Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/323830343a3832633a3a2f33322d313238203d3e20323632333535.roa
File:                     323830343a3832633a3a2f33322d313238203d3e20323632333535.roa (raw, json)
Hash identifier:          UZ8wWrheStqEFmY/pA23l+8tUDNpYnYGV76Ys3OFM44=
Subject key identifier:   57:F2:64:D3:1E:13:50:10:23:94:E2:94:6A:00:77:3D:FE:33:61:C1
Certificate issuer:       /CN=F4BE2DD457247166D80DC68E8A77C69278A39E0A
Certificate serial:       6C8587B20989F8C939AF62FF124ADF0E9027830E
Authority key identifier: F4:BE:2D:D4:57:24:71:66:D8:0D:C6:8E:8A:77:C6:92:78:A3:9E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/323830343a3832633a3a2f33322d313238203d3e20323632333535.roa
Signing time:             Tue 22 Aug 2023 18:15:33 +0000
ROA not before:           Tue 22 Aug 2023 18:10:33 +0000
ROA not after:            Tue 20 Aug 2024 18:15:33 +0000
asID:                     262355
IP address blocks:        2804:82c::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:85:87:b2:09:89:f8:c9:39:af:62:ff:12:4a:df:0e:90:27:83:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4BE2DD457247166D80DC68E8A77C69278A39E0A
        Validity
            Not Before: Aug 22 18:10:33 2023 GMT
            Not After : Aug 20 18:15:33 2024 GMT
        Subject: CN=57F264D31E1350102394E2946A00773DFE3361C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:55:95:5a:88:05:6d:02:38:fc:8f:40:41:
                    67:ca:fc:9c:46:c4:c6:73:fa:32:74:f3:38:c2:a7:
                    d8:68:e3:f5:54:ee:bb:cc:f8:3b:7a:38:68:5a:b8:
                    4a:9b:de:7d:7c:3d:1b:43:e5:28:5b:6a:04:b8:66:
                    c0:9a:1e:80:e1:51:f3:e3:bf:ce:49:e8:f5:73:1e:
                    28:ba:82:06:65:74:cf:50:bc:7c:91:3c:76:fe:17:
                    39:94:47:43:a0:37:58:dc:0b:24:77:31:ad:7b:5e:
                    1a:40:32:ab:5e:51:74:63:3c:8a:3d:37:c8:b8:e5:
                    5f:0a:fa:10:82:21:9b:90:a8:0f:5c:30:82:8a:c5:
                    1a:0a:b1:dc:6d:04:99:bf:0a:bd:57:ca:ce:af:d8:
                    6d:f9:59:97:fa:21:17:a3:e6:8c:19:fc:9b:0f:3f:
                    7b:61:37:d7:d6:7f:07:5d:a0:ad:64:8f:29:af:c7:
                    36:9e:42:22:3c:f3:46:1a:48:e3:2b:50:be:3f:0c:
                    36:95:57:5b:e1:a6:42:48:32:20:d4:b9:6b:8b:d2:
                    e5:74:da:bd:92:c8:ed:c9:cf:12:49:cb:92:79:ca:
                    a6:bd:aa:34:ec:30:4f:4d:6a:e6:bd:3c:6f:9c:fa:
                    d7:10:88:0b:16:92:9d:ca:38:10:3e:60:13:fd:c4:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F2:64:D3:1E:13:50:10:23:94:E2:94:6A:00:77:3D:FE:33:61:C1
            X509v3 Authority Key Identifier:
