Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/323830343a343336343a3a2f33322d3332203d3e20323637353637.roa
File:                     323830343a343336343a3a2f33322d3332203d3e20323637353637.roa (raw, json)
Hash identifier:          YQJGbz0MHWQcQkJUqPSObFCzeEZj1RuDXRXXXN2Trio=
Subject key identifier:   28:55:FE:F3:22:BC:9A:78:CB:00:43:12:E3:6F:92:F5:EC:95:FF:23
Certificate issuer:       /CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
Certificate serial:       5EB2C4F2FA8DA85D9487A8956449C7E3601AC793
Authority key identifier: 3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/323830343a343336343a3a2f33322d3332203d3e20323637353637.roa
Signing time:             Wed 29 Nov 2023 01:33:03 +0000
ROA not before:           Wed 29 Nov 2023 01:28:03 +0000
ROA not after:            Wed 27 Nov 2024 01:33:03 +0000
asID:                     267567
IP address blocks:        2804:4364::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b2:c4:f2:fa:8d:a8:5d:94:87:a8:95:64:49:c7:e3:60:1a:c7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C042F4CB917EE76AC8D2731C5C1F1868F918B00
        Validity
            Not Before: Nov 29 01:28:03 2023 GMT
            Not After : Nov 27 01:33:03 2024 GMT
        Subject: CN=2855FEF322BC9A78CB004312E36F92F5EC95FF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:4f:fd:ef:90:96:85:10:40:7b:09:e7:6f:
                    60:3f:91:20:72:a9:ae:cf:43:48:16:1e:3a:05:e3:
                    35:ad:0b:1a:f0:76:17:98:65:20:46:1a:76:af:68:
                    8c:23:16:03:8c:d6:ad:d7:f4:3b:5b:49:9c:33:2f:
                    71:b0:b4:7e:76:c7:5d:4c:50:76:a9:97:bb:55:a5:
                    ae:db:7d:c8:a8:32:79:22:14:e9:b6:90:cf:08:72:
                    f8:d8:0b:20:d2:17:12:9b:4a:4d:49:78:a3:4d:95:
                    b6:c9:0a:60:fa:6d:a3:6c:b6:69:ef:3d:90:28:72:
                    1b:c9:72:f1:32:42:1f:28:6d:8b:9e:9b:dc:36:d8:
                    3c:c5:92:ed:1d:4f:d8:3b:44:7b:f7:f8:d7:de:d8:
                    a9:9a:ed:26:54:de:9d:b6:fd:cf:b0:c8:d9:8c:45:
                    df:f8:8e:3f:d2:2d:4b:4f:50:f3:19:7c:0c:b2:07:
                    a3:1e:66:23:1f:34:26:71:36:d9:61:7d:e1:9c:26:
                    0e:91:10:74:c3:93:56:66:46:d7:24:ce:55:6d:03:
                    50:ba:43:18:c9:5f:7f:2e:13:8d:a4:03:11:df:95:
                    ee:6f:e9:9a:e2:bf:98:8a:4a:9c:1b:c9:31:b2:70:
                    a8:5e:6f:2a:68:a6:c3:4d:c3:35:6c:28:8b:28:f7:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:55:FE:F3:22:BC:9A:78:CB:00:43:12:E3:6F:92:F5:EC:95:FF:23
            X509v3 Authority Key Identifier:
                keyid:3C:04:2F:4C:B9:17:EE:76:AC:8D:27:31:C5:C1:F1:86:8F:91:8B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C042F4CB917EE76AC8D2731C5C1F1868F918B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/1/323830343a343336343a3a2f33322d3332203d3e20323637353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4364::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:0a:03:23:e2:e2:48:4a:40:44:bf:c8:ab:8f:eb:3a:c2:
         13:7c:a2:31:95:7c:24:0b:a1:af:f5:c6:d1:ba:a0:f0:ed:5b:
         01:a3:48:83:a2:a6:de:2b:e9:7d:fd:fe:b3:a6:ef:37:f9:86:
         d2:ee:d2:d9:82:7d:58:eb:06:59:c9:08:e5:2d:a4:5b:d8:21:
         5b:b1:7b:9b:f2:5f:03:22:fe:21:90:7f:78:63:8c:e4:4b:84:
         fd:c6:f3:7f:60:46:d1:c1:35:e0:21:e5:5e:42:4a:ac:30:1e:
         1c:9e:44:b3:d9:85:ec:2c:8b:b4:55:00:e5:dd:4f:3f:35:56:
         6d:f3:30:56:9d:54:a2:cf:9a:d3:4f:20:9a:06:95:bb:f2:aa:
         0e:f2:66:f4:46:f1:7a:fd:6f:04:d3:7d:69:ea:23:8e:e3:e9:
         a9:a9:22:a4:91:74:80:49:d7:b2:3c:c6:6a:88:1a:e1:3f:aa:
         22:d6:2b:e4:9e:e2:75:d6:36:26:a6:fc:0a:63:73:9a:22:90:
         28:7d:ae:f1:2f:64:95:cb:65:83:91:0b:64:54:a9:5a:c5:31:
         f3:cd:9e:3f:43:e8:ac:5b:76:0f:bf:f6:fd:c2:4f:95:f7:ca:
         ca:fa:81:34:08:9f:ee:07:b5:24:c2:83:87:e3:55:23:4b:23:
         9f:72:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----