Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a343030303a3a2f33342d3334203d3e20323638313739.roa
File:                     323830343a353934303a343030303a3a2f33342d3334203d3e20323638313739.roa (raw, json)
Hash identifier:          TGliKgXCP+RBc1CzBE3SUvL5oJlPhW+XlyBy4msS86A=
Subject key identifier:   2F:F6:67:70:43:FD:64:62:36:1A:F5:F2:92:F3:7E:1E:36:6C:5C:61
Certificate issuer:       /CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
Certificate serial:       70BA15A7EB4A25C7E5E302315791240394431CA8
Authority key identifier: 16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a343030303a3a2f33342d3334203d3e20323638313739.roa
Signing time:             Wed 28 Dec 2022 20:37:03 +0000
ROA not before:           Wed 28 Dec 2022 20:32:03 +0000
ROA not after:            Wed 27 Dec 2023 20:37:03 +0000
asID:                     268179
IP address blocks:        2804:5940:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ba:15:a7:eb:4a:25:c7:e5:e3:02:31:57:91:24:03:94:43:1c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
        Validity
            Not Before: Dec 28 20:32:03 2022 GMT
            Not After : Dec 27 20:37:03 2023 GMT
        Subject: CN=2FF6677043FD6462361AF5F292F37E1E366C5C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:de:c4:81:8c:ac:d3:c4:d3:81:68:95:0f:
                    e0:cd:44:5f:4b:eb:4b:c6:01:0f:90:17:8f:cc:f4:
                    5d:12:0c:fd:ec:9a:0b:78:b8:1b:65:02:9e:9e:fd:
                    37:74:f4:ac:a1:5a:79:c1:f3:c7:fc:51:4e:f6:bc:
                    37:66:b8:c7:bb:15:af:8a:24:ac:2f:72:f8:1c:ad:
                    c8:3b:55:f3:64:7b:46:b5:e3:82:50:db:58:7e:94:
                    a9:60:66:ec:b7:f3:74:4a:53:9f:27:7f:e1:21:53:
                    55:b4:6b:9c:e1:7a:72:58:63:9d:60:8a:82:dc:e6:
                    a0:be:ac:29:68:3d:90:9c:43:8b:eb:f6:10:92:41:
                    aa:28:57:6e:77:77:aa:3d:1c:e8:78:1f:2b:48:86:
                    55:b2:6f:8b:24:4f:54:6b:7d:ef:a9:ab:32:ba:dc:
                    b2:ab:3e:1c:a6:64:6d:a3:3d:64:11:13:a1:5f:bc:
                    b7:1e:3a:be:89:66:24:fc:4d:ae:7b:95:eb:24:88:
                    62:41:36:3b:dd:3d:9d:3e:96:4c:05:09:35:ab:65:
                    0e:5c:5b:53:f2:26:26:3c:66:45:25:7c:26:ff:57:
                    94:50:98:e4:71:48:0b:58:c5:26:ee:81:b0:07:2b:
                    a6:68:b4:09:ae:10:35:d7:af:a9:bd:25:5e:91:30:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F6:67:70:43:FD:64:62:36:1A:F5:F2:92:F3:7E:1E:36:6C:5C:61
            X509v3 Authority Key Identifier:
                keyid:16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a343030303a3a2f33342d3334203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5940:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:62:4b:90:9d:72:1c:17:8e:c7:2e:a9:4d:e7:b1:75:da:ed:
         30:41:ba:1f:5a:e3:7e:c0:00:c9:f4:31:11:c7:76:7e:5f:ed:
         f8:d1:c2:c1:4e:7c:2a:da:68:7b:90:68:26:dc:09:0b:eb:c0:
         ea:fd:ef:e1:44:ad:c2:e1:20:56:74:8e:0d:03:c7:d7:4e:da:
         f0:72:17:24:fe:eb:7e:77:27:a3:1d:1c:c2:7f:89:74:4b:7a:
         cf:0b:19:84:a0:7e:a6:a7:00:59:23:3f:d3:39:1d:59:ee:85:
         bb:93:dc:6d:34:31:7e:73:73:4b:15:35:ef:c2:d2:90:5b:4e:
         1c:d8:5d:fa:7c:1d:bb:b1:9e:e5:cf:54:6a:1a:f4:e1:fc:69:
         dd:40:25:14:0b:01:e3:c4:5e:cf:f8:c1:ce:38:8d:d7:3f:25:
         8f:e0:29:38:77:af:75:9b:2c:2a:4a:49:f9:60:72:2d:a5:a7:
         2d:0f:5b:ba:13:22:8e:96:69:36:c6:d0:cd:b2:cf:6b:ab:18:
         4a:07:67:a0:aa:f8:a6:75:8c:dd:54:31:08:48:61:59:73:df:
         37:d8:41:ae:d1:6c:3a:df:7c:e5:01:1b:2e:8e:b1:ba:1b:23:
         49:3d:7c:e5:ae:12:3b:ad:fe:ad:cf:29:9c:2a:6e:90:f4:9a:
         a2:16:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----