Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d3336203d3e20323639363132.roa
File:                     323830343a363733343a3a2f33322d3336203d3e20323639363132.roa (raw, json)
Hash identifier:          EusYSviGn1Y08FUjCN/SW6OhhUG0FrkvM4f7w4v/uw0=
Subject key identifier:   75:D2:66:21:8E:E8:64:1D:9C:7E:6F:49:AF:6E:13:82:CF:C7:16:0E
Certificate issuer:       /CN=89C326AE20D479ABE2624255309D2F687FA31537
Certificate serial:       341C306FA4B83DC48770D0557CF396453CDF6AC6
Authority key identifier: 89:C3:26:AE:20:D4:79:AB:E2:62:42:55:30:9D:2F:68:7F:A3:15:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89C326AE20D479ABE2624255309D2F687FA31537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d3336203d3e20323639363132.roa
Signing time:             Tue 02 Aug 2022 15:52:29 +0000
ROA not before:           Tue 02 Aug 2022 15:47:29 +0000
ROA not after:            Tue 01 Aug 2023 15:52:29 +0000
asID:                     269612
IP address blocks:        2804:6734::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1c:30:6f:a4:b8:3d:c4:87:70:d0:55:7c:f3:96:45:3c:df:6a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C326AE20D479ABE2624255309D2F687FA31537
        Validity
            Not Before: Aug  2 15:47:29 2022 GMT
            Not After : Aug  1 15:52:29 2023 GMT
        Subject: CN=75D266218EE8641D9C7E6F49AF6E1382CFC7160E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:98:44:17:9a:4d:a1:6f:c2:a1:f6:33:cd:
                    bf:70:8a:2d:60:93:a6:4b:c5:16:c0:5f:7f:6c:0d:
                    57:44:c4:fc:43:d1:14:58:fb:39:93:85:d3:95:52:
                    80:3d:0b:be:f6:94:22:fd:de:89:e0:7f:83:95:d6:
                    56:35:cb:64:4e:ed:f1:05:87:d6:5c:5c:0e:38:2e:
                    ee:7c:d5:1b:31:c6:37:00:74:17:53:6b:d4:bd:4c:
                    da:2c:0a:ec:07:97:e4:b5:ec:59:89:c7:d1:32:8c:
                    ce:0f:2b:0d:b7:cd:48:a9:d0:ea:24:00:d5:94:f4:
                    cb:bb:4b:1e:8d:45:0f:fc:39:40:a8:57:3d:59:aa:
                    25:81:bd:a9:91:61:cb:73:a9:ce:87:49:37:d1:05:
                    3d:8e:22:dc:75:67:b5:f9:74:20:7e:f5:19:1e:ab:
                    ed:90:7a:d3:0a:a4:78:48:52:91:96:15:99:fc:67:
                    c2:93:f4:63:46:f9:99:88:63:40:31:bf:60:b6:95:
                    21:bc:d3:52:2d:ad:e0:e0:ee:33:0f:75:56:2d:dc:
                    a5:a8:4d:d8:fa:01:53:af:e6:06:eb:29:da:16:ba:
                    94:57:6d:1e:6f:c4:d2:e3:86:46:93:d6:cd:66:a5:
                    dc:2b:fc:b5:71:a5:79:8e:f7:30:50:30:12:fd:58:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:66:21:8E:E8:64:1D:9C:7E:6F:49:AF:6E:13:82:CF:C7:16:0E
            X509v3 Authority Key Identifier:
                keyid:89:C3:26:AE:20:D4:79:AB:E2:62:42:55:30:9D:2F:68:7F:A3:15:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/89C326AE20D479ABE2624255309D2F687FA31537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89C326AE20D479ABE2624255309D2F687FA31537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d3336203d3e20323639363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6734::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:a6:18:c3:3a:5e:b4:8f:7d:e5:d5:a4:1d:25:5b:ae:bd:
         13:c0:a2:f2:ba:d0:81:5f:a8:ca:55:56:ea:06:66:e3:82:28:
         76:12:bb:7f:50:32:7e:1e:e6:cf:d6:99:67:3d:b0:7a:86:54:
         5d:5b:f3:50:78:a6:f0:fc:25:23:d9:4c:cb:bc:29:e2:01:4c:
         af:65:eb:77:03:5e:f5:07:10:af:59:db:c6:fa:27:2b:e2:e4:
         64:fe:e3:05:81:c9:92:a1:df:f6:74:f6:14:bb:54:90:68:88:
         88:d3:30:83:2f:ed:b4:a4:bd:e6:2b:0f:d5:22:f0:3d:e9:c4:
         b3:b8:7f:45:cf:88:44:20:13:a6:b5:82:3f:5b:45:74:85:34:
         b7:ad:7c:ac:3b:14:31:71:d7:34:72:66:1a:98:a0:0a:8e:91:
         17:63:1b:88:8a:1e:c8:27:87:26:de:d3:d8:2a:d1:41:87:88:
         9d:a9:e2:53:2b:6c:64:b3:95:b8:6f:d6:40:f7:e5:24:0b:ea:
         7c:a8:49:04:2f:e7:be:81:69:00:25:cd:51:1f:79:11:e4:31:
         17:ef:b5:c2:8a:dc:05:32:5e:69:ee:e7:04:73:b8:a2:47:72:
         94:86:69:60:a7:45:66:0f:14:aa:9b:7f:a9:bd:4a:ac:0d:88:
         85:e4:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----