02:72:e5:55:82:28:f8:
                    5b:1a:40:6e:97:b5:77:65:bf:f6:3b:24:a5:32:9b:
                    a3:93:c4:55:8d:ce:3e:8d:57:69:b5:31:0c:2e:f8:
                    82:19:ea:40:06:3d:03:74:7d:d6:8a:5e:97:1a:75:
                    cd:8a:ff:9d:77:5c:34:be:25:93:1a:d1:0e:ed:60:
                    34:2a:1a:ad:b3:91:aa:04:d2:a3:52:3d:24:2b:dd:
                    bd:fe:d6:91:e6:94:66:1b:d2:80:f1:71:bb:8d:27:
                    60:63:e0:d2:c4:46:a7:4d:50:32:97:f3:2b:86:23:
                    4f:1b:ec:d0:26:6a:7b:87:d0:d9:b3:4a:02:e8:c6:
                    37:fe:e6:6f:1e:49:95:0f:87:0d:5f:b8:8f:01:4c:
                    23:37:41:62:46:5a:e4:4a:75:93:79:78:a9:d6:2b:
                    f8:e5:df:9c:25:62:d1:70:b8:87:a2:1e:9c:25:36:
                    8f:1f:31:17:28:3c:c4:36:d7:c1:04:20:5f:8c:6a:
                    46:fc:69:66:33:c8:0f:90:3b:87:d5:24:6d:d3:bc:
                    00:e0:2c:f7:da:2d:78:c2:bf:c1:9e:b1:7b:a1:bf:
                    70:1c:cc:4b:47:b3:49:aa:bb:af:e6:a7:80:7f:7f:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:08:B1:AC:D5:4B:DE:31:31:2D:72:5E:73:4E:BE:8E:5B:66:9E
            X509v3 Authority Key Identifier:
                keyid:22:0A:E1:28:06:04:BE:CE:09:67:85:9C:B7:EF:5F:59:A2:81:3C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/220AE1280604BECE0967859CB7EF5F59A2813C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/220AE1280604BECE0967859CB7EF5F59A2813C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/3137302e3234342e32342e302f32332d3233203d3e20323636343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:86:7a:dd:52:31:a6:27:ca:57:85:c1:ba:27:df:b6:fa:0c:
         bb:ed:21:2f:01:c9:d4:3e:24:29:9e:c5:da:0f:86:48:8c:b6:
         07:bf:60:15:45:11:be:32:23:66:70:44:43:98:3a:d3:9c:94:
         24:1b:9c:63:d5:9e:ae:c3:57:8c:12:a9:7e:f9:26:82:bd:4e:
         69:b0:07:bd:89:33:ad:65:db:0d:4e:b5:f5:3d:06:c8:f5:d1:
         b4:50:96:a4:47:b8:5c:0d:c1:71:e3:ab:7b:0b:db:01:61:08:
         04:fa:2a:45:b9:de:39:1f:d7:1d:14:68:55:2d:c4:ad:84:96:
         97:e8:5a:5d:17:30:a5:70:e0:0d:48:98:10:48:e7:e9:e3:8b:
         6c:60:5e:08:2a:c7:26:dc:e1:31:6b:8a:f7:74:a2:68:64:01:
         de:30:7f:cf:ef:19:1e:4b:92:f1:c8:3a:43:1e:81:73:a7:bd:
         7d:18:ae:84:d7:1b:79:30:46:35:a4:15:e1:13:ce:2a:b5:12:
         bc:ba:a6:d3:cf:17:31:9f:7a:3d:47:b3:82:32:6c:2e:e1:6f:
         f6:c3:0c:48:8f:e3:35:b4:c7:73:00:06:6f:9a:22:7d:0b:c8:
         c3:5a:34:d4:60:8b:1b:89:96:8c:23:d3:a6:01:b4:6e:6f:99:
         81:a3:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----