Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
File:                     323830343a386538343a3a2f33322d3332203d3e20323733343331.roa (raw, json)
Hash identifier:          zvZEaPb9pYgswMqxOImxheeS1HpGFg5/EXrz9/X0WM4=
Subject key identifier:   A3:34:71:39:65:2F:61:45:6A:CE:21:B5:E3:B2:5B:D8:5C:33:13:61
Certificate issuer:       /CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
Certificate serial:       37A74E20844D4157BB374EE78DF52D17E4604B80
Authority key identifier: 8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa
Signing time:             Wed 17 Apr 2024 11:37:10 +0000
ROA not before:           Wed 17 Apr 2024 11:32:10 +0000
ROA not after:            Wed 16 Apr 2025 11:37:10 +0000
asID:                     273431
IP address blocks:        2804:8e84::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 18:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a7:4e:20:84:4d:41:57:bb:37:4e:e7:8d:f5:2d:17:e4:60:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C
        Validity
            Not Before: Apr 17 11:32:10 2024 GMT
            Not After : Apr 16 11:37:10 2025 GMT
        Subject: CN=A3347139652F61456ACE21B5E3B25BD85C331361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:9f:f4:00:09:54:1e:a2:0c:60:9d:24:4b:
                    b2:02:b0:cb:1d:ad:59:df:2c:38:fb:b1:df:a3:bf:
                    b9:e3:59:98:56:8e:b1:9d:13:1d:19:7f:e2:c0:31:
                    38:6e:67:2e:a2:4b:21:bf:43:a8:6d:4c:a2:29:87:
                    56:6b:27:3b:59:27:93:06:44:8f:00:47:11:c8:79:
                    50:02:b7:71:2f:0d:26:69:35:7c:47:a0:e0:1d:e9:
                    30:a0:dc:23:54:bd:37:6f:56:68:ae:0e:14:c4:12:
                    b3:0d:e8:84:62:18:cb:86:75:51:5b:ba:6e:fc:74:
                    56:b7:b6:91:72:7d:e4:4a:d5:a2:f0:75:a4:57:56:
                    3c:ca:47:fd:49:7f:c3:41:14:34:27:14:91:fb:a3:
                    c4:bf:2f:0b:c0:bd:36:02:d2:11:75:73:5b:f7:f6:
                    4f:e5:c1:87:cc:96:d1:fe:9f:01:55:7a:f6:a4:50:
                    e5:ae:e7:17:54:92:4b:dd:1e:8c:f3:42:3e:c2:22:
                    6e:05:a8:28:13:1f:c4:9a:70:d1:7f:23:7b:86:e3:
                    7e:3d:f9:71:a6:7a:9f:4b:2e:19:50:5d:f0:95:e9:
                    84:70:4b:f3:eb:33:0a:cc:41:7a:6f:a4:e0:08:5d:
                    c0:88:0e:69:9b:16:84:64:fb:6d:57:22:a8:e4:1d:
                    97:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:34:71:39:65:2F:61:45:6A:CE:21:B5:E3:B2:5B:D8:5C:33:13:61
            X509v3 Authority Key Identifier:
                keyid:8D:EE:0F:8E:4C:DF:FE:10:FD:1E:00:9B:CB:A0:B7:37:5F:EC:BF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEE0F8E4CDFFE10FD1E009BCBA0B7375FECBF6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d3332203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e84::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:59:6b:85:24:b8:bb:fc:01:f5:45:f0:65:52:a3:45:f7:92:
         c8:08:f9:6f:bf:67:c6:e9:64:c6:d9:79:70:da:6f:0a:35:13:
         ef:08:df:ce:02:4d:a4:6c:1c:13:75:fb:a2:56:99:79:5f:4a:
         c2:a4:62:58:91:6c:5f:6b:91:11:b9:8b:75:62:c8:d0:41:ff:
         db:56:cc:04:88:2c:4f:85:52:6c:c4:6d:77:f2:f7:4e:cb:41:
         0c:0b:df:23:bb:44:28:c3:bd:a2:37:22:d2:22:02:7e:bc:2c:
         ef:32:4e:ff:e7:9e:75:1e:22:c8:79:f9:cf:cb:44:0e:8a:91:
         d1:1d:c1:ae:68:95:66:15:83:8b:0d:1a:c9:c2:4c:69:72:61:
         7d:14:b5:d6:b7:37:15:90:d7:1f:75:7c:57:a2:9b:20:f3:5e:
         fd:33:78:ae:d2:a1:96:e0:60:18:97:87:e5:40:58:aa:3b:8c:
         c7:f4:92:c1:27:99:04:ae:92:63:e2:81:6b:18:68:de:d7:d6:
         27:5f:19:83:70:38:7b:b1:64:38:f0:b5:72:07:9a:b4:ef:26:
         10:bd:5f:29:98:9d:5d:b2:6b:9d:c8:8c:ef:a7:64:2c:5c:13:
         e1:8a:0d:e1:54:a8:bc:60:1e:84:54:9c:65:82:c4:5c:78:8a:
         c2:c4:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----