Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          9UsM8hTLJg3rol1s/bCN6+BLFNlRH6eLHKyxk3JivUc=
Subject key identifier:   3E:B6:E1:91:EF:B9:14:42:91:C5:6F:63:85:07:0C:62:25:2C:34:51
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       611BBD2196202947D61B23B308192D3E12E784CB
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:22 +0000
ROA not before:           Sun 23 Jul 2023 00:03:22 +0000
ROA not after:            Sun 21 Jul 2024 00:08:22 +0000
asID:                     264242
IP address blocks:        2804:24cc:8400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1b:bd:21:96:20:29:47:d6:1b:23:b3:08:19:2d:3e:12:e7:84:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:22 2023 GMT
            Not After : Jul 21 00:08:22 2024 GMT
        Subject: CN=3EB6E191EFB9144291C56F6385070C62252C3451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:0d:98:b5:da:4d:be:8d:4a:13:04:f5:bb:
                    56:38:67:ff:a4:2e:da:7b:5b:3d:ba:a7:f4:ce:e8:
                    6e:26:c8:ff:a7:65:57:df:23:d0:86:f4:9c:c9:5a:
                    af:bd:58:39:e5:01:be:34:df:88:1a:88:dd:4e:d9:
                    a9:d1:62:a1:6e:c9:c7:67:f0:13:62:49:63:4b:80:
                    ca:83:45:ef:ff:3d:a6:74:d5:5c:9d:db:71:b2:e8:
                    66:0c:b5:ae:ab:77:da:42:b4:17:68:1b:e5:d9:02:
                    e5:eb:60:7f:45:53:37:eb:1e:80:3d:57:f1:67:b8:
                    9c:74:99:6d:70:e9:e8:5f:9c:9f:b6:4d:d5:0e:3e:
                    2b:e8:cf:8b:15:59:5b:da:44:90:75:d8:fc:70:bf:
                    9d:bd:b3:7e:0a:a4:72:44:42:5e:b5:be:c2:57:af:
                    93:5c:ef:8d:41:64:8f:b0:f9:91:7b:57:a3:9e:7a:
                    33:ff:5b:d4:6f:69:99:2f:d8:5e:b8:c3:3b:9f:31:
                    46:a2:ea:28:bb:8f:6a:a1:d3:03:9c:f4:81:bd:76:
                    93:ab:8a:76:af:30:ea:3e:b1:1f:9b:56:67:9a:4c:
                    f8:dd:97:66:ae:11:2a:1c:1d:7a:d5:93:af:a6:5c:
                    f9:c1:d9:f5:d3:d5:82:bf:f6:4e:40:15:19:86:b7:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B6:E1:91:EF:B9:14:42:91:C5:6F:63:85:07:0C:62:25:2C:34:51
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383430303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:37:bd:84:c7:27:45:10:8b:4a:38:3e:74:c0:67:1d:1d:bc:
         ad:99:a0:e3:ec:5a:08:5a:7b:0a:21:4d:43:fa:27:a6:fb:2b:
         98:b6:68:10:58:1f:fd:f0:51:d5:5c:7c:8e:64:15:b2:40:59:
         4f:09:66:53:24:27:35:13:93:20:0b:ce:cb:7d:c9:2e:d6:c0:
         19:a2:81:32:6e:76:8e:98:45:a2:25:5e:53:ee:6f:b8:3c:ef:
         a8:0a:0e:d2:9d:36:13:23:61:77:74:2e:9e:63:5b:36:52:24:
         c9:bb:c6:66:71:d0:46:8f:06:29:a0:6a:66:ef:75:05:ad:f3:
         a6:cc:5c:9f:d1:26:69:50:23:f8:15:af:b1:a8:78:16:cc:92:
         2f:f7:07:ae:15:bc:d5:14:2b:1f:a6:03:99:4f:e1:ff:13:19:
         ca:47:c0:66:74:c1:31:9a:9b:5a:5a:ca:ad:65:18:5a:0e:7e:
         5e:64:a1:99:aa:54:e7:9d:50:f6:51:76:26:ea:74:a3:86:17:
         d9:a8:11:fb:30:eb:45:4d:eb:7f:3c:4f:01:21:e3:42:71:2b:
         b6:16:f7:27:dc:61:e8:3b:4d:7e:b1:0d:8d:05:7b:58:8e:bc:
         ef:6a:c5:ef:c7:18:8a:0d:74:46:63:f9:16:d6:dc:84:3b:56:
         ae:f4:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----