Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3332203d3e203533313831.roa
File:                     3137302e38302e3232342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          kP8/Tv93Ih0Z4zHJDpv8M3zaYWkWqb9kYsrfcgUNMrc=
Subject key identifier:   9B:48:D8:F8:9F:97:38:82:9D:E9:13:B1:38:95:C1:0F:BF:8A:32:0F
Certificate issuer:       /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial:       5FCC32AF67BD9864C85C94999797BD24AB0ABF05
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3332203d3e203533313831.roa
Signing time:             Sat 11 Mar 2023 14:40:45 +0000
ROA not before:           Sat 11 Mar 2023 14:35:45 +0000
ROA not after:            Sat 09 Mar 2024 14:40:45 +0000
asID:                     53181
IP address blocks:        170.80.224.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cc:32:af:67:bd:98:64:c8:5c:94:99:97:97:bd:24:ab:0a:bf:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Validity
            Not Before: Mar 11 14:35:45 2023 GMT
            Not After : Mar  9 14:40:45 2024 GMT
        Subject: CN=9B48D8F89F9738829DE913B13895C10FBF8A320F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:67:eb:f9:0e:31:10:b0:e1:1d:7e:e7:85:05:
                    60:e3:40:71:cf:8a:b8:10:74:29:e9:48:c0:56:88:
                    8e:b9:c0:6a:d8:e6:d1:ea:36:c4:be:c8:db:62:21:
                    4d:d1:47:6a:d1:33:64:7f:5c:fb:1a:a1:7c:76:2d:
                    d5:94:1a:af:69:ec:76:04:a6:63:b6:94:8d:a1:eb:
                    d5:5c:ac:07:5b:bd:e6:90:6b:a5:a5:cd:66:0b:e3:
                    3c:03:dc:9b:e3:aa:5b:29:5f:c9:be:53:92:9d:2a:
                    b5:4e:10:e8:d3:d9:43:60:7a:b3:5a:d6:7a:23:da:
                    1a:13:db:23:57:8f:ad:b5:12:c4:e1:86:ef:66:e1:
                    ee:47:ae:e8:1d:7e:a3:fa:39:c0:f4:df:65:90:04:
                    f3:7e:90:36:46:23:d5:98:e6:9d:21:ef:19:12:ab:
                    0c:90:68:56:cf:46:1c:a5:c2:f9:06:4c:57:e5:eb:
                    65:b8:da:3c:ee:b8:7f:db:ba:6c:73:1d:40:c3:fa:
                    8c:3f:f9:7a:c3:4e:16:4b:74:7b:02:fe:96:79:78:
                    7e:61:7b:c4:f3:dc:46:e1:21:a9:19:ae:0d:83:ed:
                    37:40:2b:8e:ea:0d:90:c7:a3:f7:8b:c1:99:b4:80:
                    f7:8f:ef:79:e5:9b:0e:fa:43:97:20:24:87:62:8f:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:48:D8:F8:9F:97:38:82:9D:E9:13:B1:38:95:C1:0F:BF:8A:32:0F
            X509v3 Authority Key Identifier:
                keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:ed:52:2c:9b:40:16:30:be:30:b0:83:d3:e2:1f:0c:89:
         31:ac:91:95:dc:66:d1:f1:14:41:df:82:a4:f8:45:32:14:64:
