Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/34352e3136362e32342e302f32322d3332203d3e20323637393530.roa
File:                     34352e3136362e32342e302f32322d3332203d3e20323637393530.roa (raw, json)
Hash identifier:          u8DbU2fk2sdQVATqd7TiVwGLNnBvYzie3dq/1M4uuPo=
Subject key identifier:   4D:C5:56:3C:36:F2:7F:6B:E7:32:59:0A:67:9C:12:D0:D8:97:DA:70
Certificate issuer:       /CN=4DD43D290C6B438D838E22B1B66200783B627EC5
Certificate serial:       0B55EE42E6A99FD9FBEF8EAA11E25EB9BAAA5E73
Authority key identifier: 4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/34352e3136362e32342e302f32322d3332203d3e20323637393530.roa
Signing time:             Wed 19 Apr 2023 13:19:50 +0000
ROA not before:           Wed 19 Apr 2023 13:14:50 +0000
ROA not after:            Wed 17 Apr 2024 13:19:50 +0000
asID:                     267950
IP address blocks:        45.166.24.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:55:ee:42:e6:a9:9f:d9:fb:ef:8e:aa:11:e2:5e:b9:ba:aa:5e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD43D290C6B438D838E22B1B66200783B627EC5
        Validity
            Not Before: Apr 19 13:14:50 2023 GMT
            Not After : Apr 17 13:19:50 2024 GMT
        Subject: CN=4DC5563C36F27F6BE732590A679C12D0D897DA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:fc:c3:fb:87:58:9e:c2:4e:f5:f8:cb:30:
                    b3:3b:10:5a:42:65:26:10:db:ff:3a:dd:7d:bb:6f:
                    38:36:9e:44:1f:0a:b4:e2:30:af:af:11:68:be:02:
                    14:85:6c:9a:0c:bb:29:5d:94:86:2a:d8:e7:f6:be:
                    ca:e1:f4:c7:a8:90:46:4f:21:b9:ab:56:62:11:f0:
                    78:a1:ef:e2:35:62:5c:cf:9c:3d:45:3e:32:4f:4a:
                    24:5c:fc:7e:25:dc:93:36:db:a6:1e:44:dc:cd:e1:
                    6f:f9:52:78:cb:dd:31:6d:bc:10:7c:24:19:3d:66:
                    56:0f:68:09:dc:bd:67:99:ea:54:90:0a:3e:56:77:
                    66:a6:c2:9c:56:90:e0:ed:60:80:b8:de:11:d6:36:
                    04:69:71:27:e7:22:ea:77:57:84:fe:9c:37:bf:08:
                    2d:81:dd:cd:60:bc:1c:98:e8:e3:16:ca:1c:33:86:
                    49:96:3e:ab:11:b6:d7:dc:87:b0:ce:be:3e:73:e3:
                    5a:fa:e5:bf:d0:6e:a2:63:49:38:71:31:a8:72:f2:
                    4a:15:f5:bf:d8:a0:4c:23:04:f0:5a:0c:15:8b:46:
                    56:10:d3:d6:82:2b:d2:c8:a9:53:7b:f4:66:43:b6:
                    f4:f7:6a:b0:25:ad:cc:7e:4e:17:55:71:d4:df:aa:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C5:56:3C:36:F2:7F:6B:E7:32:59:0A:67:9C:12:D0:D8:97:DA:70
            X509v3 Authority Key Identifier:
