Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f34302d3430203d3e20323733373237.roa
File:                     323830343a386235383a3430303a3a2f34302d3430203d3e20323733373237.roa (raw, json)
Hash identifier:          ZqavW5GzEwSeGFW/RajvARYXN6Asmsrp2C4JKwesOTU=
Subject key identifier:   09:03:1F:C0:30:C8:07:1B:2C:1C:54:2C:E2:74:24:E5:C0:A9:CD:C9
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       103C44CC23728EDE9223022E49F385386E880FE9
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f34302d3430203d3e20323733373237.roa
Signing time:             Thu 18 May 2023 18:57:48 +0000
ROA not before:           Thu 18 May 2023 18:52:48 +0000
ROA not after:            Thu 16 May 2024 18:57:48 +0000
asID:                     273727
IP address blocks:        2804:8b58:400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3c:44:cc:23:72:8e:de:92:23:02:2e:49:f3:85:38:6e:88:0f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 18 18:52:48 2023 GMT
            Not After : May 16 18:57:48 2024 GMT
        Subject: CN=09031FC030C8071B2C1C542CE27424E5C0A9CDC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:98:7d:d2:f4:84:38:c8:02:b6:d7:f8:5a:
                    39:6e:ca:f7:aa:f3:01:b5:d2:b6:90:12:07:be:e9:
                    ed:08:19:e6:f7:79:ba:41:b9:6b:81:f5:ab:0a:c8:
                    65:5e:7b:80:b4:fa:87:b5:d3:77:a5:bf:9e:0a:67:
                    9d:9b:3f:c9:5f:b9:a1:54:38:7a:72:c5:ed:19:f6:
                    06:5f:f6:32:5d:60:18:cf:ea:d9:c2:85:d3:eb:00:
                    ef:5f:86:66:ba:05:15:cd:8e:c5:14:95:fa:8f:1c:
                    e7:31:5f:3a:48:27:66:3b:48:a2:c4:7a:11:1e:2c:
                    9c:1e:64:68:97:1b:5b:50:8a:1b:8c:da:aa:4b:83:
                    e5:3b:a8:6e:ad:a9:3c:43:90:4a:19:d3:00:63:fa:
                    c6:0f:6e:16:75:eb:5a:8b:62:a2:ba:53:58:ec:51:
                    e4:a0:d4:65:9a:01:7b:bd:48:9c:ff:bb:05:47:97:
                    4c:46:e4:3a:d1:8d:8a:f9:51:ac:55:71:2a:e4:b3:
                    2f:76:ee:1a:ec:1d:db:be:7f:ae:eb:cc:58:a1:9c:
                    3c:73:68:a5:c7:4f:50:aa:e8:0d:56:d9:67:99:41:
                    46:e7:61:03:af:70:48:6f:36:6e:b7:c8:7d:f2:11:
                    87:14:95:ba:90:f1:c0:c0:2b:d7:90:0c:65:f3:c6:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:03:1F:C0:30:C8:07:1B:2C:1C:54:2C:E2:74:24:E5:C0:A9:CD:C9
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f34302d3430203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:38:32:df:ce:96:5c:ce:11:7f:c8:b4:8a:d0:2b:0e:f6:13:
         17:64:16:ca:bf:e6:7c:f9:17:23:83:a8:d0:1c:58:a9:d8:f8:
