Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3332203d3e20323636353834.roa
File:                     323830343a336534343a3a2f33322d3332203d3e20323636353834.roa (raw, json)
Hash identifier:          cV4hIUTOWcLq93cv48gPOKyZrQ64leQmMqIrzQ0sI60=
Subject key identifier:   7E:56:79:5D:99:08:AD:7A:16:EE:E7:42:B8:D8:8D:64:FD:A9:36:53
Certificate issuer:       /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
Certificate serial:       17F1B30EF28832BA85D91DDD2667CA79A33B0844
Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3332203d3e20323636353834.roa
Signing time:             Tue 25 Jun 2024 20:45:05 +0000
ROA not before:           Tue 25 Jun 2024 20:40:05 +0000
ROA not after:            Tue 24 Jun 2025 20:45:05 +0000
asID:                     266584
IP address blocks:        2804:3e44::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f1:b3:0e:f2:88:32:ba:85:d9:1d:dd:26:67:ca:79:a3:3b:08:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Validity
            Not Before: Jun 25 20:40:05 2024 GMT
            Not After : Jun 24 20:45:05 2025 GMT
        Subject: CN=7E56795D9908AD7A16EEE742B8D88D64FDA93653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:fb:d6:18:5f:8d:18:33:eb:2a:73:eb:ba:
                    69:f1:64:51:b0:e4:41:06:56:e2:94:d7:94:43:b6:
                    13:6f:49:4e:4f:92:f6:d4:cf:28:ef:9a:6e:70:ba:
                    87:76:cb:c0:24:67:65:10:b5:e8:d2:a0:c5:66:d3:
                    1f:f1:01:59:50:1a:87:ea:17:93:c1:76:92:cc:69:
                    62:c3:d7:7f:8c:64:1e:c6:e6:0d:5a:78:17:da:b6:
                    97:dd:dc:e6:1e:01:f7:6f:df:ac:cc:9c:04:eb:63:
                    79:94:29:d3:92:2e:a3:4d:05:4e:4e:a1:cc:d2:ac:
                    98:26:e0:3b:39:81:f3:b8:bf:7a:a6:f7:7e:18:20:
                    5f:45:ef:b1:75:f1:ed:e3:79:15:e3:b9:55:b6:98:
                    0d:59:7d:c0:27:10:b9:fd:94:30:ca:5a:72:e7:46:
                    c8:42:c0:db:0b:67:d8:09:fa:8f:f7:0e:a5:69:b2:
                    9a:dd:78:44:ae:20:a1:71:ae:47:96:f0:34:dd:d2:
                    2b:94:ce:a6:dc:2d:15:d3:8d:2a:7f:7c:1a:9c:d2:
                    f0:be:8f:ff:69:20:62:c9:16:cf:d8:20:94:89:f1:
                    dd:15:e3:e9:6f:70:66:62:e2:b4:55:2c:e5:71:e6:
                    5c:7a:74:62:48:20:fc:d9:5c:c9:a6:e7:f6:cb:13:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:79:5D:99:08:AD:7A:16:EE:E7:42:B8:D8:8D:64:FD:A9:36:53
            X509v3 Authority Key Identifier:
                keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3332203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:d7:b5:36:6e:28:fe:93:fb:6d:e2:2c:4d:60:29:5e:9e:
         8c:02:58:67:25:10:a0:d1:6a:9f:46:a0:e0:cf:95:12:c6:d0:
         09:93:f8:86:28:9b:17:83:22:3a:ad:0b:78:39:c4:09:74:78:
         61:8e:f5:e6:fa:6d:b5:ec:da:0b:bf:4a:bf:3b:6f:f7:e3:af:
         68:7a:6a:23:77:97:84:02:b3:0b:49:6b:c6:0f:34:2a:f0:e7:
         8b:27:26:62:96:f9:94:a6:bf:fd:e7:b2:01:0f:1e:5d:6e:f3:
         c5:a1:3e:25:7f:3c:26:bc:b0:9b:89:06:ce:6b:22:7b:75:e7:
         31:84:0b:87:99:4d:a7:7e:50:6a:2e:91:73:3d:14:85:a3:a9:
         a0:b9:04:87:ac:11:bc:00:bd:4c:ea:a1:24:d3:dd:ff:48:7c:
         31:b7:7d:c5:16:76:ac:ed:2f:53:99:5c:27:9e:fd:51:d6:59:
         cf:1f:8c:5b:54:e2:de:9d:5c:f9:2f:39:54:b6:4d:bc:e0:a3:
         0e:a1:66:34:10:16:91:12:32:05:85:2c:38:f8:0e:d8:5f:1c:
         21:bc:74:79:ac:6e:00:a3:a2:23:e1:77:9b:c5:6d:74:b8:c9:
         26:e7:26:03:2d:63:84:f8:45:8d:b3:01:ae:f8:ad:48:52:21:
         db:80:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----