Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a3a2f33332d3333203d3e20323636343437.roa
File:                     323830343a333766383a3a2f33332d3333203d3e20323636343437.roa (raw, json)
Hash identifier:          DYWlrew14AEC/KoEIXE7iEE13zPc5/LWnVqJDSzZ7Yk=
Subject key identifier:   32:A6:D7:6E:8E:DF:ED:22:C1:C9:EF:42:57:C1:AB:3F:E9:B9:1B:BF
Certificate issuer:       /CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
Certificate serial:       4BEF7F9B619686BEA6B0F1DBE7E3DF23C2FB4E25
Authority key identifier: 77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a3a2f33332d3333203d3e20323636343437.roa
Signing time:             Fri 05 Aug 2022 13:50:00 +0000
ROA not before:           Fri 05 Aug 2022 13:45:00 +0000
ROA not after:            Fri 04 Aug 2023 13:50:00 +0000
asID:                     266447
IP address blocks:        2804:37f8::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ef:7f:9b:61:96:86:be:a6:b0:f1:db:e7:e3:df:23:c2:fb:4e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Validity
            Not Before: Aug  5 13:45:00 2022 GMT
            Not After : Aug  4 13:50:00 2023 GMT
        Subject: CN=32A6D76E8EDFED22C1C9EF4257C1AB3FE9B91BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:d1:e4:69:dc:83:1e:cb:6b:2c:04:d5:bc:
                    66:08:5a:c8:9d:2b:d4:a2:1c:8a:82:c7:bc:9b:4f:
                    70:33:96:79:9e:76:cf:f2:ba:14:9f:67:31:e2:8e:
                    e6:87:3e:5d:cf:3b:bc:a0:57:fb:ba:6b:a0:bd:3e:
                    46:44:d8:90:52:24:2e:c0:fc:c2:b5:29:d6:ac:ce:
                    c9:ad:31:b5:66:69:74:6b:62:e9:20:a0:fb:49:4e:
                    b0:a8:ba:e5:66:ab:25:c3:d7:6d:c6:8c:61:13:88:
                    4d:be:bf:13:d7:29:73:5a:b0:39:2a:39:e4:49:90:
                    ff:b2:7d:d6:bd:ea:ea:1a:fd:5c:c3:49:9a:2b:6d:
                    45:7a:17:20:83:95:f2:80:56:5f:d2:ce:e3:ca:20:
                    fc:33:c9:5f:04:61:be:63:b6:66:d9:57:52:9d:c9:
                    19:ef:83:9d:31:ea:0c:74:55:96:68:20:ab:5a:ab:
                    0e:08:ae:d2:bc:fc:94:11:d1:d8:92:5c:18:f0:bd:
                    cd:70:ab:9c:00:67:2b:45:fd:d4:f6:29:24:5b:6e:
                    e0:01:69:b9:90:ce:32:cd:30:bc:cf:1a:45:b5:84:
                    9d:cf:96:f2:09:e3:40:67:1e:94:bc:41:88:8c:ae:
                    d3:13:59:69:c8:ff:f5:f8:5e:1a:b1:cc:c6:23:10:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A6:D7:6E:8E:DF:ED:22:C1:C9:EF:42:57:C1:AB:3F:E9:B9:1B:BF
            X509v3 Authority Key Identifier:
                keyid:77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a3a2f33332d3333203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f8::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:33:dc:fd:48:be:65:2b:bb:a2:e1:fe:d3:97:6e:74:06:
         98:f6:ce:85:ea:4c:36:5a:15:1f:53:06:47:b8:6d:46:a8:da:
         5e:5e:44:ee:dd:67:1c:e1:bd:c4:14:b6:45:e8:81:23:8b:73:
         52:12:0f:b5:d0:ac:ef:9d:c2:2f:30:ea:3d:58:67:96:18:39:
         cc:cc:c9:ff:e2:96:e5:2f:b2:94:cd:c1:82:b8:41:1a:b4:0c:
         d2:06:2e:2e:44:95:3a:68:01:69:21:6b:ae:dd:d0:af:7f:b1:
         e0:ff:ef:fb:ea:fe:f1:85:b5:ba:58:3b:b2:8c:67:eb:51:a3:
         1e:ab:4d:ed:bd:85:dd:fe:b9:a2:ad:26:9c:aa:42:3b:ab:c3:
         5a:85:67:27:c1:37:2d:f2:da:ee:83:2b:44:c8:0d:a8:8d:3d:
         7f:74:19:9f:b4:f0:30:8f:ce:00:de:b6:e8:91:4f:10:7e:68:
         bb:46:d4:14:c6:14:e0:9f:14:7b:12:68:e7:80:23:62:21:5b:
         31:ff:8f:fa:96:9f:2c:13:c3:22:ab:4a:46:21:0e:83:a1:ff:
         84:a7:06:d9:42:09:84:c4:4b:de:98:6f:13:38:e5:79:a0:b7:
         a8:30:43:a5:f2:a6:8d:a7:54:06:19:0b:9c:af:41:e5:b4:25:
         d2:9c:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----