Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a3430313a3a2f34382d3438203d3e20323636343437.roa
File:                     323830343a333766383a3430313a3a2f34382d3438203d3e20323636343437.roa (raw, json)
Hash identifier:          sRKWBMAAvh0wtWQAup46kQdluO2z+tp5vXWH7Xv2Rxk=
Subject key identifier:   16:6E:6C:28:27:5D:30:03:61:C7:FB:B6:36:E4:6C:92:FC:7E:43:02
Certificate issuer:       /CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
Certificate serial:       217D73DB1C27C3D9B89FAD48C63FEFFA30120D9B
Authority key identifier: 77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a3430313a3a2f34382d3438203d3e20323636343437.roa
Signing time:             Fri 05 Aug 2022 13:50:09 +0000
ROA not before:           Fri 05 Aug 2022 13:45:09 +0000
ROA not after:            Fri 04 Aug 2023 13:50:09 +0000
asID:                     266447
IP address blocks:        2804:37f8:401::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7d:73:db:1c:27:c3:d9:b8:9f:ad:48:c6:3f:ef:fa:30:12:0d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Validity
            Not Before: Aug  5 13:45:09 2022 GMT
            Not After : Aug  4 13:50:09 2023 GMT
        Subject: CN=166E6C28275D300361C7FBB636E46C92FC7E4302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:a5:f1:7d:e9:d4:6b:1b:25:24:29:34:b6:
                    12:85:ff:6f:97:a8:5c:b2:85:c3:aa:3f:fc:c5:ad:
                    3a:1c:b1:33:09:b0:71:1c:ff:8d:9f:d9:d6:88:65:
                    93:29:22:e1:90:47:d9:df:24:be:92:08:a2:1b:fa:
                    5c:32:a2:d9:24:c3:16:0b:b5:37:50:05:45:21:cf:
                    dd:2d:28:50:00:3f:2d:e1:46:cb:3d:c7:5e:ab:2d:
                    ce:74:db:e7:d7:f8:44:98:b4:14:61:28:56:8b:23:
                    a4:79:f1:3e:25:d9:b5:f5:9f:1c:f7:ac:5c:3c:be:
                    ed:aa:e4:34:f6:f6:46:57:3c:3b:bd:36:c1:49:7d:
                    b7:27:7e:2b:89:3e:46:f0:b9:14:13:96:3c:6c:1f:
                    ba:d2:d9:78:32:80:78:0d:96:cf:13:29:52:93:7e:
                    72:c9:21:2b:e3:54:14:54:02:cb:ce:24:8f:7c:a7:
                    be:9d:7d:dc:1e:a7:82:a4:8f:13:32:ff:8b:a4:3b:
                    ee:63:b7:33:6b:e8:a8:fe:7a:c6:e8:66:14:3c:4b:
                    96:b1:64:de:5f:66:36:48:dd:8d:17:f4:8e:89:42:
                    96:da:ec:cc:db:5f:3e:e9:5f:87:12:5f:52:16:16:
                    5c:1e:c2:3f:b1:b1:96:58:08:82:dc:3f:ab:bf:19:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:6C:28:27:5D:30:03:61:C7:FB:B6:36:E4:6C:92:FC:7E:43:02
            X509v3 Authority Key Identifier:
                keyid:77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a3430313a3a2f34382d3438203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f8:401::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:5c:17:92:84:7c:5a:6e:85:fd:81:bd:66:62:9f:5c:27:
         c4:e2:d6:19:e7:11:31:aa:51:df:f4:61:45:0e:e3:8b:f1:c3:
         84:11:d6:ad:64:4f:c0:a3:1a:04:43:26:5d:cd:c3:12:38:32:
         00:9e:a7:dd:08:13:bb:13:a9:db:bb:de:9b:89:7e:99:c6:7f:
         70:22:d7:52:d3:d4:52:70:be:4b:b4:b4:8a:94:8e:b9:eb:de:
         fb:c9:8a:d5:88:6b:11:74:36:6c:b3:67:ba:eb:6a:16:83:0f:
         35:8b:70:d1:36:0f:89:73:d2:33:e0:6e:88:79:66:3c:e1:6a:
         ad:1b:72:5f:67:23:01:58:7e:b4:78:76:25:f0:ad:43:fe:14:
         80:cc:6d:24:53:99:a8:2a:12:68:a0:52:1b:70:62:16:c4:b5:
         8e:8d:5a:35:f7:cf:0b:b0:f5:95:e0:50:c9:a7:a9:22:2c:61:
         6a:f4:c1:53:f5:b8:e6:c4:da:7c:bd:f9:71:3c:af:4c:50:29:
         ee:f8:a7:55:f6:7c:c6:a6:c8:8d:92:94:9d:1a:16:cc:7f:47:
         9d:cd:d8:0a:9a:e7:d2:c9:b4:2e:de:f0:e0:2b:5e:0d:17:fa:
         dd:3d:8f:ba:9a:15:6c:d1:1d:62:c4:c4:0b:29:af:11:f3:7d:
         d8:17:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----