Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d3332203d3e20323634393534.roa
File:                     323830343a333037633a3a2f33322d3332203d3e20323634393534.roa (raw, json)
Hash identifier:          t47Nap0KtJ4a4gr8zIxzRAqyDjWELSTN1fT87St0COA=
Subject key identifier:   30:5C:F2:96:80:1D:ED:1E:E9:54:EC:A6:B5:BF:1F:1F:41:11:AE:C7
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       4D3943F0A968039A17179A7CCF23E4B001009841
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d3332203d3e20323634393534.roa
Signing time:             Tue 26 Sep 2023 20:01:49 +0000
ROA not before:           Tue 26 Sep 2023 19:56:49 +0000
ROA not after:            Tue 24 Sep 2024 20:01:49 +0000
asID:                     264954
IP address blocks:        2804:307c::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:39:43:f0:a9:68:03:9a:17:17:9a:7c:cf:23:e4:b0:01:00:98:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Sep 26 19:56:49 2023 GMT
            Not After : Sep 24 20:01:49 2024 GMT
        Subject: CN=305CF296801DED1EE954ECA6B5BF1F1F4111AEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:13:77:5b:4f:73:e8:d1:4e:47:88:9a:40:d5:
                    d6:28:e8:a0:14:b1:a5:8c:c7:88:24:95:90:2c:6b:
                    1a:de:a2:18:d4:7f:1e:78:16:3a:0e:46:b0:fc:bb:
                    41:a5:61:5c:d0:49:b3:52:bb:a7:23:2e:10:b0:9e:
                    df:b1:0f:ed:9a:c6:a1:89:a9:05:c0:a2:7e:67:b5:
                    40:8e:f0:e8:7c:5d:92:94:5d:f0:60:34:5a:18:a2:
                    e0:99:ae:8f:50:b6:23:95:19:b3:35:a9:29:8d:5f:
                    ef:5b:e9:a5:b4:f4:7f:57:f6:31:29:18:82:64:ea:
                    c6:c6:93:58:b1:53:01:47:0c:48:f1:21:41:64:5f:
                    72:3b:a5:1a:51:fc:6d:4b:b2:00:d4:ba:5f:e6:0f:
                    82:05:0b:7a:7d:97:59:f7:8b:90:18:1a:8d:92:80:
                    b0:c7:cb:79:71:62:d5:7a:fe:32:66:25:69:c6:42:
                    6c:71:84:67:95:01:e4:22:9b:eb:61:3c:9d:43:63:
                    66:a9:31:88:02:ea:c8:69:4c:0a:6b:7a:63:56:ba:
                    f5:56:7d:1d:9d:f3:77:bc:9a:7e:05:99:be:2e:67:
                    c7:c5:bd:11:6b:8d:67:e3:5a:47:10:67:92:76:bc:
                    07:a4:7d:04:95:61:88:43:84:01:e9:1e:71:10:3e:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:F2:96:80:1D:ED:1E:E9:54:EC:A6:B5:BF:1F:1F:41:11:AE:C7
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a3a2f33322d3332203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:307c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:fb:79:23:44:41:5a:b4:20:73:5a:c8:43:b4:e0:3f:89:
         32:9d:9c:10:49:a6:26:f8:13:40:89:21:e8:06:d8:bf:84:4a:
         81:2d:78:2e:51:61:ea:e3:a2:3b:c4:b6:6e:34:7b:ba:18:cf:
         bd:d5:6b:7c:54:a0:a1:e5:a8:75:b4:e7:35:17:91:eb:83:f9:
         d4:af:21:b5:30:57:dc:80:03:73:d2:c9:43:65:b6:40:5b:18:
         69:34:2d:b4:fd:55:de:a3:59:65:68:95:84:3b:1b:c1:a4:7f:
         71:e1:f5:9d:cc:11:bc:39:5f:37:1a:12:27:e5:5a:5e:ed:13:
         2a:2d:09:63:f8:d9:98:77:c2:ff:41:f7:6d:61:cc:62:df:14:
         bd:de:08:a2:1c:02:03:6e:87:d4:6d:3c:88:1a:14:8b:4f:55:
         e6:23:4b:66:5c:2b:0e:19:20:f6:0c:b5:14:c0:ca:9e:08:d7:
         96:f4:91:4e:9f:b4:b2:f6:86:b1:7c:88:09:62:05:b7:b4:d1:
         07:94:f1:35:3a:9e:ca:a9:b5:f2:6f:4a:6a:f5:46:65:d8:69:
         57:1e:05:bb:7e:e4:c9:f3:9d:b6:79:0a:1a:c5:39:d0:4d:ff:
         67:fa:8d:31:23:b4:03:38:7a:c6:3d:50:57:97:00:09:ea:d0:
         2f:ea:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----