Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383730303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a383730303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          YGonE5L16cyKIsj/y7D/q+HoN3jTtpyiN0EBGyrwx/A=
Subject key identifier:   A6:FC:34:C5:E3:E5:60:7E:96:A4:EA:66:5D:54:66:18:93:F5:C8:45
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       2D6B8A6D190D43BE57912C1495B00374D1017D83
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383730303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:20 +0000
ROA not before:           Sun 23 Jul 2023 00:03:20 +0000
ROA not after:            Sun 21 Jul 2024 00:08:20 +0000
asID:                     264242
IP address blocks:        2804:24cc:8700::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6b:8a:6d:19:0d:43:be:57:91:2c:14:95:b0:03:74:d1:01:7d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:20 2023 GMT
            Not After : Jul 21 00:08:20 2024 GMT
        Subject: CN=A6FC34C5E3E5607E96A4EA665D54661893F5C845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:0a:86:ba:c5:08:99:e4:a0:3e:3d:c6:94:
                    d2:0b:86:ed:aa:c6:67:0a:98:ea:83:c3:e2:57:6e:
                    cc:c7:38:b9:a5:df:7f:0b:a2:fb:61:6a:00:6e:9c:
                    d2:28:7a:44:15:b3:cb:f0:f4:74:2c:3e:b1:05:ce:
                    79:42:a4:ce:83:0c:83:84:11:a8:12:4c:e6:2e:7e:
                    84:c9:91:6a:f9:4c:6e:3a:8a:c6:99:5b:e7:29:3c:
                    8a:18:cb:2e:dd:96:64:80:12:0b:6d:4a:39:74:5c:
                    48:a5:b3:ff:7e:31:a1:93:de:99:fd:2f:4b:cb:2a:
                    86:c7:a8:34:5b:c9:39:d9:55:fd:34:18:bd:f4:43:
                    ca:f1:38:c8:5d:eb:ac:be:04:0f:69:74:0b:5c:84:
                    1b:47:7a:c3:8d:90:6f:e4:a0:31:33:14:a8:00:0a:
                    da:e9:35:ff:70:4d:0f:40:82:0c:89:8e:b9:1d:59:
                    86:06:17:37:c0:35:3a:31:a8:ef:ca:a0:14:34:07:
                    a2:6f:4f:ea:9a:d8:97:3c:5e:5f:bd:e2:b3:3c:46:
                    0e:fb:db:8a:2f:84:fd:29:5c:f0:f9:0e:1b:8a:9e:
                    dd:8b:20:9b:cc:a2:ad:14:c3:7f:cf:a4:ae:f4:3c:
                    8e:3a:54:07:6a:ee:86:bc:59:fc:7c:0f:69:59:aa:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FC:34:C5:E3:E5:60:7E:96:A4:EA:66:5D:54:66:18:93:F5:C8:45
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383730303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:49:2d:75:b6:ca:3c:c7:ea:40:29:6c:93:be:e9:f7:8a:
         8e:74:6d:ed:8d:35:a3:37:46:bd:4c:4c:da:72:e5:b1:63:06:
         7c:e9:13:18:db:d1:9f:0c:d4:0c:23:fb:aa:28:9a:cb:33:03:
         4a:4a:28:e9:ee:bd:a4:9e:a0:cb:3d:73:d0:2b:1a:b0:61:31:
         45:c4:26:8d:78:7a:c4:b9:81:82:64:bc:1b:c9:6a:74:77:d0:
         26:de:45:5d:b4:0a:38:b7:41:5d:44:b4:0a:39:b2:d8:ed:45:
         77:b2:56:89:e9:33:5c:64:7b:33:3b:a9:f9:d7:ae:39:58:bf:
         46:5d:d0:e8:97:ba:c3:dc:be:43:69:39:fd:3f:08:27:11:d3:
         8d:91:91:29:55:30:38:4a:23:15:f4:c7:25:51:d9:f5:90:54:
         75:54:ef:02:81:8c:0f:fc:12:30:2d:63:12:c6:ab:70:b1:12:
         a2:dd:9d:c9:4a:62:bd:cb:c3:9f:2e:79:13:5e:5c:a2:df:d2:
         7b:06:2e:9b:43:a1:31:08:53:b8:8f:92:41:73:da:a1:98:84:
         b6:bd:40:30:cd:49:f2:81:e5:e3:d4:c4:90:9c:01:37:7d:1e:
         ac:74:0b:e3:40:bc:29:e3:65:43:ae:7d:b3:0f:e8:90:5f:26:
         23:74:ff:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIULWuKbRkNQ75XkSwUlbADdNEBfYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2N0E4MUM2NzgxNDMwQjgwNzQyQ0UyQUQ3N0Q1OUQ0
RDY5MUZFRTAeFw0yMzA3MjMwMDAzMjBaFw0yNDA3MjEwMDA4MjBaMDMxMTAvBgNV
BAMTKEE2RkMzNEM1RTNFNTYwN0U5NkE0RUE2NjVENTQ2NjE4OTNGNUM4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItAqGusUImeSgPj3GlNILhu2q
xmcKmOqDw+JXbszHOLml338LovthagBunNIoekQVs8vw9HQsPrEFznlCpM6DDIOE
EagSTOYufoTJkWr5TG46isaZW+cpPIoYyy7dlmSAEgttSjl0XEils/9+MaGT3pn9
L0vLKobHqDRbyTnZVf00GL30Q8rxOMhd66y+BA9pdAtchBtHesONkG/koDEzFKgA
CtrpNf9wTQ9AggyJjrkdWYYGFzfANToxqO/KoBQ0B6JvT+qa2Jc8Xl+94rM8Rg77
24ovhP0pXPD5DhuKnt2LIJvMoq0Uw3/PpK70PI46VAdq7oa8Wfx8D2lZqqOtAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUpvw0xePlYH6WpOpmXVRmGJP1yEUwHwYDVR0j
BBgwFoAUdmeoHGeBQwuAdCzirXfVnU1pH+4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KbzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6
LzAvNzY2N0E4MUM2NzgxNDMwQjgwNzQyQ0UyQUQ3N0Q1OUQ0RDY5MUZFRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC83NjY3QTgxQzY3ODE0MzBCODA3
NDJDRTJBRDc3RDU5RDRENjkxRkVFLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
bzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6LzAvMzIz
ODMwMzQzYTMyMzQ2MzYzM2EzODM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2Uy
MDMyMzYzNDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJMyHMA0GCSqGSIb3DQEBCwUAA4IB
AQCF/0ktdbbKPMfqQClsk77p94qOdG3tjTWjN0a9TEzacuWxYwZ86RMY29GfDNQM
I/uqKJrLMwNKSijp7r2knqDLPXPQKxqwYTFFxCaNeHrEuYGCZLwbyWp0d9Am3kVd
tAo4t0FdRLQKObLY7UV3slaJ6TNcZHszO6n51645WL9GXdDol7rD3L5DaTn9Pwgn
EdONkZEpVTA4SiMV9MclUdn1kFR1VO8CgYwP/BIwLWMSxqtwsRKi3Z3JSmK9y8Of
LnkTXlyi39J7Bi6bQ6ExCFO4j5JBc9qhmIS2vUAwzUnygeXj1MSQnAE3fR6sdAvj
QLwp42VDrn2zD+iQXyYjdP8U
-----END CERTIFICATE-----