Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3332203d3e203631363936.roa
File:                     323830343a316165303a3a2f33322d3332203d3e203631363936.roa (raw, json)
Hash identifier:          qLqxyCiVewcunuf5xgfEjbfdZlIT5ftXZCK/tlGXcUw=
Subject key identifier:   01:62:EA:4C:8B:7D:F4:21:E7:90:F7:9D:86:63:B5:77:39:F6:08:FB
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       677F70598B3F7B5D5FD63B21312FBA9607EA17E0
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3332203d3e203631363936.roa
Signing time:             Sat 14 Oct 2023 22:10:07 +0000
ROA not before:           Sat 14 Oct 2023 22:05:07 +0000
ROA not after:            Sat 12 Oct 2024 22:10:07 +0000
asID:                     61696
IP address blocks:        2804:1ae0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7f:70:59:8b:3f:7b:5d:5f:d6:3b:21:31:2f:ba:96:07:ea:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct 14 22:05:07 2023 GMT
            Not After : Oct 12 22:10:07 2024 GMT
        Subject: CN=0162EA4C8B7DF421E790F79D8663B57739F608FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:9c:69:d0:01:51:03:61:07:ba:84:5c:a3:
                    60:42:1e:ab:87:b4:d3:e9:66:1a:e9:95:bd:1f:8e:
                    d6:37:70:cd:9b:4b:d5:f6:fb:c0:e8:8d:8a:78:36:
                    da:42:ac:b1:50:ee:3e:99:a2:1f:64:df:e3:7c:34:
                    c6:be:7d:92:e9:46:35:54:21:3d:da:c9:75:44:54:
                    d6:08:33:99:45:90:75:55:4a:2b:7d:2e:c4:52:6b:
                    9e:05:14:90:b4:38:40:7b:50:66:47:59:52:a2:fd:
                    19:77:ec:9a:57:6b:27:b2:c0:bc:c4:a1:1e:fa:14:
                    14:32:38:99:22:d4:8b:5c:f0:56:16:e6:b4:cc:67:
                    3c:6c:4c:24:3f:d1:e5:ec:b6:89:4b:df:d1:57:ae:
                    09:c6:7d:11:de:dc:62:ba:76:ff:ba:72:60:a5:aa:
                    72:e9:da:3b:4e:8b:43:a3:bf:1a:bf:6b:62:28:06:
                    ab:3b:53:eb:fa:51:28:a6:9b:a5:26:ae:cb:83:a7:
                    45:83:01:5e:14:f5:c3:a8:94:88:08:88:0b:8a:ec:
                    58:5a:5a:1e:07:0f:f8:be:6c:d5:a4:0e:44:0b:94:
                    54:25:82:31:1a:c5:f4:bb:dc:1e:42:22:b0:7e:1a:
                    e9:87:f2:d3:59:6c:45:df:16:a1:58:fe:7a:ed:fd:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:EA:4C:8B:7D:F4:21:E7:90:F7:9D:86:63:B5:77:39:F6:08:FB
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3332203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:56:03:4b:5b:43:fa:46:09:72:cc:bd:77:32:87:a7:39:a8:
         74:1c:08:63:22:f4:2d:df:de:ef:fe:01:a6:a3:6a:b7:0c:38:
         a4:5c:6b:de:77:0a:cf:c2:d7:98:5b:9f:2e:e5:80:5a:00:cc:
         05:e7:59:e4:0a:07:66:ed:a9:b6:6c:d5:23:52:91:bb:a3:1b:
         30:a0:e8:81:21:04:b7:51:7c:e8:ca:ea:00:e0:7f:dd:9c:a8:
         6a:7f:d4:ae:53:ac:d6:92:51:97:b5:a6:65:5b:c2:26:61:47:
         8b:7e:1e:3f:7f:ed:16:97:75:e2:18:19:a7:2e:59:86:54:4e:
         fb:5e:45:a7:6e:96:14:8c:32:02:50:4f:0a:0d:40:61:39:fe:
         91:63:34:1f:af:1f:b4:87:b6:40:c2:e5:43:a5:a9:3b:08:55:
         51:ca:32:26:3d:08:a2:e1:52:f2:62:04:d4:dd:36:de:b0:be:
         49:af:0e:26:32:9c:f6:1c:41:4e:fc:00:a1:c7:13:1a:36:d4:
         50:0e:08:b7:6d:25:1c:58:f7:4b:60:20:51:bb:1f:17:f4:65:
         dd:61:85:11:be:67:60:4e:22:0e:f7:c2:04:84:d1:95:5c:9e:
         00:42:58:25:18:66:eb:25:e1:55:1a:ae:4f:2a:86:50:fe:dd:
         7d:d9:50:20
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZ39wWYs/e11f1jshMS+6lgfqF+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDMDJFOUJBODIwRDJFNzA2NTI4QkM4NzNDODA0NDNE
MDJDRTY2NzAeFw0yMzEwMTQyMjA1MDdaFw0yNDEwMTIyMjEwMDdaMDMxMTAvBgNV
BAMTKDAxNjJFQTRDOEI3REY0MjFFNzkwRjc5RDg2NjNCNTc3MzlGNjA4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0Zxp0AFRA2EHuoRco2BCHquH
tNPpZhrplb0fjtY3cM2bS9X2+8DojYp4NtpCrLFQ7j6Zoh9k3+N8NMa+fZLpRjVU
IT3ayXVEVNYIM5lFkHVVSit9LsRSa54FFJC0OEB7UGZHWVKi/Rl37JpXayeywLzE
oR76FBQyOJki1Itc8FYW5rTMZzxsTCQ/0eXstolL39FXrgnGfRHe3GK6dv+6cmCl
qnLp2jtOi0Ojvxq/a2IoBqs7U+v6USimm6UmrsuDp0WDAV4U9cOolIgIiAuK7Fha
Wh4HD/i+bNWkDkQLlFQlgjEaxfS73B5CIrB+GumH8tNZbEXfFqFY/nrt/cgPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUAWLqTIt99CHnkPedhmO1dzn2CPswHwYDVR0j
BBgwFoAUw8Aum6gg0ucGUovIc8gEQ9As5mcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX
c3gvMC9DM0MwMkU5QkE4MjBEMkU3MDY1MjhCQzg3M0M4MDQ0M0QwMkNFNjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzQzAyRTlCQTgyMEQyRTcw
NjUyOEJDODczQzgwNDQzRDAyQ0U2NjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJYRWlSSk5VZVV3dmVjWGI2TWh6TURpTUpVb1lhZXI4N2ozcXljalRjV3N4LzAv
MzIzODMwMzQzYTMxNjE2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGuAwDQYJKoZIhvcNAQELBQADggEBAE9WA0tbQ/pG
CXLMvXcyh6c5qHQcCGMi9C3f3u/+AaajarcMOKRca953Cs/C15hbny7lgFoAzAXn
WeQKB2btqbZs1SNSkbujGzCg6IEhBLdRfOjK6gDgf92cqGp/1K5TrNaSUZe1pmVb
wiZhR4t+Hj9/7RaXdeIYGacuWYZUTvteRadulhSMMgJQTwoNQGE5/pFjNB+vH7SH
tkDC5UOlqTsIVVHKMiY9CKLhUvJiBNTdNt6wvkmvDiYynPYcQU78AKHHExo21FAO
CLdtJRxY90tgIFG7Hxf0Zd1hhRG+Z2BOIg73wgSE0ZVcngBCWCUYZusl4VUark8q
hlD+3X3ZUCA=
-----END CERTIFICATE-----