Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/323830313a38343a3a2f33322d3434203d3e20323633333030.roa
File:                     323830313a38343a3a2f33322d3434203d3e20323633333030.roa (raw, json)
Hash identifier:          RQ0RYB02D5T4Bk9lExag4GzlNZiiJ0rUR0bt+HsI4io=
Subject key identifier:   F4:C4:69:27:D2:CE:6E:32:68:0B:B4:EE:81:CE:27:FC:2E:E9:6D:1A
Certificate issuer:       /CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
Certificate serial:       6B6886AA6CD1654269A5DF27BFD3F49949F7B099
Authority key identifier: 2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/323830313a38343a3a2f33322d3434203d3e20323633333030.roa
Signing time:             Thu 02 Mar 2023 00:11:48 +0000
ROA not before:           Thu 02 Mar 2023 00:06:48 +0000
ROA not after:            Thu 29 Feb 2024 00:11:48 +0000
asID:                     263300
IP address blocks:        2801:84::/32 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:68:86:aa:6c:d1:65:42:69:a5:df:27:bf:d3:f4:99:49:f7:b0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
        Validity
            Not Before: Mar  2 00:06:48 2023 GMT
            Not After : Feb 29 00:11:48 2024 GMT
        Subject: CN=F4C46927D2CE6E32680BB4EE81CE27FC2EE96D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:ce:1c:c1:57:70:8b:e3:b8:8b:ee:81:07:
                    8a:19:df:b8:40:26:2c:e9:8a:d5:51:bf:98:a0:ad:
                    f4:52:d2:5e:1f:b2:50:42:ff:03:3c:d5:69:ec:5e:
                    9a:6e:dd:2c:ea:93:46:c3:65:0c:03:18:f6:38:e0:
                    77:d2:f6:96:4a:de:c9:cd:eb:ed:c0:99:7a:a7:c6:
                    16:0a:98:aa:92:cd:52:15:a7:24:d1:11:c0:42:0d:
                    8e:0b:78:2e:5e:60:29:04:89:e2:6a:29:1a:80:c6:
                    5b:ed:3a:39:ee:99:f5:55:cf:b2:84:0d:aa:3b:a7:
                    31:57:1a:2a:4a:aa:33:c5:20:5b:ff:11:42:dd:05:
                    20:aa:87:72:db:a6:66:16:6e:bf:88:f8:cb:6c:dc:
                    2a:c1:7b:62:b3:9e:36:26:9e:44:08:52:09:8d:29:
                    7d:34:0e:5b:c1:15:a4:c5:da:ed:8d:d7:db:7e:e8:
                    ef:0e:be:d0:d6:96:00:d2:57:d9:6a:1c:8e:0b:c9:
                    65:72:33:4e:da:80:14:65:0e:e3:71:75:a3:1a:97:
                    f7:34:c6:ec:fb:a2:47:07:f0:d8:2f:17:4e:f0:fb:
                    fb:f2:0b:18:9a:75:82:bc:7a:67:ba:ae:fe:73:95:
                    38:59:68:b1:8f:32:f8:93:cb:0b:26:09:10:a0:44:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:69:27:D2:CE:6E:32:68:0B:B4:EE:81:CE:27:FC:2E:E9:6D:1A
            X509v3 Authority Key Identifier:
                keyid:2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/323830313a38343a3a2f33322d3434203d3e20323633333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:84::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:0e:6b:e8:48:0c:1a:07:c4:29:99:12:3f:7c:14:0e:9f:
         28:8a:bb:6f:c6:3e:7e:f3:fc:d4:50:9a:c7:4c:99:b6:34:18:
         70:e6:a1:c1:e7:96:e4:f3:f5:98:c1:8d:b6:d0:b5:22:d2:20:
         98:7a:22:11:bd:b7:d0:ae:32:1e:01:73:e8:33:4f:2e:bf:1e:
         15:8b:2f:ac:02:fa:c9:59:38:13:62:3c:71:58:04:46:16:54:
         fc:7e:cd:e2:37:e5:1a:1a:24:81:cd:aa:b8:14:61:a8:51:10:
         fb:f3:d0:a9:97:94:5c:e7:49:ec:54:d0:28:35:ad:29:9c:fd:
         1f:c0:65:6a:c1:a5:2f:a5:36:8f:32:4f:ff:74:54:62:ec:ca:
         84:70:fb:0d:e0:db:b9:bb:1f:46:70:1b:61:e9:29:10:5c:1a:
         61:8f:f5:51:5b:ac:c1:1b:05:36:c0:4c:06:22:2d:28:e2:0d:
         a0:04:86:54:86:34:5c:c4:c4:de:92:ba:25:33:6c:5d:26:ad:
         99:f7:23:fb:84:42:8d:2f:78:72:52:f4:fc:82:6e:d4:b6:0b:
         97:57:e0:c4:1b:fd:3d:b2:42:5b:a2:29:ee:d4:24:9a:05:33:
         77:2e:92:36:fa:cc:a3:ab:8d:bb:46:21:7a:0b:68:aa:cd:5c:
         ce:05:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----