Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313033303a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a313033303a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          JdQqbDcymvLsGJPyimjFBGCJ4ab24y8MDawFer9TYwY=
Subject key identifier:   A7:EF:A4:60:1C:E5:F7:F0:EF:4D:E4:4A:64:7F:95:EC:6A:06:41:A6
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       2AC45DC3D1ED894CEFA8E694A9531558ADE0DCE5
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313033303a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Wed 13 Sep 2023 12:32:15 +0000
ROA not before:           Wed 13 Sep 2023 12:27:15 +0000
ROA not after:            Wed 11 Sep 2024 12:32:15 +0000
asID:                     262316
IP address blocks:        2804:7c0:1030::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:5d:c3:d1:ed:89:4c:ef:a8:e6:94:a9:53:15:58:ad:e0:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 13 12:27:15 2023 GMT
            Not After : Sep 11 12:32:15 2024 GMT
        Subject: CN=A7EFA4601CE5F7F0EF4DE44A647F95EC6A0641A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:3d:d7:68:71:0d:ac:4f:cd:d5:48:fc:8a:
                    27:c0:5b:0e:51:a0:ae:17:93:ce:4b:11:5f:1c:49:
                    e9:25:bf:c1:ae:84:dc:0d:ef:8e:80:fb:33:ce:96:
                    65:ed:68:e9:d0:eb:05:c9:a9:d7:74:6f:80:e0:84:
                    15:97:2e:28:e9:44:aa:3e:15:90:ec:45:3a:3c:85:
                    81:22:10:e5:b8:26:99:31:af:d6:76:78:a5:13:1d:
                    28:da:b4:24:47:5f:4c:ad:6d:1a:e5:03:ed:89:49:
                    4d:11:c3:c1:c6:fa:88:16:ff:1d:86:4f:c1:4e:15:
                    74:ff:6c:1a:2b:71:57:4b:8a:d9:9f:c1:cb:7a:99:
                    b7:ed:1e:62:65:fe:07:e8:5b:5d:77:b5:76:99:6c:
                    6e:fc:ab:26:1d:e6:8a:38:6e:a5:4f:73:5c:c2:b2:
                    9d:02:e7:a2:66:12:65:bc:0b:8c:30:e2:f5:85:6b:
                    be:23:06:01:ac:11:69:dd:ef:fb:b2:29:b0:9a:81:
                    a2:68:85:b8:ce:89:e9:09:93:75:ab:36:a0:e0:c3:
                    a2:e2:b7:f2:5c:c6:0e:29:8c:c1:b1:22:e0:d7:98:
                    44:76:17:5f:e0:f1:88:28:18:d9:a9:02:7c:f3:28:
                    87:8f:29:b4:1c:c4:e6:77:ae:e1:07:5b:9b:6c:d8:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EF:A4:60:1C:E5:F7:F0:EF:4D:E4:4A:64:7F:95:EC:6A:06:41:A6
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313033303a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:1030::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:ed:da:5c:be:fc:4a:db:50:f4:e3:cf:3f:a7:46:b6:13:06:
         81:07:8e:49:7b:ff:75:c7:a0:e8:b6:38:2c:68:3f:54:12:cf:
         04:ab:c4:f3:53:86:19:84:0b:53:66:41:9b:a2:5b:9e:7e:47:
         de:8e:81:97:89:2d:d7:ea:12:20:28:69:9a:46:71:7f:17:82:
         b2:65:8e:2f:c7:c2:8a:fe:d8:ac:18:43:e7:c4:c6:90:d5:81:
         96:ad:7f:d4:39:c6:8c:9d:aa:8a:28:16:16:f3:50:ba:ea:69:
         75:84:b8:02:a8:d1:42:f0:28:f9:0e:14:c1:97:a0:62:e5:21:
         56:e3:ef:8c:98:ea:33:54:07:ec:7a:bc:10:ee:0e:1a:82:5c:
         2a:88:fa:22:e3:cd:68:7d:e3:fe:eb:31:8b:84:4f:b9:a1:73:
         77:43:91:87:92:ba:fd:8e:e4:7d:62:f6:f8:e6:4e:6f:bc:23:
         4d:cb:63:58:e5:cd:70:c1:39:04:8b:94:97:3d:5f:bc:0d:3c:
         7e:79:57:14:7c:2f:3a:60:36:2f:82:cf:99:1d:69:02:97:5f:
         00:1a:a3:ba:56:f0:7d:8a:d5:3d:19:42:e4:c5:cc:c9:8f:4a:
         95:b3:fe:20:31:72:e7:f2:b2:50:b2:ef:9c:3b:4e:88:dc:38:
         8c:45:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----