Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3332203d3e20323638393133.roa
File:                     34352e3137352e3232382e302f32322d3332203d3e20323638393133.roa (raw, json)
Hash identifier:          hBx72VjTY826kj8jbj2OTva3Vbkl83N6LYhj1k4DvA0=
Subject key identifier:   90:4D:85:F5:D5:B4:D0:90:EA:55:09:5F:D2:BD:70:FE:F8:DC:AD:BB
Certificate issuer:       /CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
Certificate serial:       50C6FA4A142D7710B2D4EE3600974A782BD54C75
Authority key identifier: E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3332203d3e20323638393133.roa
Signing time:             Mon 02 Oct 2023 19:40:10 +0000
ROA not before:           Mon 02 Oct 2023 19:35:10 +0000
ROA not after:            Mon 30 Sep 2024 19:40:10 +0000
asID:                     268913
IP address blocks:        45.175.228.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c6:fa:4a:14:2d:77:10:b2:d4:ee:36:00:97:4a:78:2b:d5:4c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
        Validity
            Not Before: Oct  2 19:35:10 2023 GMT
            Not After : Sep 30 19:40:10 2024 GMT
        Subject: CN=904D85F5D5B4D090EA55095FD2BD70FEF8DCADBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:02:a3:10:52:da:9b:ca:92:e5:43:b6:d1:
                    07:d4:03:2b:01:1b:ac:08:fb:7a:ea:ec:29:bb:d7:
                    06:a0:a7:66:ef:b3:e0:b9:30:75:65:e1:2e:4f:d2:
                    bb:ac:b2:a3:b7:45:f1:9c:8a:97:df:fb:59:a7:44:
                    10:18:cf:67:d5:99:5c:e4:59:6e:ee:13:1c:80:8a:
                    a6:77:0a:4d:08:89:c2:8a:e1:07:e3:05:54:3e:7b:
                    23:a3:35:4a:12:e2:5e:8e:b9:f1:27:84:f8:6d:f1:
                    6a:e6:1e:c1:78:7e:00:53:fe:0f:9d:1d:bf:b5:6d:
                    a6:d7:79:a5:f7:6d:65:a0:4a:99:18:25:10:93:ef:
                    1b:9b:39:0c:93:0e:ab:02:7a:01:4c:61:d8:5f:e9:
                    05:12:5e:8b:66:d5:e9:9f:39:e6:8a:f7:e2:49:6b:
                    63:23:25:fe:53:d0:4a:85:a3:a2:2b:08:91:fc:39:
                    cc:70:a0:48:3f:29:c6:44:d8:d7:a3:f2:7c:25:d8:
                    dc:1c:60:b6:d4:ca:21:1f:40:7e:07:0e:9d:08:be:
                    35:91:49:65:5a:6e:ca:7c:f0:e2:d3:9d:6b:46:26:
                    a4:1d:50:cb:83:83:7f:8a:a4:7a:b7:47:d0:64:01:
                    71:08:b2:a1:35:f0:2f:ce:90:2b:6e:c1:8e:39:23:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4D:85:F5:D5:B4:D0:90:EA:55:09:5F:D2:BD:70:FE:F8:DC:AD:BB
            X509v3 Authority Key Identifier:
                keyid:E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3332203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:27:4d:ef:4b:47:f7:50:44:1f:ae:00:5c:33:7f:4b:0c:
         ac:95:b7:f8:46:b7:52:45:8b:e7:d8:43:6d:b7:4d:44:95:aa:
         30:18:68:ef:a1:ae:b7:5a:3f:66:1f:ad:53:f5:3b:b3:a9:8d:
         cd:69:f5:bd:d5:bf:2b:a6:2f:bd:b7:c4:1d:94:f7:a7:a4:f4:
         df:23:8b:3b:03:8b:89:e5:b8:93:67:60:70:ee:36:6e:a3:87:
         45:2d:bf:ba:9c:c2:f1:46:e1:20:ba:49:c8:7e:d3:d3:ac:59:
         ee:68:82:c0:71:ef:61:9f:0d:bd:19:ce:52:7d:6e:6d:4e:33:
         ca:34:d9:31:0b:50:3f:f4:fe:82:43:57:95:c7:7a:74:dd:7b:
         c7:a3:2d:5e:4f:6f:9a:0d:5d:e6:e8:a1:d9:4f:a5:51:fb:a0:
         5a:a4:d5:bf:87:64:10:b8:89:43:ca:65:e4:de:92:04:2f:87:
         4d:66:fc:40:1d:3c:cc:58:b1:d0:9e:bb:20:a8:92:31:3c:c5:
         38:f0:76:1b:b3:8f:98:df:9e:05:26:bc:74:2a:b0:3f:9e:8a:
         c3:63:53:f8:10:09:03:f0:d8:8a:14:84:0c:8a:cf:86:73:11:
         00:4b:88:34:71:95:58:79:45:77:1c:22:9d:bc:fd:bf:51:a1:
         00:43:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----