Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f34302d313238203d3e20323733373237.roa
File:                     323830343a386235383a3430303a3a2f34302d313238203d3e20323733373237.roa (raw, json)
Hash identifier:          4zqQZB4NF5EuRK6meKUfpOGD2uW4P1/+KTaqkjoUJaM=
Subject key identifier:   91:45:FC:DD:C3:C5:39:E2:07:6B:79:58:68:5A:3C:3D:09:BD:7A:0A
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       57F7D4A3588F1A4DF57D2965284F191BFFEC2043
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f34302d313238203d3e20323733373237.roa
Signing time:             Tue 16 May 2023 15:00:06 +0000
ROA not before:           Tue 16 May 2023 14:55:06 +0000
ROA not after:            Tue 14 May 2024 15:00:06 +0000
asID:                     273727
IP address blocks:        2804:8b58:400::/40 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f7:d4:a3:58:8f:1a:4d:f5:7d:29:65:28:4f:19:1b:ff:ec:20:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 16 14:55:06 2023 GMT
            Not After : May 14 15:00:06 2024 GMT
        Subject: CN=9145FCDDC3C539E2076B7958685A3C3D09BD7A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:4d:45:44:fa:0d:ce:60:1f:1e:f4:2d:15:
                    d3:07:1b:e5:8a:e0:2a:cf:60:85:bb:ca:a6:97:44:
                    06:fc:a7:cd:f2:9a:2b:b7:15:6f:6e:1d:21:4a:da:
                    14:59:40:d0:1f:de:bc:e3:83:dc:35:8c:30:43:1b:
                    a5:37:87:70:98:3a:5e:bc:10:b3:6f:13:8d:88:58:
                    44:8f:08:0f:5e:af:f5:7f:25:cd:a3:e8:a9:06:ad:
                    ee:95:c6:53:4b:7d:6a:da:2f:7a:55:27:5d:d0:08:
                    0f:e0:04:72:56:44:83:df:4e:cd:33:05:3c:2a:6a:
                    18:73:d3:40:51:3d:7d:02:b0:1e:90:70:9a:31:9d:
                    01:52:ba:d8:a0:40:88:38:15:ee:5c:f0:09:bd:7f:
                    ae:dc:8d:3c:8f:d9:cb:60:4f:28:3a:b3:12:10:87:
                    d9:bb:27:66:17:48:5f:19:c8:9c:34:36:e8:cd:de:
                    99:53:b2:36:fe:38:79:31:73:b5:50:af:1a:26:76:
                    50:d9:55:73:e7:2d:2d:e2:16:85:89:76:d6:02:61:
                    c4:58:d8:e9:43:24:09:8c:07:16:48:8e:de:a3:f5:
                    d8:8e:f0:a3:a2:a8:2b:60:29:0f:24:90:20:5f:da:
                    83:5b:f4:10:7f:a0:21:dd:fd:82:ca:fd:d3:13:99:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:45:FC:DD:C3:C5:39:E2:07:6B:79:58:68:5A:3C:3D:09:BD:7A:0A
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f34302d313238203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:35:e9:4d:73:d0:a7:42:40:a6:d0:8a:04:10:9d:bb:cf:42:
         26:bf:ad:da:16:79:87:74:7f:a2:d9:d4:10:eb:86:92:67:73:
         43:e4:42:74:1a:f2:9b:52:22:bf:3b:ac:e9:b1:d5:1f:98:7a:
         93:24:dd:55:8a:42:69:20:ea:95:7b:95:43:50:bd:48:90:c9:
         2d:43:9b:3b:40:53:a7:cd:6d:21:79:2f:e9:fc:36:ad:78:5e:
         0a:8a:ab:ce:ec:79:2f:55:0a:43:8f:81:9d:ba:ba:2e:70:14:
         f1:d4:89:53:9a:a8:92:ff:8a:a5:f8:0a:5c:66:38:58:93:42:
         af:5f:48:41:ad:4b:1c:6d:6f:d7:67:a0:ea:db:27:7a:a6:9d:
         43:a1:ee:f7:63:c0:04:81:03:79:43:75:c5:8d:97:ed:ed:a6:
         0e:ae:9c:56:36:18:84:5d:7a:24:42:c9:77:d8:02:02:d3:42:
         d3:43:c0:b2:c8:9a:84:cb:c4:d1:cb:16:d9:8e:18:98:5d:ea:
         a3:b7:e8:76:bd:2b:79:90:96:7d:69:67:a7:c9:67:b0:0c:69:
         2d:c4:fe:6a:be:37:08:67:ac:51:eb:1b:94:5b:a6:00:8e:41:
         85:c4:33:70:1f:21:43:cd:fb:db:dc:84:a7:ce:e8:95:1e:98:
         b1:07:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----