Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          cLTLJfDj30ZAoGO6RoQKdFGoH8v1sPEuHxd9DBsQjag=
Subject key identifier:   15:63:4D:3D:EE:A7:69:FA:37:0B:43:0E:32:38:22:6A:6C:36:E3:82
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       4D1CE7E87C92E0987BC21D8904E9BFFD2AA2E8F6
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:23 +0000
ROA not before:           Sun 23 Jul 2023 00:03:23 +0000
ROA not after:            Sun 21 Jul 2024 00:08:23 +0000
asID:                     264242
IP address blocks:        2804:24cc:8d00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1c:e7:e8:7c:92:e0:98:7b:c2:1d:89:04:e9:bf:fd:2a:a2:e8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:23 2023 GMT
            Not After : Jul 21 00:08:23 2024 GMT
        Subject: CN=15634D3DEEA769FA370B430E3238226A6C36E382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:25:fc:b9:bf:16:b8:ce:91:90:c3:57:8c:
                    6f:2b:af:98:d8:84:74:d5:f9:d0:ff:03:88:13:7a:
                    4f:77:c1:1a:44:9c:22:9f:a1:2e:32:08:73:a2:03:
                    20:49:da:2d:e9:d7:7c:20:0e:03:f1:51:3d:b5:d4:
                    9e:e3:f2:8f:6c:88:a4:8a:55:3b:99:47:4d:f5:38:
                    14:d2:45:80:5e:2e:a3:48:3f:a4:81:fb:cc:37:2e:
                    15:9f:0e:df:e5:9b:7b:db:68:2f:f4:76:f8:f8:42:
                    20:6b:30:e5:87:ec:2d:0a:65:93:1f:b6:02:98:60:
                    c1:d3:26:e9:3d:2a:9e:78:10:a9:02:cd:bf:e1:5f:
                    ba:41:fa:76:7d:24:fc:4a:c8:ca:d8:36:da:f1:86:
                    46:3b:f9:a1:49:96:14:4a:88:bb:b1:1f:49:0a:5a:
                    29:c6:d9:a4:8a:f8:2f:a7:69:2d:bb:d2:b4:ec:57:
                    3f:0c:fc:b2:93:68:fa:0e:2c:be:e1:ae:ea:3e:d9:
                    2f:c5:22:f9:9e:cd:35:7b:ec:20:f7:3e:a3:ee:ae:
                    e7:67:02:7f:7c:46:64:b9:d2:81:14:b9:2f:49:29:
                    9a:45:19:93:ac:fc:9e:0a:81:23:29:93:d9:45:b1:
                    17:83:dc:74:61:44:8b:e4:7d:72:79:d9:c5:52:68:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:63:4D:3D:EE:A7:69:FA:37:0B:43:0E:32:38:22:6A:6C:36:E3:82
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:35:42:c7:89:90:27:62:0d:e2:9e:02:e3:9f:00:ba:8a:0c:
         8d:43:35:38:0c:35:df:fb:94:7e:00:5c:83:64:29:be:18:f6:
         39:b4:d6:23:24:69:4c:f0:a0:03:56:29:19:a4:01:0a:86:e6:
         a8:c2:15:cd:da:c3:88:44:4b:ce:2f:3a:7a:c6:07:8b:55:6d:
         f0:51:0b:b0:37:99:11:22:4a:a7:87:20:72:a1:40:fc:93:e4:
         d5:65:8e:4c:aa:f1:ca:45:d9:91:ad:cd:27:e3:c2:d9:8c:9d:
         17:72:f9:37:b9:12:58:ef:57:62:c3:20:11:e7:10:9f:80:43:
         ea:74:c3:0d:73:39:53:ca:55:d4:44:ff:96:1d:70:ba:2e:2a:
         0e:8e:0f:a6:69:a6:64:28:48:d3:f7:c8:d8:2a:1e:44:f5:67:
         28:36:0d:df:d3:5c:23:38:0b:07:7d:b8:bf:bf:95:b2:f6:70:
         09:fe:f1:6d:60:97:c7:bb:8a:f8:c6:b4:d1:6d:91:ae:07:be:
         cc:f6:db:64:5b:83:0d:6e:0b:5b:5a:eb:6e:5f:30:3c:6e:63:
         3e:72:be:16:d2:22:b3:9e:cf:86:2f:0e:0e:1b:0e:d4:5a:ef:
         ba:24:92:96:3e:1f:ec:85:ba:76:5c:f9:b3:b5:69:7d:20:63:
         99:30:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----