Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa
File:                     34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          uYM8vlu9qmsApxZQxmmLNGOZsIy6knTI+e4Rd4FUfMI=
Subject key identifier:   68:86:3E:1E:25:85:44:9E:74:94:11:B3:28:13:02:2C:5C:97:9C:9B
Certificate issuer:       /CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Certificate serial:       4370FAF5AA6886267DCEBB3120D1A61F651BF2E8
Authority key identifier: 0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa
Signing time:             Thu 16 Nov 2023 15:25:41 +0000
ROA not before:           Thu 16 Nov 2023 15:20:41 +0000
ROA not after:            Thu 14 Nov 2024 15:25:41 +0000
asID:                     269096
IP address blocks:        45.185.120.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:70:fa:f5:aa:68:86:26:7d:ce:bb:31:20:d1:a6:1f:65:1b:f2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
        Validity
            Not Before: Nov 16 15:20:41 2023 GMT
            Not After : Nov 14 15:25:41 2024 GMT
        Subject: CN=68863E1E2585449E749411B32813022C5C979C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:68:94:0e:d5:a5:90:16:73:f0:99:fa:dd:
                    d9:4a:bb:66:0a:e2:84:db:a0:9e:6b:a2:e5:25:13:
                    9a:6a:8c:59:01:af:86:3a:3f:de:24:52:43:8d:6a:
                    4f:02:9c:0e:f9:77:d5:d0:c4:f7:c1:85:60:0c:34:
                    9e:d9:20:04:25:b1:5a:ac:52:8a:d1:b0:91:fb:a9:
                    aa:03:05:93:70:e6:ef:21:4e:a8:75:d2:0d:32:08:
                    8d:ac:3b:0f:e5:84:23:16:2a:77:45:95:63:00:9d:
                    d8:a2:c4:88:b9:86:7f:bd:b8:75:9e:e3:cc:70:1d:
                    c3:67:c5:3d:3f:3d:f3:6f:52:7f:bb:65:ff:e5:e1:
                    0a:2b:7e:08:fa:8c:a2:95:a9:4c:f2:54:8b:19:13:
                    58:64:0e:de:c6:0d:56:73:a3:b8:6f:0d:d4:a3:9b:
                    c1:8f:9c:34:48:a9:2e:bf:60:b5:32:fa:56:0c:f5:
                    59:6f:32:0b:d2:00:03:c2:79:23:07:75:54:f3:8d:
                    3f:24:75:dd:2d:1a:88:b2:78:79:36:3d:35:c9:48:
                    eb:ac:94:72:82:89:3a:2f:33:6f:a7:a0:29:f6:4c:
                    31:67:e2:18:80:1f:e9:02:fa:28:74:2e:2f:f7:5c:
                    14:b2:ac:13:e1:b6:f5:0d:a3:a0:29:3a:e4:44:03:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:3E:1E:25:85:44:9E:74:94:11:B3:28:13:02:2C:5C:97:9C:9B
            X509v3 Authority Key Identifier:
                keyid:0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:d3:ec:17:3e:1b:aa:d2:c7:9b:a9:ec:ff:84:ef:86:39:7c:
         b9:f4:74:8d:b6:c0:a3:f6:87:a2:ae:7e:14:c6:99:af:dc:6d:
         98:2d:cf:d3:ae:66:7f:66:a1:c5:81:47:d0:1a:cc:a0:c2:66:
         b3:83:b7:fa:f7:8f:a6:7d:50:d9:e2:18:32:b2:97:de:50:e3:
         28:e5:51:e0:f2:36:95:1b:ba:d0:28:5f:29:85:0a:81:80:c3:
         c3:e9:be:d5:8a:3b:17:81:05:dc:4a:56:b2:b0:7f:53:84:6e:
         f0:4f:7d:7c:bb:42:2e:7e:50:80:be:d2:32:3f:f2:8c:8f:b3:
         2a:6b:c8:c0:c9:63:03:20:92:5e:5c:b4:e8:0e:86:cc:77:a8:
         dc:ba:1f:e5:2a:f0:1b:68:da:89:9e:4c:97:cc:27:4c:61:8b:
         b2:db:34:0c:70:53:b3:81:37:3b:34:0c:ff:24:15:25:bb:fe:
         5f:d9:17:6f:10:89:fb:98:0b:cd:cf:75:5c:70:42:c2:0b:84:
         cc:ce:43:95:88:25:f4:fd:7e:98:f3:2f:5d:95:9e:d1:08:33:
         45:3f:55:e1:b7:96:61:22:8c:ac:45:ad:e0:e6:8e:63:04:2f:
         51:31:67:d0:82:b4:03:9d:06:b9:f0:0e:a6:e6:16:a0:65:42:
         16:fa:c9:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ3D69apohiZ9zrsxINGmH2Ub8ugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIwNTIwMjU2OUJDRkQ1MjRCMEIxQkU2NjNCNDlGODc1
REUzQTM3RTAeFw0yMzExMTYxNTIwNDFaFw0yNDExMTQxNTI1NDFaMDMxMTAvBgNV
BAMTKDY4ODYzRTFFMjU4NTQ0OUU3NDk0MTFCMzI4MTMwMjJDNUM5NzlDOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6GiUDtWlkBZz8Jn63dlKu2YK
4oTboJ5rouUlE5pqjFkBr4Y6P94kUkONak8CnA75d9XQxPfBhWAMNJ7ZIAQlsVqs
UorRsJH7qaoDBZNw5u8hTqh10g0yCI2sOw/lhCMWKndFlWMAndiixIi5hn+9uHWe
48xwHcNnxT0/PfNvUn+7Zf/l4Qorfgj6jKKVqUzyVIsZE1hkDt7GDVZzo7hvDdSj
m8GPnDRIqS6/YLUy+lYM9VlvMgvSAAPCeSMHdVTzjT8kdd0tGoiyeHk2PTXJSOus
lHKCiTovM2+noCn2TDFn4hiAH+kC+ih0Li/3XBSyrBPhtvUNo6ApOuREA0JfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaIY+HiWFRJ50lBGzKBMCLFyXnJswHwYDVR0j
BBgwFoAUCwUgJWm8/VJLCxvmY7Sfh13jo34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMC8wQjA1MjAyNTY5QkNGRDUyNEIwQjFCRTY2M0I0OUY4NzVERTNBMzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCMDUyMDI1NjlCQ0ZENTI0
QjBCMUJFNjYzQjQ5Rjg3NURFM0EzN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzAv
MzQzNTJlMzEzODM1MmUzMTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuXgwDQYJKoZIhvcNAQELBQADggEBAKvT7Bc+
G6rSx5up7P+E74Y5fLn0dI22wKP2h6KufhTGma/cbZgtz9OuZn9mocWBR9AazKDC
ZrODt/r3j6Z9UNniGDKyl95Q4yjlUeDyNpUbutAoXymFCoGAw8PpvtWKOxeBBdxK
VrKwf1OEbvBPfXy7Qi5+UIC+0jI/8oyPsypryMDJYwMgkl5ctOgOhsx3qNy6H+Uq
8Bto2omeTJfMJ0xhi7LbNAxwU7OBNzs0DP8kFSW7/l/ZF28QifuYC83PdVxwQsIL
hMzOQ5WIJfT9fpjzL12VntEIM0U/VeG3lmEijKxFreDmjmMEL1ExZ9CCtAOdBrnw
DqbmFqBlQhb6ySI=
-----END CERTIFICATE-----