Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3438203d3e20323638393133.roa
File:                     323830343a356338343a3a2f33322d3438203d3e20323638393133.roa (raw, json)
Hash identifier:          lw+Aye4q9CluJwA4mkzM+G44HDcdNzvS1u11pnormlE=
Subject key identifier:   D5:DF:1B:0A:13:F8:FF:1E:74:8D:4B:04:D0:00:63:68:8F:82:CD:F1
Certificate issuer:       /CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
Certificate serial:       1B68B03CD91D6FECC3D850290DBDBE87A9CDA002
Authority key identifier: E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3438203d3e20323638393133.roa
Signing time:             Fri 22 Sep 2023 20:58:04 +0000
ROA not before:           Fri 22 Sep 2023 20:53:04 +0000
ROA not after:            Fri 20 Sep 2024 20:58:04 +0000
asID:                     268913
IP address blocks:        2804:5c84::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:68:b0:3c:d9:1d:6f:ec:c3:d8:50:29:0d:bd:be:87:a9:cd:a0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
        Validity
            Not Before: Sep 22 20:53:04 2023 GMT
            Not After : Sep 20 20:58:04 2024 GMT
        Subject: CN=D5DF1B0A13F8FF1E748D4B04D00063688F82CDF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:6b:7e:6c:7f:5f:d1:c9:d0:6e:74:f9:9d:
                    9a:87:7c:a2:6e:4e:85:c8:8d:63:7a:ba:ab:c3:09:
                    76:1d:68:fa:8d:40:f6:7a:5c:ad:d5:9c:34:4f:90:
                    ff:4a:4a:6d:21:e2:3b:10:eb:21:04:6f:12:07:09:
                    52:98:22:0d:d4:ea:b1:d1:b4:6e:fe:ad:73:70:2a:
                    8a:99:69:8c:35:3e:f9:5c:e2:fd:bd:43:dd:00:24:
                    d4:13:8a:2c:17:db:c9:05:ce:0a:05:10:3d:82:68:
                    82:d4:37:71:32:d6:16:ab:d6:85:6a:1c:e6:2f:31:
                    3c:c6:53:ce:6f:6c:99:0b:8e:b2:38:4c:5a:b7:14:
                    6a:e9:94:83:32:1c:8e:1a:c8:68:2a:db:a9:1a:ad:
                    69:56:7a:fc:eb:78:bb:98:55:65:25:28:e2:d9:a9:
                    65:2e:11:41:cf:52:5b:37:c0:2d:a9:c6:78:61:95:
                    17:73:1d:b8:c4:c5:a1:74:f1:20:17:22:a3:62:8d:
                    64:22:ee:53:e6:96:ac:cf:f6:af:64:c2:ac:4c:d1:
                    91:d0:f5:c9:d1:d1:9d:9f:87:2d:85:6a:d0:e8:f3:
                    8b:82:32:36:15:f9:5b:9d:2c:76:a1:42:02:a7:97:
                    31:6d:05:ef:f9:26:0b:bd:da:08:0c:b3:71:aa:90:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:1B:0A:13:F8:FF:1E:74:8D:4B:04:D0:00:63:68:8F:82:CD:F1
            X509v3 Authority Key Identifier:
                keyid:E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/323830343a356338343a3a2f33322d3438203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:4b:f2:08:01:e0:b5:9a:06:70:ef:8b:2d:46:cb:4f:03:
