Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323061313a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a323061313a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          Gf6+tEvO64Bm7hPLs/OukfJrYIfd2IsLMeF6uZ6uZH4=
Subject key identifier:   82:85:14:F1:8C:78:13:48:02:0F:D4:7A:7D:A4:8C:42:02:12:05:CC
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       5A8E5E96239448C425723F34BF609A57DC94B5FF
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323061313a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Thu 14 Sep 2023 13:11:27 +0000
ROA not before:           Thu 14 Sep 2023 13:06:27 +0000
ROA not after:            Thu 12 Sep 2024 13:11:27 +0000
asID:                     262316
IP address blocks:        2804:7c0:20a1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8e:5e:96:23:94:48:c4:25:72:3f:34:bf:60:9a:57:dc:94:b5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 14 13:06:27 2023 GMT
            Not After : Sep 12 13:11:27 2024 GMT
        Subject: CN=828514F18C781348020FD47A7DA48C42021205CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:48:e4:ba:fb:4b:b4:4e:69:01:f1:db:34:c5:
                    ce:c3:2a:78:90:45:f1:b9:20:c2:f4:e4:56:78:bd:
                    10:31:49:14:e9:f5:36:ad:90:c9:ec:91:d5:43:b4:
                    90:8c:d2:58:af:b1:b5:a1:73:a0:94:c5:95:11:ce:
                    f3:84:43:1b:9d:f4:c4:d8:1c:16:c9:8a:7a:8b:33:
                    7b:a2:b8:10:05:bb:81:08:fe:a0:9e:d1:6d:83:e2:
                    e0:ec:91:23:8d:f1:9c:aa:99:94:11:0c:51:a5:1a:
                    69:5d:b4:c3:e4:55:82:55:88:03:d5:6e:b4:46:44:
                    b8:c1:c1:2e:cb:70:e7:72:09:d3:cc:ee:9d:d8:f1:
                    f8:e8:54:fe:38:12:ca:42:47:5e:47:89:c6:9d:7a:
                    87:8b:17:44:19:68:90:a0:38:09:80:07:5a:d3:d3:
                    99:71:97:37:65:29:73:ef:87:c3:f4:be:53:58:99:
                    43:5b:ea:04:3f:8b:97:38:9e:31:5d:a1:e2:1b:76:
                    97:cf:62:c5:56:f8:d2:33:4f:12:f6:1c:56:98:80:
                    37:33:8e:cf:20:1a:c8:df:86:2d:a3:58:6e:66:f6:
                    b7:af:e3:70:59:53:5e:f3:33:d3:e7:c9:cb:e9:6b:
                    be:54:74:8e:fb:12:13:05:70:e8:b8:28:51:db:b8:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:85:14:F1:8C:78:13:48:02:0F:D4:7A:7D:A4:8C:42:02:12:05:CC
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323061313a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:20a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:8e:ac:18:57:61:8e:92:c2:5b:9b:70:f5:81:f0:e0:45:a9:
         57:b9:f2:87:20:60:43:55:2a:db:b2:d3:c9:71:34:5b:28:32:
         06:4f:c6:f6:12:51:a0:75:3e:54:76:df:7e:c8:28:91:1a:fd:
         3f:e6:2e:a5:f5:67:8f:69:3c:28:8e:f8:22:5b:4f:7a:9a:c6:
         db:b9:79:ba:32:b9:9c:a7:75:ac:cf:e3:28:1c:f4:03:40:a2:
         2f:43:53:1f:ca:cb:07:bf:31:a5:4f:47:42:98:8a:3a:60:49:
         18:0d:09:7e:07:46:22:8d:70:3c:27:54:58:c0:ba:93:93:e9:
         d7:e6:9d:72:e2:1c:4f:93:17:82:f1:cf:b0:b4:f8:8a:e6:11:
         2b:dd:a9:c5:54:8d:c4:ab:9c:af:85:e4:60:cf:f4:52:a5:a3:
         04:b8:c0:99:f5:91:f6:3a:78:22:cb:8f:91:7d:57:97:bc:bc:
         f9:cd:c4:d1:82:bc:61:fd:06:6c:a6:0a:41:96:ab:18:2f:de:
         c5:c5:f5:57:ab:39:85:68:e7:23:0c:0b:8f:67:24:24:13:3b:
         14:f5:e7:02:aa:a1:27:a7:2c:43:e7:23:f3:75:f4:ae:3c:6c:
         36:3b:6e:a7:8b:15:80:6c:1a:8a:7d:f7:42:51:11:05:d4:de:
         84:ed:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----