Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a3a2f33332d3333203d3e20323638313739.roa
File:                     323830343a353934303a3a2f33332d3333203d3e20323638313739.roa (raw, json)
Hash identifier:          suWLm/ZGR6W6JnEPR6Zyuo6FjcyejD+tEd8QoVq+wFU=
Subject key identifier:   6C:2C:9B:D0:B3:02:92:66:93:13:50:72:C0:D7:DF:D7:B5:41:30:50
Certificate issuer:       /CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
Certificate serial:       1FFC53006AFDDFCB4A8DE2DB6EE21BB6D3C84806
Authority key identifier: 16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a3a2f33332d3333203d3e20323638313739.roa
Signing time:             Wed 28 Dec 2022 20:36:58 +0000
ROA not before:           Wed 28 Dec 2022 20:31:58 +0000
ROA not after:            Wed 27 Dec 2023 20:36:58 +0000
asID:                     268179
IP address blocks:        2804:5940::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:53:00:6a:fd:df:cb:4a:8d:e2:db:6e:e2:1b:b6:d3:c8:48:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E
        Validity
            Not Before: Dec 28 20:31:58 2022 GMT
            Not After : Dec 27 20:36:58 2023 GMT
        Subject: CN=6C2C9BD0B302926693135072C0D7DFD7B5413050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:85:1f:17:e9:7d:0a:82:51:10:d7:e5:a4:
                    5f:e0:cd:9b:2e:1a:3e:7a:0f:aa:fd:db:63:c4:ce:
                    01:c1:66:6e:a4:4a:62:29:41:5e:22:46:0f:6b:59:
                    ab:1c:f9:37:8d:77:5c:09:70:4d:f6:a1:b1:08:e8:
                    95:6b:8e:1a:e1:30:4a:78:57:1c:28:f9:c8:08:ff:
                    52:6c:d3:9a:fb:e2:c4:2a:2d:db:8d:47:aa:6f:e5:
                    36:77:40:61:2c:95:f0:2a:70:43:ab:e3:37:4a:c4:
                    77:cc:54:d0:3a:a0:90:ab:f6:69:35:41:e7:81:b1:
                    2f:2a:b6:14:4d:1f:cb:66:ed:6d:b8:b5:e0:de:37:
                    09:13:ba:1c:c7:29:82:cb:37:18:c0:38:00:1c:75:
                    e1:ad:a9:13:4b:59:63:c7:06:79:72:f3:c8:22:0d:
                    de:5b:27:c6:38:52:54:77:a8:eb:c3:b5:60:7d:0f:
                    8e:b3:b3:dc:71:07:2b:fd:39:ba:8d:dc:40:47:09:
                    31:bd:dc:bb:f6:7e:e2:5c:72:fc:c7:54:ff:04:0a:
                    c4:bc:d0:a6:11:e9:50:c2:65:1d:f7:72:e1:78:1a:
                    4c:e1:0e:4d:0d:3d:20:9f:68:20:f1:21:e8:35:a4:
                    b3:15:b3:9c:90:9e:ce:3a:e0:dc:90:f8:59:49:56:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:9B:D0:B3:02:92:66:93:13:50:72:C0:D7:DF:D7:B5:41:30:50
            X509v3 Authority Key Identifier:
                keyid:16:F6:5E:AA:11:DD:3B:8E:94:D6:6F:07:F5:4C:44:D5:DA:97:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F65EAA11DD3B8E94D66F07F54C44D5DA97A09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/0/323830343a353934303a3a2f33332d3333203d3e20323638313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5940::/33

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:03:d7:f8:bb:3e:5b:79:9e:e1:2b:2d:ea:91:0e:dc:ce:
         11:c1:4f:b5:23:d3:29:45:66:87:10:8b:c0:90:74:c1:b3:01:
         71:f3:e8:50:54:f0:2f:df:e4:2e:24:98:59:28:da:50:5b:7e:
         79:ca:4b:9e:1d:99:91:67:51:8f:e8:5e:91:7b:af:99:c6:a1:
         97:dc:15:50:2f:9b:73:c9:ac:0b:da:c3:23:49:cf:af:90:aa:
         b2:0c:ef:db:88:b4:a0:11:5c:94:c3:d8:a6:be:2b:b9:0f:85:
         12:19:d1:f8:a1:5b:cb:ad:14:02:30:77:f0:39:c8:3d:4e:9a:
         a5:3f:bb:e6:92:73:32:03:d5:55:4d:1a:79:10:a3:80:10:a0:
         00:d3:4f:36:82:bb:57:65:86:4e:04:79:ba:6c:31:9b:25:e8:
         b5:51:a9:6c:a9:c4:47:8e:a4:0e:a0:81:8c:c5:3b:fa:e7:59:
         0d:df:d1:85:d0:bb:52:0f:2d:cd:6f:d0:57:8f:de:88:bd:4f:
         f2:1a:ac:2f:64:10:d9:3b:81:77:c5:41:3b:8a:8f:bc:e5:22:
         f5:95:50:6a:7a:63:a7:da:b7:49:89:14:1c:16:d2:d9:e9:f5:
         f8:2f:83:21:33:b3:37:90:e3:75:b3:43:f4:82:ae:f1:0c:ae:
         36:05:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----