Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a383030303a3a2f33342d3334203d3e20323633323633.roa
File:                     323830343a313831343a383030303a3a2f33342d3334203d3e20323633323633.roa (raw, json)
Hash identifier:          RrA4eYO3xb0uRJlZlOyVLbGvPG5lmBNPW2fDo+biJOE=
Subject key identifier:   56:9A:8F:84:75:46:BB:12:BC:4A:C0:4B:84:26:F8:9C:69:1B:2A:1B
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       0C08EC0C265C48D55725AE962FD7AB0160D6CC8A
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a383030303a3a2f33342d3334203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 11:59:59 +0000
ROA not before:           Tue 16 May 2023 11:54:59 +0000
ROA not after:            Tue 14 May 2024 11:59:59 +0000
asID:                     263263
IP address blocks:        2804:1814:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:08:ec:0c:26:5c:48:d5:57:25:ae:96:2f:d7:ab:01:60:d6:cc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:54:59 2023 GMT
            Not After : May 14 11:59:59 2024 GMT
        Subject: CN=569A8F847546BB12BC4AC04B8426F89C691B2A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7a:01:b7:93:40:fd:54:2b:16:ac:66:dd:02:
                    d5:34:ce:95:52:f5:c1:82:5e:81:30:25:4a:55:75:
                    de:ac:f3:02:80:43:08:f4:6d:d4:ea:a5:1e:20:60:
                    72:93:81:6a:b1:e4:72:45:34:0a:2f:13:18:1c:44:
                    ae:af:8d:18:1c:6b:f0:85:fa:19:0d:03:a5:ae:4b:
                    21:89:11:3e:08:d4:b2:36:98:f8:a6:6e:b5:e8:42:
                    4d:f3:d6:1a:4a:63:e2:87:b7:63:2e:69:91:e0:ab:
                    0d:75:d6:ec:25:19:1d:06:76:96:3e:58:9f:82:f6:
                    78:e4:ef:8f:b2:07:c5:b9:70:26:31:84:8d:d5:7b:
                    5b:01:f2:13:6c:c3:a5:56:7b:7b:9b:dc:60:f2:6d:
                    04:f2:25:38:77:d6:10:90:47:00:81:1d:83:21:ef:
                    e3:70:9f:b6:13:f9:47:5e:02:16:85:74:4c:0f:d1:
                    c8:ed:9f:45:d3:a5:86:11:f8:f1:45:86:e6:0f:86:
                    9e:c2:aa:bc:c5:01:14:a9:9b:27:6d:b8:a8:99:ec:
                    ce:15:b9:97:a7:68:c3:26:06:1c:81:05:b4:c9:42:
                    d0:8f:bb:88:58:ac:af:3f:04:72:88:f4:3a:dc:fd:
                    25:36:d9:30:ee:99:64:0b:c3:88:ca:0a:94:e6:10:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9A:8F:84:75:46:BB:12:BC:4A:C0:4B:84:26:F8:9C:69:1B:2A:1B
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a383030303a3a2f33342d3334203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1814:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:13:d9:ec:ba:11:c8:31:d4:3b:15:ce:e8:7b:d8:e6:6c:
         93:fd:39:a7:03:de:28:b7:52:dd:bd:05:f9:9c:f9:cb:0d:7b:
         70:55:79:00:ee:f1:e7:cb:18:43:0e:cc:f0:5e:55:c4:33:56:
         0f:4c:ac:2b:1a:29:1b:3e:de:ea:5c:58:c2:06:db:a7:3a:8b:
         61:7d:f3:99:73:c9:91:44:8d:3b:83:7a:4b:4b:40:8a:28:57:
         71:cc:56:4d:25:b0:10:db:81:8b:08:a6:36:96:f9:04:bb:95:
         f8:f1:09:49:11:94:61:f4:7d:c9:7e:60:87:45:1b:34:c8:e3:
         61:85:2f:bb:77:9d:12:70:73:be:ea:20:16:92:24:5b:02:82:
         e2:77:c0:24:6b:fa:ba:5b:dd:55:da:c0:07:23:fa:00:1d:3a:
         5d:e6:cf:50:47:77:be:3a:1b:64:b9:18:b2:c7:25:6e:5b:cf:
         9e:26:f8:2c:5f:cb:85:0b:9a:14:07:d6:73:f7:04:dd:32:94:
         04:c4:f0:30:e1:b9:9c:a9:ab:10:52:45:b5:ea:f7:eb:9c:ca:
         b3:21:42:33:4a:c2:00:d8:33:08:94:fa:d8:bc:f7:15:c2:d8:
         43:94:f6:2d:83:e3:f3:45:22:10:bb:00:00:40:aa:7b:9a:9c:
         c9:3c:0a:52
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDAjsDCZcSNVXJa6WL9erAWDWzIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGRTNGNUM3RjRDMTYxRUI3RjEzRTBDQjI0Qjg4MjlG
RTM4MTI2MDAeFw0yMzA1MTYxMTU0NTlaFw0yNDA1MTQxMTU5NTlaMDMxMTAvBgNV
BAMTKDU2OUE4Rjg0NzU0NkJCMTJCQzRBQzA0Qjg0MjZGODlDNjkxQjJBMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxegG3k0D9VCsWrGbdAtU0zpVS
9cGCXoEwJUpVdd6s8wKAQwj0bdTqpR4gYHKTgWqx5HJFNAovExgcRK6vjRgca/CF
+hkNA6WuSyGJET4I1LI2mPimbrXoQk3z1hpKY+KHt2MuaZHgqw111uwlGR0GdpY+
WJ+C9njk74+yB8W5cCYxhI3Ve1sB8hNsw6VWe3ub3GDybQTyJTh31hCQRwCBHYMh
7+Nwn7YT+UdeAhaFdEwP0cjtn0XTpYYR+PFFhuYPhp7CqrzFARSpmydtuKiZ7M4V
uZenaMMmBhyBBbTJQtCPu4hYrK8/BHKI9Drc/SU22TDumWQLw4jKCpTmELpDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVpqPhHVGuxK8SsBLhCb4nGkbKhswHwYDVR0j
BBgwFoAU/v4/XH9MFh638T4MskuIKf44EmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMC9GRUZFM0Y1QzdGNEMxNjFFQjdGMTNFMENCMjRCODgyOUZFMzgxMjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFRkUzRjVDN0Y0QzE2MUVC
N0YxM0UwQ0IyNEI4ODI5RkUzODEyNjAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzAv
MzIzODMwMzQzYTMxMzgzMTM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMyMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEGBSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBi/BPZ7LoRyDHUOxXO6HvY5myT/TmnA94ot1LdvQX5nPnLDXtwVXkA7vHn
yxhDDszwXlXEM1YPTKwrGikbPt7qXFjCBtunOothffOZc8mRRI07g3pLS0CKKFdx
zFZNJbAQ24GLCKY2lvkEu5X48QlJEZRh9H3JfmCHRRs0yONhhS+7d50ScHO+6iAW
kiRbAoLid8Aka/q6W91V2sAHI/oAHTpd5s9QR3e+OhtkuRiyxyVuW8+eJvgsX8uF
C5oUB9Zz9wTdMpQExPAw4bmcqasQUkW16vfrnMqzIUIzSsIA2DMIlPrYvPcVwthD
lPYtg+PzRSIQuwAAQKp7mpzJPApS
-----END CERTIFICATE-----