Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33372d3337203d3e20323635323431.roa
File:                     323830343a326363303a3a2f33372d3337203d3e20323635323431.roa (raw, json)
Hash identifier:          GxXrlWXfTS1UWUX4RaRky2+PGrFIgFNJPCBumCdXo+E=
Subject key identifier:   47:2E:06:78:79:1B:44:29:69:FE:C8:4C:A4:06:54:1F:D5:D4:95:8D
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       6ABB3E9F94AAC9C5FDF2EA0789FB264DC4F246F0
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33372d3337203d3e20323635323431.roa
Signing time:             Thu 24 Nov 2022 16:10:03 +0000
ROA not before:           Thu 24 Nov 2022 16:05:03 +0000
ROA not after:            Thu 23 Nov 2023 16:10:03 +0000
asID:                     265241
IP address blocks:        2804:2cc0::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bb:3e:9f:94:aa:c9:c5:fd:f2:ea:07:89:fb:26:4d:c4:f2:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Nov 24 16:05:03 2022 GMT
            Not After : Nov 23 16:10:03 2023 GMT
        Subject: CN=472E0678791B442969FEC84CA406541FD5D4958D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:db:79:0d:aa:3c:58:79:61:fe:a6:78:56:
                    49:e0:58:b1:7a:10:91:6e:cc:25:78:2e:14:0b:94:
                    f6:42:eb:f2:0d:60:da:59:fb:75:b6:82:6b:04:34:
                    e9:07:26:87:7d:d8:86:c2:66:94:49:63:65:6d:19:
                    ed:42:98:17:9b:e2:70:f8:c9:7b:b7:85:bc:fd:6b:
                    e6:aa:e9:d7:36:e7:b3:07:02:fc:5b:7d:47:b8:e0:
                    d7:52:af:a6:3c:7b:5e:ad:a3:33:41:ee:41:f0:ec:
                    d5:4c:ff:4c:50:ce:61:b6:dc:7a:83:02:a1:92:bd:
                    54:d1:e2:d3:70:fd:c1:11:30:8a:b5:cd:34:44:5a:
                    e9:0f:40:e9:9e:78:b2:f4:4a:34:9a:3c:51:6b:38:
                    14:09:d7:0c:e3:6c:3d:68:e7:5c:92:aa:34:71:b4:
                    6f:b7:b5:30:27:a2:b6:d8:7a:d4:33:03:75:86:d3:
                    0f:8c:fd:47:46:2e:f1:17:0b:77:b0:6b:e5:71:0a:
                    fb:f0:22:40:2d:e3:cc:0a:52:1c:d1:18:1c:91:7d:
                    5b:92:1e:d0:64:f1:55:62:d9:6a:69:33:da:54:a3:
                    de:fb:09:b0:4a:6e:c4:ff:cd:ed:16:54:90:3b:63:
                    87:67:ab:f5:de:5e:33:ec:9a:b6:8a:5f:b2:96:db:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2E:06:78:79:1B:44:29:69:FE:C8:4C:A4:06:54:1F:D5:D4:95:8D
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33372d3337203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0::/37

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:f3:41:dd:5e:ae:f5:c5:6e:fe:aa:30:06:5a:59:e1:62:
         14:35:c7:35:ad:d8:c0:0e:7e:6d:09:12:dd:c9:a1:97:8c:b0:
         fd:34:04:06:fe:70:da:55:d6:16:9c:bc:ee:f0:5b:9d:06:c7:
         57:76:1c:6a:1c:15:4a:cb:a1:be:36:92:37:06:b9:a6:9b:30:
         3c:32:ab:e8:f1:ac:b4:f6:c6:ef:02:31:67:8d:f5:82:39:d6:
         72:eb:fa:20:e3:d1:45:db:39:af:f8:8d:bc:e1:8d:33:fe:68:
         08:78:40:72:37:26:d7:27:4b:8c:ee:fd:c6:4c:9d:82:24:a1:
         ed:06:7e:7a:2d:a2:bb:a9:4b:16:d8:1b:ad:56:92:ff:7b:e4:
         34:d1:61:ef:c4:97:94:33:13:34:f6:6d:a8:47:e2:b9:94:40:
         07:08:d1:e1:e1:1c:ef:56:6c:f2:12:a8:8c:59:18:f8:49:51:
         7d:a7:48:1a:4b:73:09:15:3b:b1:7c:5a:2c:75:46:80:b7:88:
         84:e1:1e:45:ce:d3:ad:ff:22:76:f7:d8:03:f6:41:aa:ca:ce:
         76:6c:b1:66:61:6b:5b:7b:a7:45:ee:50:e2:50:18:d7:3f:99:
         89:6f:bb:6d:33:fc:e6:c5:96:54:d1:a5:77:69:d4:14:a5:01:
         21:ab:4e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----