Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          1GogdMYwUygVkchW+HhDPDeVgg6IIpQ0TNxVj/QEICM=
Subject key identifier:   1D:F0:D6:23:B8:BF:51:C7:E1:9E:CB:83:6D:CF:4B:84:87:D2:0D:7F
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       68D3B73CAFE4B9D1F66382EFFFEB5BB9A512C65F
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:22 +0000
ROA not before:           Sun 23 Jul 2023 00:03:22 +0000
ROA not after:            Sun 21 Jul 2024 00:08:22 +0000
asID:                     264242
IP address blocks:        2804:24cc:9200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:b7:3c:af:e4:b9:d1:f6:63:82:ef:ff:eb:5b:b9:a5:12:c6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:22 2023 GMT
            Not After : Jul 21 00:08:22 2024 GMT
        Subject: CN=1DF0D623B8BF51C7E19ECB836DCF4B8487D20D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:c6:12:9d:9b:85:ed:4c:f0:4d:47:88:1c:
                    da:ff:c0:00:81:02:31:65:c9:5d:61:6d:e3:8a:66:
                    79:30:be:a0:46:80:bb:8c:46:49:e6:1a:9f:46:f4:
                    d5:9d:d7:ce:5f:7a:a4:1a:c5:81:21:13:b9:8f:b7:
                    b6:53:7d:d7:70:44:0b:b9:34:a3:61:42:ac:db:b5:
                    d4:27:53:e3:82:65:c4:8a:f7:2a:b7:e0:2f:f5:06:
                    3e:51:82:a7:8d:9a:f3:bb:50:53:ce:aa:7e:7d:a5:
                    a9:a9:6e:4b:bb:06:8d:23:7e:54:cb:02:62:dc:78:
                    ee:fb:ae:9f:ef:59:9a:82:b5:f0:9b:c7:01:7e:ee:
                    9f:a5:f9:d4:0e:de:67:71:74:81:ca:ab:33:17:0f:
                    45:2b:08:18:d2:10:2d:af:d7:45:2e:9b:4e:ea:c6:
                    ca:a3:dc:a0:9e:8c:77:68:9b:80:5a:5e:8f:23:cf:
                    ce:5a:3e:ce:c6:62:19:2e:cb:28:b8:92:dc:c3:d2:
                    7a:65:fc:8f:c9:51:a5:dd:44:f9:49:ab:49:1a:a0:
                    7a:d9:38:bb:c2:5b:ef:5a:b5:15:f8:3b:e2:d3:29:
                    66:c4:6d:21:46:38:64:70:af:c0:d9:e7:3c:b6:30:
                    40:a1:e7:9b:52:af:27:2c:7f:b0:0e:5e:02:3f:b5:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F0:D6:23:B8:BF:51:C7:E1:9E:CB:83:6D:CF:4B:84:87:D2:0D:7F
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:37:78:33:6f:fe:b4:4f:cc:c5:56:23:10:bc:ba:ef:4b:bd:
         21:e5:0c:47:ec:4d:d1:93:74:91:55:4d:89:4f:b2:de:e0:d1:
         d6:f4:8c:31:d8:00:dc:7b:44:27:f6:32:49:74:14:fe:5c:2e:
         49:8b:07:e7:90:aa:f8:a7:36:f2:3a:0b:21:a5:c0:a1:ce:6b:
         f1:54:59:00:d0:d7:9e:92:1c:93:8d:01:86:6e:4a:c4:ad:e2:
         53:d3:95:e5:d1:2f:fc:5f:95:45:e7:ee:43:ec:00:59:b6:41:
         21:b8:7d:a0:8c:fa:0e:54:92:b2:3b:3b:45:9e:0a:b5:1f:10:
         95:da:aa:cc:ce:c7:8e:c5:eb:0a:2b:37:29:2d:24:e8:8b:d8:
         a1:ea:0b:00:21:f2:3b:d7:74:67:62:2c:d8:5f:04:b7:33:c1:
         eb:b2:be:f2:43:9d:a1:10:ea:aa:63:84:bb:81:3a:77:65:af:
         e7:ed:62:28:a0:c7:fb:7e:88:d5:bc:f7:40:b0:67:1a:90:c7:
         24:e2:2b:47:d8:0d:f5:81:76:44:47:a0:f1:8e:b1:a9:eb:5f:
         52:a6:9b:1d:cf:04:53:94:62:15:94:26:79:79:5d:f5:5a:cc:
         ac:eb:bc:a9:a0:d2:8c:6a:35:93:2f:35:30:62:aa:fe:bc:c7:
         67:2c:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----