         85:ea:99:8f:5f:b9:b5:24:de:5a:23:f0:d4:be:92:6e:65:34:
         6d:87:68:71:a1:53:03:08:de:1e:86:80:72:8e:ef:d4:a0:fe:
         55:35:98:cc:98:d3:5d:20:75:6e:b2:38:dc:56:f2:6f:fa:ed:
         8a:6d:fe:93:d4:88:57:60:fd:c6:84:73:14:9c:fa:9a:3f:70:
         a1:8f:59:00:45:7f:59:ac:0b:9b:ec:e7:33:a5:13:04:20:c8:
         ad:05:ca:49:46:bd:cb:e0:ae:12:20:3f:96:ab:c7:6f:bb:79:
         04:96:62:be:83:65:07:3e:cd:86:db:85:c4:5d:25:ff:41:ea:
         26:cb:ad:b8:84:bb:c2:4e:ef:84:a7:79:fd:87:17:f0:33:a7:
         1e:25:36:d9:37:b3:56:0a:62:1e:af:31:95:f0:af:96:e7:d8:
         7c:6b:a9:cb:13:d5:a5:e7:ed:6e:5d:60:99:bd:9d:98:f3:4f:
         95:07:ef:89:86:29:89:5a:52:f1:bc:45:c0:f4:d4:d6:36:f9:
         fa:0e:fd:c4:41:90:f1:dc:e0:ae:97:9f:a4:9c:e8:82:ba:94:
         75:b4:0a:32:44:82:52:fa:d2:cb:40:cb:24:8f:8e:2c:3c:85:
         01:89:c2:51
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUG2iwPNkdb+zD2FApDb2+h6nNoAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkyQzJFNUVCQUI0QUM5QzYyOTRCN0UwNUU2RUIzMTg4
RDQzRjJFMDAeFw0yMzA5MjIyMDUzMDRaFw0yNDA5MjAyMDU4MDRaMDMxMTAvBgNV
BAMTKEQ1REYxQjBBMTNGOEZGMUU3NDhENEIwNEQwMDA2MzY4OEY4MkNERjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvX2t+bH9f0cnQbnT5nZqHfKJu
ToXIjWN6uqvDCXYdaPqNQPZ6XK3VnDRPkP9KSm0h4jsQ6yEEbxIHCVKYIg3U6rHR
tG7+rXNwKoqZaYw1Pvlc4v29Q90AJNQTiiwX28kFzgoFED2CaILUN3Ey1har1oVq
HOYvMTzGU85vbJkLjrI4TFq3FGrplIMyHI4ayGgq26karWlWevzreLuYVWUlKOLZ
qWUuEUHPUls3wC2pxnhhlRdzHbjExaF08SAXIqNijWQi7lPmlqzP9q9kwqxM0ZHQ
9cnR0Z2fhy2FatDo84uCMjYV+VudLHahQgKnlzFtBe/5Jgu92ggMs3GqkNNLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1d8bChP4/x50jUsE0ABjaI+CzfEwHwYDVR0j
BBgwFoAU6SwuXrq0rJxilLfgXm6zGI1D8uAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K
Z2UvMC9FOTJDMkU1RUJBQjRBQzlDNjI5NEI3RTA1RTZFQjMxODhENDNGMkUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5MkMyRTVFQkFCNEFDOUM2
Mjk0QjdFMDVFNkVCMzE4OEQ0M0YyRTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJjUERudmRYa2hoZHdrYVF4dmVSR1ZFVktQWUpuOFdTa21GN0hGdFBOSmdlLzAv
MzIzODMwMzQzYTM1NjMzODM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARchDANBgkqhkiG9w0BAQsFAAOCAQEAWPVL8ggB
4LWaBnDviy1Gy08DheqZj1+5tSTeWiPw1L6SbmU0bYdocaFTAwjeHoaAco7v1KD+
VTWYzJjTXSB1brI43Fbyb/rtim3+k9SIV2D9xoRzFJz6mj9woY9ZAEV/WawLm+zn
M6UTBCDIrQXKSUa9y+CuEiA/lqvHb7t5BJZivoNlBz7NhtuFxF0l/0HqJsutuIS7
wk7vhKd5/YcX8DOnHiU22TezVgpiHq8xlfCvlufYfGupyxPVpeftbl1gmb2dmPNP
lQfviYYpiVpS8bxFwPTU1jb5+g79xEGQ8dzgrpefpJzogrqUdbQKMkSCUvrSy0DL
JI+OLDyFAYnCUQ==
-----END CERTIFICATE-----