Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa
File:                     323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa (raw, json)
Hash identifier:          ONQ/ey3oFzfThCRq+RXRNcC7xgFMBKvRzACytf8hTNo=
Subject key identifier:   2A:DF:82:0A:CC:36:FF:47:FD:E1:D3:57:11:F3:B8:35:14:AF:75:27
Certificate issuer:       /CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
Certificate serial:       65C54ABD5C3C6E3597C6569A8615AFCA74253053
Authority key identifier: DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa
Signing time:             Wed 29 May 2024 15:49:55 +0000
ROA not before:           Wed 29 May 2024 15:44:55 +0000
ROA not after:            Wed 28 May 2025 15:49:55 +0000
asID:                     268848
IP address blocks:        2804:5b7c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 28 May 2025 15:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c5:4a:bd:5c:3c:6e:35:97:c6:56:9a:86:15:af:ca:74:25:30:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
        Validity
            Not Before: May 29 15:44:55 2024 GMT
            Not After : May 28 15:49:55 2025 GMT
        Subject: CN=3082010A0282010100ED5AA162D4CF898F92AEF8A0C4F7EED775A82860F2BB1053FDD87BC6CB277F785897D6FDAD608C484D025A8B931E71F937E14D30CCD4A64BC9BF60F743F2555264C4763FC32310BE297CF402981BE29FAE966E6298DD7C334524B56415F758972F5D990F7107A6A9C41CF92C145D9F9AF54A6CB88138E16757DC4A305B29AAB2E6C7C0A64B4342D0884082F9343C52A1DF950E6B8446AE3329DA0A5D3D1B088E2F360DF261B797301C0E2FB9A45B79D12A093EA625EC4832EC123B6C717D1C3281F1248DF03F79EC25D770B56B7B9621DB690C5997AED4CBBF791CF5BF1876D215CB8EBD5E1F1D0CF8CCB5B4BD0817AFAF0C41F04F5FC47272BDCA843FE03DF70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:a1:62:d4:cf:89:8f:92:ae:f8:a0:c4:f7:
                    ee:d7:75:a8:28:60:f2:bb:10:53:fd:d8:7b:c6:cb:
                    27:7f:78:58:97:d6:fd:ad:60:8c:48:4d:02:5a:8b:
                    93:1e:71:f9:37:e1:4d:30:cc:d4:a6:4b:c9:bf:60:
                    f7:43:f2:55:52:64:c4:76:3f:c3:23:10:be:29:7c:
                    f4:02:98:1b:e2:9f:ae:96:6e:62:98:dd:7c:33:45:
                    24:b5:64:15:f7:58:97:2f:5d:99:0f:71:07:a6:a9:
                    c4:1c:f9:2c:14:5d:9f:9a:f5:4a:6c:b8:81:38:e1:
                    67:57:dc:4a:30:5b:29:aa:b2:e6:c7:c0:a6:4b:43:
                    42:d0:88:40:82:f9:34:3c:52:a1:df:95:0e:6b:84:
                    46:ae:33:29:da:0a:5d:3d:1b:08:8e:2f:36:0d:f2:
                    61:b7:97:30:1c:0e:2f:b9:a4:5b:79:d1:2a:09:3e:
                    a6:25:ec:48:32:ec:12:3b:6c:71:7d:1c:32:81:f1:
                    24:8d:f0:3f:79:ec:25:d7:70:b5:6b:7b:96:21:db:
                    69:0c:59:97:ae:d4:cb:bf:79:1c:f5:bf:18:76:d2:
                    15:cb:8e:bd:5e:1f:1d:0c:f8:cc:b5:b4:bd:08:17:
                    af:af:0c:41:f0:4f:5f:c4:72:72:bd:ca:84:3f:e0:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:82:0A:CC:36:FF:47:FD:E1:D3:57:11:F3:B8:35:14:AF:75:27
            X509v3 Authority Key Identifier:
                keyid:DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/323830343a356237633a383030303a3a2f33332d3333203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:9e:15:6d:27:a1:f8:09:76:55:a9:de:30:de:b1:4e:85:
         89:f0:a7:13:43:a3:b6:cf:e5:9c:82:2c:cd:79:ef:4d:fb:4a:
         93:ff:e5:05:a9:3b:b0:21:11:5e:10:cb:7e:78:6a:4f:b9:91:
         10:63:c1:fe:a2:7d:0c:93:03:96:95:ae:b2:ff:36:c8:7e:c9:
         61:05:10:ff:0c:c9:60:fd:7a:f8:23:7d:f1:69:c5:04:3f:e0:
         2d:10:f4:51:fa:ab:31:40:0d:b2:23:3d:c9:70:e9:6c:ad:86:
         35:d2:63:f2:cd:28:76:17:18:9d:4f:fa:a1:74:c7:be:6e:2c:
         4d:56:af:51:f7:ce:d1:30:db:b2:df:08:2c:e1:1b:7e:6e:5d:
         5b:95:f2:72:ff:82:4b:8f:0e:88:c3:2e:75:37:49:e0:96:27:
         a0:3b:9d:d7:56:dd:7b:95:3c:71:ec:bb:d0:10:b0:1e:e4:89:
         65:81:26:3b:84:06:24:d8:ff:32:71:a0:0e:05:f1:4d:17:a0:
         7e:ab:d4:a5:d4:98:4e:1a:d0:55:84:f4:e9:8e:1d:69:a2:43:
         13:6a:c0:ff:c5:85:96:a0:08:bb:43:70:fc:4f:a8:62:e7:c9:
         40:d7:cb:9e:34:1f:26:17:10:af:1c:af:41:f3:ab:38:2b:9a:
         ad:88:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----