         3b:b7:cb:82:c9:d8:11:98:8f:a4:7c:f6:e4:8e:2a:50:66:ab:
         2b:16:fa:cd:8d:50:33:01:2a:cb:b1:14:49:b1:5f:d9:5c:c1:
         f9:15:55:5e:cb:1c:c9:16:8e:9d:b9:7e:c5:6c:61:df:46:41:
         f6:9b:cc:8a:e7:1d:63:5f:8d:17:69:b5:e4:14:ad:49:d7:56:
         4a:b8:6c:be:e0:de:d9:29:24:9a:8a:45:5a:f8:e1:8c:ec:ca:
         b0:0b:ce:07:44:65:c5:94:90:1b:18:dd:80:35:19:ab:36:b2:
         26:f7:d4:cb:8a:ff:5e:c4:79:22:82:d0:3f:82:af:7e:6b:6a:
         cd:f3:61:91:3a:9b:af:5b:0d:10:ca:7d:14:96:14:73:ab:b3:
         58:c6:4c:51:1a:3d:3a:49:d8:cb:53:18:df:40:58:4a:5c:b3:
         6b:20:c7:e6:11:bd:59:bc:0a:f1:ba:54:7c:de:d6:16:db:7d:
         36:5b:c5:49:51:01:98:82:40:68:cd:52:d3:16:46:b5:81:3f:
         cb:34:40:1e:62:79:c6:ef:2b:85:73:ff:dc:73:10:2c:cb:12:
         eb:d9:a0:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX8wyr2e9mGTIXJSZl5e9JKsKvwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzNDBCQkNGMzUxMUU3RkYwQzBEOTc5MDMwRENDODU1
M0UxNjY3NjAeFw0yMzAzMTExNDM1NDVaFw0yNDAzMDkxNDQwNDVaMDMxMTAvBgNV
BAMTKDlCNDhEOEY4OUY5NzM4ODI5REU5MTNCMTM4OTVDMTBGQkY4QTMyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvZ+v5DjEQsOEdfueFBWDjQHHP
irgQdCnpSMBWiI65wGrY5tHqNsS+yNtiIU3RR2rRM2R/XPsaoXx2LdWUGq9p7HYE
pmO2lI2h69VcrAdbveaQa6WlzWYL4zwD3JvjqlspX8m+U5KdKrVOEOjT2UNgerNa
1noj2hoT2yNXj621EsThhu9m4e5HrugdfqP6OcD032WQBPN+kDZGI9WY5p0h7xkS
qwyQaFbPRhylwvkGTFfl62W42jzuuH/bumxzHUDD+ow/+XrDThZLdHsC/pZ5eH5h
e8Tz3EbhIakZrg2D7TdAK47qDZDHo/eLwZm0gPeP73nlmw76Q5cgJIdij2fZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUm0jY+J+XOIKd6ROxOJXBD7+KMg8wHwYDVR0j
BBgwFoAU1DQLvPNRHn/wwNl5Aw3MhVPhZnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdGUkc0ODZVTlFwOE14dE5SWWhvTW1nZFh2dUN5WWs5MXhxSHpROGRM
elAvMC9ENDM0MEJCQ0YzNTExRTdGRjBDMEQ5NzkwMzBEQ0M4NTUzRTE2Njc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0MzQwQkJDRjM1MTFFN0ZG
MEMwRDk3OTAzMERDQzg1NTNFMTY2NzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3RlJHNDg2VU5RcDhNeHROUllob01tZ2RYdnVDeVlrOTF4cUh6UThkTHpQLzAv
MzEzNzMwMmUzODMwMmUzMjMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMz
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlDgMA0GCSqGSIb3DQEBCwUAA4IBAQA7wu1SLJtA
FjC+MLCD0+IfDIkxrJGV3GbR8RRB34Kk+EUyFGQ7t8uCydgRmI+kfPbkjipQZqsr
FvrNjVAzASrLsRRJsV/ZXMH5FVVeyxzJFo6duX7FbGHfRkH2m8yK5x1jX40XabXk
FK1J11ZKuGy+4N7ZKSSaikVa+OGM7MqwC84HRGXFlJAbGN2ANRmrNrIm99TLiv9e
xHkigtA/gq9+a2rN82GROpuvWw0Qyn0UlhRzq7NYxkxRGj06SdjLUxjfQFhKXLNr
IMfmEb1ZvArxulR83tYW2302W8VJUQGYgkBozVLTFka1gT/LNEAeYnnG7yuFc//c
cxAsyxLr2aCG
-----END CERTIFICATE-----