                keyid:4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/34352e3136362e32342e302f32322d3332203d3e20323637393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:19:f1:55:63:54:aa:0d:8e:ac:e2:84:ce:ca:9e:7b:de:67:
         d7:87:77:2d:c1:7d:18:be:4c:95:d6:8d:cc:6c:c7:39:c7:91:
         6c:17:84:7e:de:13:f5:a4:42:9f:90:43:b4:9b:19:7c:00:96:
         fa:f4:1b:19:f4:a2:88:b2:d5:2b:42:27:66:71:8c:0a:90:84:
         c7:0c:d1:92:d0:61:4f:7f:12:93:26:e4:3d:b8:8e:a1:f7:5f:
         81:e1:77:83:52:dc:37:b0:9d:95:69:11:08:22:f9:a3:a2:f2:
         58:f7:c0:22:81:3e:ae:2a:3d:1e:f4:b6:7c:3d:7b:0f:85:12:
         d3:62:18:68:60:d3:a7:90:7b:ab:63:29:29:d0:d4:ca:76:17:
         2b:27:a2:07:c7:dd:15:2b:fc:06:fb:d9:78:1e:b4:e7:c9:98:
         03:32:3f:f1:7e:01:8c:4e:79:ac:fa:2d:ab:6e:97:6a:f2:12:
         7f:71:2e:26:50:f7:e5:76:04:7c:b7:9e:28:67:4b:70:bd:83:
         c8:32:77:43:e9:96:54:5d:fb:7c:bd:fa:72:14:32:ee:b8:ca:
         3c:f6:5f:83:fc:a9:90:ca:e6:71:5c:85:41:1c:ea:52:23:29:
         49:2e:a3:23:11:32:ee:19:5c:94:06:ce:c8:a8:bd:6f:80:4b:
         a4:d6:fc:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC1XuQuapn9n7746qEeJeubqqXnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERENDNEMjkwQzZCNDM4RDgzOEUyMkIxQjY2MjAwNzgz
QjYyN0VDNTAeFw0yMzA0MTkxMzE0NTBaFw0yNDA0MTcxMzE5NTBaMDMxMTAvBgNV
BAMTKDREQzU1NjNDMzZGMjdGNkJFNzMyNTkwQTY3OUMxMkQwRDg5N0RBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2l/zD+4dYnsJO9fjLMLM7EFpC
ZSYQ2/863X27bzg2nkQfCrTiMK+vEWi+AhSFbJoMuyldlIYq2Of2vsrh9MeokEZP
IbmrVmIR8Hih7+I1YlzPnD1FPjJPSiRc/H4l3JM226YeRNzN4W/5UnjL3TFtvBB8
JBk9ZlYPaAncvWeZ6lSQCj5Wd2amwpxWkODtYIC43hHWNgRpcSfnIup3V4T+nDe/
CC2B3c1gvByY6OMWyhwzhkmWPqsRttfch7DOvj5z41r65b/QbqJjSThxMahy8koV
9b/YoEwjBPBaDBWLRlYQ09aCK9LIqVN79GZDtvT3arAlrcx+ThdVcdTfqtxjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTcVWPDbyf2vnMlkKZ5wS0NiX2nAwHwYDVR0j
BBgwFoAUTdQ9KQxrQ42DjiKxtmIAeDtifsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYVUt1ektGa2VKcFIzSHdSOENlMWloRXhQZksyNmRjVWR6M0JzZUZn
RncvMC80REQ0M0QyOTBDNkI0MzhEODM4RTIyQjFCNjYyMDA3ODNCNjI3RUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRERDQzRDI5MEM2QjQzOEQ4
MzhFMjJCMUI2NjIwMDc4M0I2MjdFQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWFVLdXpLRmtlSnBSM0h3UjhDZTFpaEV4UGZLMjZkY1VkejNCc2VGZ0Z3LzAv
MzQzNTJlMzEzNjM2MmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaYYMA0GCSqGSIb3DQEBCwUAA4IBAQAXGfFVY1Sq
DY6s4oTOyp573mfXh3ctwX0YvkyV1o3MbMc5x5FsF4R+3hP1pEKfkEO0mxl8AJb6
9BsZ9KKIstUrQidmcYwKkITHDNGS0GFPfxKTJuQ9uI6h91+B4XeDUtw3sJ2VaREI
IvmjovJY98AigT6uKj0e9LZ8PXsPhRLTYhhoYNOnkHurYykp0NTKdhcrJ6IHx90V
K/wG+9l4HrTnyZgDMj/xfgGMTnms+i2rbpdq8hJ/cS4mUPfldgR8t54oZ0twvYPI
MndD6ZZUXft8vfpyFDLuuMo89l+D/KmQyuZxXIVBHOpSIylJLqMjETLuGVyUBs7I
qL1vgEuk1vx8
-----END CERTIFICATE-----