                keyid:F4:BE:2D:D4:57:24:71:66:D8:0D:C6:8E:8A:77:C6:92:78:A3:9E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4BE2DD457247166D80DC68E8A77C69278A39E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/323830343a3832633a3a2f33322d313238203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:eb:6d:da:ab:67:cb:20:61:eb:57:01:5f:21:72:9b:a3:
         1b:b6:a5:97:fc:26:3f:0c:8f:9f:f2:c2:b3:ec:e4:dd:ff:89:
         d6:36:40:b8:f2:6c:06:aa:55:1f:28:66:53:9b:ea:84:fb:94:
         f4:49:89:80:d4:f8:b5:54:6d:8b:c5:22:f2:16:1e:bd:70:59:
         c8:d4:e4:db:08:8f:00:7c:7d:bf:dd:ab:41:be:ed:36:ba:86:
         05:8f:54:8b:c9:c5:eb:c4:78:c6:40:09:58:8e:68:ca:62:0d:
         fe:aa:9c:5d:ad:93:6f:91:2c:d0:f6:a7:ff:e5:5b:e8:4a:eb:
         bd:ea:49:fb:94:ca:ac:29:5c:8a:72:0f:f5:85:ef:9d:77:0c:
         a5:d8:a4:ae:16:35:9a:2b:51:07:6a:46:0e:55:eb:22:bc:af:
         cd:bd:3d:7e:08:be:c2:4d:5b:21:eb:64:15:88:34:8a:57:eb:
         39:ed:e6:6f:79:78:ba:ea:50:82:09:d9:52:9b:4d:23:92:21:
         b2:e3:bb:d6:b7:d4:30:0c:cb:92:ad:44:37:50:a3:c3:c9:ec:
         a5:1f:c3:1f:9b:d9:3b:4d:57:d2:d9:68:d9:b7:96:35:3c:5b:
         b3:f1:0b:9b:fb:9b:31:94:82:d8:53:b4:cc:78:06:66:1b:7f:
         1e:b8:85:ee
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbIWHsgmJ+Mk5r2L/EkrfDpAngw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRCRTJERDQ1NzI0NzE2NkQ4MERDNjhFOEE3N0M2OTI3
OEEzOUUwQTAeFw0yMzA4MjIxODEwMzNaFw0yNDA4MjAxODE1MzNaMDMxMTAvBgNV
BAMTKDU3RjI2NEQzMUUxMzUwMTAyMzk0RTI5NDZBMDA3NzNERkUzMzYxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOD1WVWogFbQI4/I9AQWfK/JxG
xMZz+jJ08zjCp9ho4/VU7rvM+Dt6OGhauEqb3n18PRtD5ShbagS4ZsCaHoDhUfPj
v85J6PVzHii6ggZldM9QvHyRPHb+FzmUR0OgN1jcCyR3Ma17XhpAMqteUXRjPIo9
N8i45V8K+hCCIZuQqA9cMIKKxRoKsdxtBJm/Cr1Xys6v2G35WZf6IRej5owZ/JsP
P3thN9fWfwddoK1kjymvxzaeQiI880YaSOMrUL4/DDaVV1vhpkJIMiDUuWuL0uV0
2r2SyO3JzxJJy5J5yqa9qjTsME9Naua9PG+c+tcQiAsWkp3KOBA+YBP9xAT5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUV/Jk0x4TUBAjlOKUagB3Pf4zYcEwHwYDVR0j
BBgwFoAU9L4t1FckcWbYDcaOinfGknijngowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZnTG1mMTNrQVBwUGpFMlVlTVIyd1BDZkQzQUVmNW9hbkNGN28xWHBt
dXYvMC9GNEJFMkRENDU3MjQ3MTY2RDgwREM2OEU4QTc3QzY5Mjc4QTM5RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0QkUyREQ0NTcyNDcxNjZE
ODBEQzY4RThBNzdDNjkyNzhBMzlFMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGZ0xtZjEza0FQcFBqRTJVZU1SMndQQ2ZEM0FFZjVvYW5DRjdvMVhwbXV2LzAv
MzIzODMwMzQzYTM4MzI2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQILDANBgkqhkiG9w0BAQsFAAOCAQEAo7nrbdqr
Z8sgYetXAV8hcpujG7all/wmPwyPn/LCs+zk3f+J1jZAuPJsBqpVHyhmU5vqhPuU
9EmJgNT4tVRti8Ui8hYevXBZyNTk2wiPAHx9v92rQb7tNrqGBY9Ui8nF68R4xkAJ
WI5oymIN/qqcXa2Tb5Es0Pan/+Vb6ErrvepJ+5TKrClcinIP9YXvnXcMpdikrhY1
mitRB2pGDlXrIryvzb09fgi+wk1bIetkFYg0ilfrOe3mb3l4uupQggnZUptNI5Ih
suO71rfUMAzLkq1EN1Cjw8nspR/DH5vZO01X0tlo2beWNTxbs/ELm/ubMZSC2FO0
zHgGZht/HriF7g==
-----END CERTIFICATE-----