Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3830303a3a2f34382d3530203d3e20323634333439.roa
File:                     323830343a353766343a3830303a3a2f34382d3530203d3e20323634333439.roa (raw, json)
Hash identifier:          CFmC72fPbkwqA96eLRl3xBB0Q6aynRHf72u+RnqsLbM=
Subject key identifier:   57:BA:25:6B:20:FC:3A:60:8D:AA:DE:B5:CC:FC:B1:00:D1:8F:7D:1E
Certificate issuer:       /CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
Certificate serial:       09BC1F97402C73844D6E0F54D11671CDD1BF3306
Authority key identifier: C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3830303a3a2f34382d3530203d3e20323634333439.roa
Signing time:             Tue 07 Nov 2023 15:19:13 +0000
ROA not before:           Tue 07 Nov 2023 15:14:13 +0000
ROA not after:            Tue 05 Nov 2024 15:19:13 +0000
asID:                     264349
IP address blocks:        2804:57f4:800::/48 maxlen: 50

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bc:1f:97:40:2c:73:84:4d:6e:0f:54:d1:16:71:cd:d1:bf:33:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E
        Validity
            Not Before: Nov  7 15:14:13 2023 GMT
            Not After : Nov  5 15:19:13 2024 GMT
        Subject: CN=57BA256B20FC3A608DAADEB5CCFCB100D18F7D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:29:08:8e:eb:ed:b8:6e:14:e1:ed:b7:c3:
                    3b:8a:67:99:a9:cd:4e:b1:c1:15:53:63:0a:4f:33:
                    a9:04:06:25:7b:43:7c:76:ed:12:49:f7:e2:04:5f:
                    ff:5a:b1:f4:e0:ec:6f:3a:4d:a8:2d:3c:21:69:07:
                    a8:1d:33:89:44:0f:ef:42:e4:03:08:4e:e5:43:92:
                    46:81:14:e6:5e:7c:e2:21:46:c4:1b:4d:09:82:cd:
                    0d:25:46:8b:8f:ba:b7:6b:5d:cd:d1:87:2b:aa:b0:
                    c5:49:86:0b:3f:92:f5:c5:2c:5a:e2:b3:61:91:f9:
                    3a:7f:54:b5:c0:75:a4:71:6c:64:7b:4c:f4:fe:c1:
                    3a:ed:80:6a:8b:f0:85:d8:f8:bb:ee:7b:3a:da:10:
                    7f:e7:e5:37:56:d7:2c:3c:96:7e:81:75:3e:4d:f3:
                    e0:b4:19:fc:c1:86:39:df:6e:8e:d3:5b:af:5a:c0:
                    7d:87:e0:c6:b0:b0:c0:b6:e3:41:3b:1c:96:47:e6:
                    9d:69:b5:ce:cf:1d:65:8b:51:72:da:91:6e:57:88:
                    42:66:ce:14:3f:5d:9c:5e:99:8b:67:6c:14:a6:6f:
                    23:8a:97:a3:33:ae:af:96:38:87:51:9a:37:ad:a8:
                    df:fb:e5:18:ff:f5:e6:ea:91:d5:e3:99:98:23:b9:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BA:25:6B:20:FC:3A:60:8D:AA:DE:B5:CC:FC:B1:00:D1:8F:7D:1E
            X509v3 Authority Key Identifier:
                keyid:C3:8F:0E:C3:DA:3C:88:11:7E:F7:7F:A3:AA:EC:72:34:0F:4C:43:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C38F0EC3DA3C88117EF77FA3AAEC72340F4C437E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/323830343a353766343a3830303a3a2f34382d3530203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:58:6f:f6:35:80:5c:ca:60:35:fc:68:c1:8e:88:fb:34:
