Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/323830343a323265303a3a2f33322d3332203d3e20323634313238.roa
File:                     323830343a323265303a3a2f33322d3332203d3e20323634313238.roa (raw, json)
Hash identifier:          UwN/aKHCt+/SMnnriPLkoBSO6ci8ZadL/IQQIfeq/zQ=
Subject key identifier:   B6:AE:39:6F:FB:17:8E:BA:2F:D8:27:37:82:82:C6:0B:EE:88:FF:2F
Certificate issuer:       /CN=DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E
Certificate serial:       2094CEAFCF83FA6B8AFDB6B1CAE61CBBE6846887
Authority key identifier: DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/323830343a323265303a3a2f33322d3332203d3e20323634313238.roa
Signing time:             Mon 27 Mar 2023 12:41:46 +0000
ROA not before:           Mon 27 Mar 2023 12:36:46 +0000
ROA not after:            Mon 25 Mar 2024 12:41:46 +0000
asID:                     264128
IP address blocks:        2804:22e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:94:ce:af:cf:83:fa:6b:8a:fd:b6:b1:ca:e6:1c:bb:e6:84:68:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E
        Validity
            Not Before: Mar 27 12:36:46 2023 GMT
            Not After : Mar 25 12:41:46 2024 GMT
        Subject: CN=B6AE396FFB178EBA2FD827378282C60BEE88FF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:67:bf:59:ff:04:33:95:6a:a7:89:34:62:
                    00:c2:34:fa:f4:36:f6:f0:9f:65:5e:8b:ee:3f:87:
                    d3:f4:1f:28:4e:20:f9:1e:95:48:81:d8:10:2d:c6:
                    3c:a9:ee:7d:53:53:9f:65:85:4e:60:7c:e6:a5:59:
                    78:ea:7a:e0:31:0c:d2:a0:60:88:e5:a7:f5:b4:88:
                    84:96:a5:fb:e2:32:99:55:f6:89:fb:4c:f8:a2:a5:
                    45:c3:a3:fd:59:23:86:d9:00:0c:72:f8:ee:23:7a:
                    47:2b:f1:ed:3c:3f:a3:08:bd:d6:62:f4:66:83:67:
                    fa:eb:dd:64:9b:f0:13:2e:f2:c3:e6:b7:dd:f3:42:
                    e2:cb:f0:f4:2e:f0:45:00:95:51:b9:94:52:3c:52:
                    32:6f:87:fe:3c:31:b4:b2:d6:7f:ee:a5:5c:89:40:
                    7c:0f:43:56:53:78:b5:4b:ee:b8:ef:e2:3f:b0:0f:
                    e3:86:8f:8f:0f:2b:e4:93:c2:b9:5b:55:74:73:55:
                    5e:9f:cd:c5:05:32:62:94:a3:7b:78:1e:f7:20:4f:
                    a6:46:ff:25:dd:e7:51:28:45:56:5c:73:9a:8f:20:
                    c5:84:df:fc:11:a8:a5:65:18:8f:82:7f:f5:f8:69:
                    c6:4e:f9:6a:c3:d8:5f:00:fc:af:55:63:21:1b:78:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AE:39:6F:FB:17:8E:BA:2F:D8:27:37:82:82:C6:0B:EE:88:FF:2F
            X509v3 Authority Key Identifier:
                keyid:DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/323830343a323265303a3a2f33322d3332203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:e3:7b:2f:f1:a7:1a:f2:9b:f6:4c:c7:5d:83:e5:48:9a:
         7a:4e:71:c2:fe:82:82:39:ea:5f:c5:b2:e0:55:6b:56:66:e7:
         5f:78:c9:fe:8d:c7:3d:68:7f:14:77:a1:9f:4d:b3:2b:0d:9a:
         8d:35:94:34:8b:37:27:db:f9:14:ec:d6:a1:40:91:46:0d:bd:
         0d:dc:ed:ff:0b:99:8e:9e:60:fb:50:3d:c6:c4:c6:23:7a:7c:
         8a:2f:bc:95:49:05:4f:f2:55:80:d4:92:67:f0:fc:5c:1d:1d:
         9c:4a:1f:59:5e:6f:1b:c5:75:bc:f8:1a:0f:dd:02:be:2d:58:
         3b:59:5e:34:4e:bd:05:b4:13:ef:e0:bc:7d:1b:70:93:e3:f8:
         75:16:3c:cb:08:d7:bd:97:2f:ff:5e:89:6b:8c:77:92:82:37:
         c9:3f:3d:9b:79:a9:d1:c2:ff:bb:ad:28:7d:1c:89:17:da:b1:
         e1:89:e0:74:c4:51:15:0c:77:74:8c:d0:5d:34:16:10:ca:6d:
         63:e3:cb:11:6e:a6:4e:de:2e:6f:42:fc:57:4a:f3:19:1c:b6:
         2e:eb:b1:f6:bf:53:35:04:a3:a6:0b:50:2c:ba:06:70:ba:22:
         44:7b:3c:98:8d:09:df:d1:39:20:0b:84:d0:6f:a0:e8:bf:20:
         8b:ec:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----