         06:b0:3e:74:22:f3:d6:d2:0e:02:2f:9e:55:4f:96:76:cd:79:
         9d:ba:d3:20:f3:02:d2:d5:97:19:c9:5e:2e:de:c8:a7:96:ff:
         e4:f5:63:2c:87:b4:0f:09:75:2c:18:a9:a7:b3:ff:8f:2b:05:
         2c:5b:38:09:7f:c1:b8:62:a6:76:5a:fd:c3:a1:d2:fe:bc:be:
         b2:6d:0c:3b:53:10:a1:9d:eb:aa:3d:8c:ed:85:a8:dd:f9:07:
         a2:be:c6:8e:34:e4:cc:7d:ee:d5:0b:15:7f:05:ba:9e:c6:93:
         32:8a:e2:3a:e8:1d:32:02:32:d0:ac:17:b5:56:dc:5b:1f:06:
         5f:f7:7c:1c:94:6c:38:54:b7:5c:81:a4:fa:8b:95:15:a2:d4:
         98:54:13:78:f5:23:29:9a:d5:05:3b:c4:64:c1:5a:58:4d:3d:
         61:8a:c0:99:a9:3e:4f:67:70:c0:5c:89:d6:2b:9c:a7:d5:17:
         a2:a6:85:ac:ef:68:3b:4c:69:d4:35:e4:0a:ca:14:fe:8a:9c:
         b6:0c:0c:0b:ac:ad:ea:85:c4:7a:0d:b9:6a:fd:fe:bf:65:f3:
         32:d2:39:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEDxEzCNyjt6SIwIuSfOFOG6ID+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGMEY5Q0U4QUYwMkMyRjc4NjJDN0E1OTRDRUZEM0U0
NEFBQjcwRjAeFw0yMzA1MTgxODUyNDhaFw0yNDA1MTYxODU3NDhaMDMxMTAvBgNV
BAMTKDA5MDMxRkMwMzBDODA3MUIyQzFDNTQyQ0UyNzQyNEU1QzBBOUNEQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbZh90vSEOMgCttf4Wjluyveq
8wG10raQEge+6e0IGeb3ebpBuWuB9asKyGVee4C0+oe103elv54KZ52bP8lfuaFU
OHpyxe0Z9gZf9jJdYBjP6tnChdPrAO9fhma6BRXNjsUUlfqPHOcxXzpIJ2Y7SKLE
ehEeLJweZGiXG1tQihuM2qpLg+U7qG6tqTxDkEoZ0wBj+sYPbhZ161qLYqK6U1js
UeSg1GWaAXu9SJz/uwVHl0xG5DrRjYr5UaxVcSrksy927hrsHdu+f67rzFihnDxz
aKXHT1Cq6A1W2WeZQUbnYQOvcEhvNm63yH3yEYcUlbqQ8cDAK9eQDGXzxpUNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCQMfwDDIBxssHFQs4nQk5cCpzckwHwYDVR0j
BBgwFoAUDPD5zorwLC94YsellM79PkSqtw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhzNjlYejFXQktqSlNGYWVneDlwb29HUFkzd2N3anNWUG9Eem1ZSjk2
ek0vMC8wQ0YwRjlDRThBRjAyQzJGNzg2MkM3QTU5NENFRkQzRTQ0QUFCNzBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDRjBGOUNFOEFGMDJDMkY3
ODYyQzdBNTk0Q0VGRDNFNDRBQUI3MEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYczY5WHoxV0JLakpTRmFlZ3g5cG9vR1BZM3djd2pzVlBvRHptWUo5NnpNLzAv
MzIzODMwMzQzYTM4NjIzNTM4M2EzNDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzMzNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBItYBDANBgkqhkiG9w0BAQsFAAOC
AQEARDgy386WXM4Rf8i0itArDvYTF2QWyr/mfPkXI4Oo0BxYqdj4BrA+dCLz1tIO
Ai+eVU+Wds15nbrTIPMC0tWXGcleLt7Ip5b/5PVjLIe0Dwl1LBipp7P/jysFLFs4
CX/BuGKmdlr9w6HS/ry+sm0MO1MQoZ3rqj2M7YWo3fkHor7GjjTkzH3u1QsVfwW6
nsaTMoriOugdMgIy0KwXtVbcWx8GX/d8HJRsOFS3XIGk+ouVFaLUmFQTePUjKZrV
BTvEZMFaWE09YYrAmak+T2dwwFyJ1iucp9UXoqaFrO9oO0xp1DXkCsoU/oqctgwM
C6yt6oXEeg25av3+v2XzMtI5Mg==
-----END CERTIFICATE-----