Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313032303a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a313032303a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          xMVJIfIGru6BTEW0hsfYzVz6C0t2vvEQOJE6r9310o0=
Subject key identifier:   53:EB:03:1C:17:DC:3E:0B:F7:DC:04:C6:29:49:F3:BA:C6:D1:8C:81
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       6867DF9548BF2724359846DDF2155B8A9F37085C
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313032303a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Wed 13 Sep 2023 12:31:36 +0000
ROA not before:           Wed 13 Sep 2023 12:26:36 +0000
ROA not after:            Wed 11 Sep 2024 12:31:36 +0000
asID:                     262316
IP address blocks:        2804:7c0:1020::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:67:df:95:48:bf:27:24:35:98:46:dd:f2:15:5b:8a:9f:37:08:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 13 12:26:36 2023 GMT
            Not After : Sep 11 12:31:36 2024 GMT
        Subject: CN=53EB031C17DC3E0BF7DC04C62949F3BAC6D18C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:ed:99:0f:36:39:a7:2e:6f:2e:47:af:fc:
                    e2:19:87:0b:ad:d4:13:be:f6:d0:28:39:1b:3e:f0:
                    68:1a:3b:13:fd:41:4d:7b:f5:24:4e:a0:c4:a0:4e:
                    45:62:ec:34:22:d1:8e:83:71:38:4f:e8:a4:6a:8b:
                    e6:98:45:8b:8a:40:a8:e3:18:53:c4:14:0c:b9:98:
                    c1:b9:17:a3:da:93:e7:ed:dc:1e:14:74:d5:c9:6f:
                    c9:16:e7:20:08:bc:d8:b8:bc:86:af:19:23:d5:39:
                    f2:0a:82:b9:59:8f:a8:01:1d:ff:d9:da:e8:0f:b3:
                    5a:18:75:65:21:c7:8c:f5:34:94:8f:b8:4e:49:a3:
                    a5:f4:cf:98:e5:92:9a:14:06:a9:47:39:66:af:eb:
                    d4:ee:be:d9:cc:29:f9:92:3b:db:f5:c3:6d:69:5f:
                    c5:82:12:57:d5:6b:c8:02:91:dd:05:98:61:67:35:
                    89:77:fd:2c:25:b9:ae:d9:1c:00:8d:05:7e:0c:5a:
                    f6:7a:67:40:7f:77:c4:d7:2d:81:41:e1:55:09:af:
                    ed:e5:ff:ee:cc:7e:d0:52:73:0a:b5:e3:56:c3:89:
                    fa:05:49:fd:b2:de:63:a5:ac:86:9d:d9:3a:d4:11:
                    e7:c3:1a:3b:31:ca:06:43:73:19:ed:73:05:89:d6:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EB:03:1C:17:DC:3E:0B:F7:DC:04:C6:29:49:F3:BA:C6:D1:8C:81
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313032303a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:1020::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:68:11:9b:46:e7:1f:4d:13:d2:4c:c1:5c:77:18:53:79:
         8b:69:0d:a5:62:aa:7d:6a:e0:0b:3a:85:c9:36:e7:bc:0f:54:
         67:31:6e:ba:a5:ed:ba:0e:de:42:09:4a:a8:88:82:06:38:5c:
         43:72:26:7a:3d:ea:c7:8c:b9:76:13:83:98:45:24:de:67:19:
         a7:e8:43:6c:98:4c:55:12:27:2f:b7:c0:87:d8:4b:7c:9a:e5:
         7d:7f:c3:c7:f3:95:c1:ea:f3:fe:60:b0:d0:2b:3e:79:d9:6d:
         b6:8b:4b:b2:0d:2e:72:03:ff:a9:0e:ac:f2:52:96:a2:5e:7a:
         f2:f0:7a:53:09:07:4e:b8:a3:e5:cb:27:10:34:31:cd:a9:f6:
         0c:b6:fa:43:40:bd:d2:64:51:3a:cc:df:39:77:4a:1b:a3:e6:
         e7:f9:24:21:99:60:58:8e:52:1a:36:d1:4a:6c:0a:47:62:a6:
         eb:52:4a:07:31:0a:63:e3:48:48:ee:ee:c5:df:0d:56:ca:0a:
         e4:ba:e2:94:f8:51:ed:b5:95:b1:f2:c3:79:e1:87:0a:dd:80:
         a5:b8:60:87:84:1e:ad:0a:ca:8b:09:57:45:5a:a9:79:92:dc:
         73:71:0f:5a:ab:93:e3:9f:56:94:2f:8b:27:82:cc:e4:6d:e8:
         15:25:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----