         85:2e:16:9f:04:fa:7f:e0:fb:45:4a:fe:53:fc:a6:cd:62:97:
         6e:7d:13:9f:f7:64:0d:31:ce:87:f6:5e:e0:fa:4e:c4:40:72:
         01:fe:84:10:c3:05:67:b9:34:13:1f:09:5a:1b:76:d2:9d:00:
         42:47:e6:3f:14:4d:80:e3:57:70:2d:0e:13:a0:5d:9a:8a:d1:
         f1:3d:6c:55:eb:b6:c4:25:61:6f:65:d2:1b:03:cb:8e:29:cb:
         23:0a:82:5c:47:a4:05:b9:2c:e8:95:2d:1f:0e:ad:db:23:1c:
         f0:95:70:66:63:40:5a:2e:46:86:42:66:83:1a:3f:68:65:f7:
         59:a4:b2:57:f0:14:60:bc:f7:2c:c1:b0:b3:35:d6:1d:48:e3:
         f2:f7:ee:6d:ed:1e:25:12:86:0d:12:0e:ca:ba:de:7a:ad:74:
         be:8c:d2:3f:66:93:e8:26:73:09:e6:4f:f2:b4:6a:8d:29:49:
         1b:09:6a:e2:b5:23:3d:d7:2c:62:eb:00:b2:cb:86:4e:2e:98:
         87:e2:22:c3:19:4c:88:fa:ab:53:2c:3a:e4:26:c8:ac:b4:25:
         6c:7b:07:76:73:7d:9d:71:99:75:88:ec:1f:60:f7:05:2e:16:
         2d:a6:0b:56
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUCbwfl0Asc4RNbg9U0RZxzdG/MwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4RjBFQzNEQTNDODgxMTdFRjc3RkEzQUFFQzcyMzQw
RjRDNDM3RTAeFw0yMzExMDcxNTE0MTNaFw0yNDExMDUxNTE5MTNaMDMxMTAvBgNV
BAMTKDU3QkEyNTZCMjBGQzNBNjA4REFBREVCNUNDRkNCMTAwRDE4RjdEMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrikIjuvtuG4U4e23wzuKZ5mp
zU6xwRVTYwpPM6kEBiV7Q3x27RJJ9+IEX/9asfTg7G86TagtPCFpB6gdM4lED+9C
5AMITuVDkkaBFOZefOIhRsQbTQmCzQ0lRouPurdrXc3RhyuqsMVJhgs/kvXFLFri
s2GR+Tp/VLXAdaRxbGR7TPT+wTrtgGqL8IXY+LvuezraEH/n5TdW1yw8ln6BdT5N
8+C0GfzBhjnfbo7TW69awH2H4MawsMC240E7HJZH5p1ptc7PHWWLUXLakW5XiEJm
zhQ/XZxemYtnbBSmbyOKl6Mzrq+WOIdRmjetqN/75Rj/9ebqkdXjmZgjuZqvAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUV7olayD8OmCNqt61zPyxANGPfR4wHwYDVR0j
BBgwFoAUw48Ow9o8iBF+93+jquxyNA9MQ34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVTYWtnYUJOdU1MbzNCZG5WZ0RlcHU0OVlMdFd0akZHY0ozdVFoampB
MWgvMC9DMzhGMEVDM0RBM0M4ODExN0VGNzdGQTNBQUVDNzIzNDBGNEM0MzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzOEYwRUMzREEzQzg4MTE3
RUY3N0ZBM0FBRUM3MjM0MEY0QzQzN0UuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1U2FrZ2FCTnVNTG8zQmRuVmdEZXB1NDlZTHRXdGpGR2NKM3VRaGpqQTFoLzAv
MzIzODMwMzQzYTM1Mzc2NjM0M2EzODMwMzAzYTNhMmYzNDM4MmQzNTMwMjAzZDNl
MjAzMjM2MzQzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBFf0CAAwDQYJKoZIhvcNAQELBQAD
ggEBAHoFWG/2NYBcymA1/GjBjoj7NIUuFp8E+n/g+0VK/lP8ps1il259E5/3ZA0x
zof2XuD6TsRAcgH+hBDDBWe5NBMfCVobdtKdAEJH5j8UTYDjV3AtDhOgXZqK0fE9
bFXrtsQlYW9l0hsDy44pyyMKglxHpAW5LOiVLR8OrdsjHPCVcGZjQFouRoZCZoMa
P2hl91mkslfwFGC89yzBsLM11h1I4/L37m3tHiUShg0SDsq63nqtdL6M0j9mk+gm
cwnmT/K0ao0pSRsJauK1Iz3XLGLrALLLhk4umIfiIsMZTIj6q1MsOuQmyKy0JWx7
B3ZzfZ1xmXWI7B9g9wUuFi2mC1Y=
-----END CERTIFICATE-----