Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323062313a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a323062313a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          JaxAt0oGeymoZXOQ0kKkjLDrr0Dta0kiNs37isT9e+Q=
Subject key identifier:   CA:1E:F8:D9:E7:F4:D6:7D:1A:67:1A:8B:67:A6:84:83:25:8D:3C:59
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       0D62FA3C8E3714200F1DF73289047B9708949538
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323062313a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Thu 14 Sep 2023 13:09:53 +0000
ROA not before:           Thu 14 Sep 2023 13:04:53 +0000
ROA not after:            Thu 12 Sep 2024 13:09:53 +0000
asID:                     262316
IP address blocks:        2804:7c0:20b1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:62:fa:3c:8e:37:14:20:0f:1d:f7:32:89:04:7b:97:08:94:95:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 14 13:04:53 2023 GMT
            Not After : Sep 12 13:09:53 2024 GMT
        Subject: CN=CA1EF8D9E7F4D67D1A671A8B67A68483258D3C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:95:c3:ac:12:19:e6:36:03:21:ce:d4:67:41:
                    34:56:66:d5:16:26:f9:7d:43:80:6a:bf:93:61:ba:
                    f3:2b:57:a3:f9:54:3c:84:3c:30:09:4c:30:ef:8c:
                    ae:5f:9f:57:71:56:8d:98:fd:28:5c:3d:74:24:d2:
                    48:6c:66:ca:9e:2b:67:a1:32:b4:cd:a6:e9:13:bd:
                    db:4e:2c:2f:78:f4:3d:c8:68:29:42:b8:18:b5:5e:
                    1e:82:ca:b8:13:3f:20:42:d6:e2:e3:bc:9b:62:fc:
                    01:95:8d:9d:42:a7:36:82:5f:fa:f6:49:68:6f:07:
                    a5:58:85:c9:bb:53:54:10:31:69:21:19:1b:ce:87:
                    a9:db:de:05:41:b1:3b:aa:db:a3:76:8d:19:1c:46:
                    4d:ea:cb:7c:cf:83:88:c9:56:4a:d7:e3:2f:89:91:
                    f0:c9:8e:44:82:39:3d:3c:7d:15:cb:9b:54:17:ce:
                    45:98:e9:d1:d1:f1:40:88:f3:22:ed:cc:ee:cf:4b:
                    f2:37:17:5d:3c:cd:be:71:bd:68:9a:05:fd:45:66:
                    0b:f2:42:f0:62:fa:41:16:bd:c3:25:23:28:a8:7a:
                    26:49:e7:cb:5f:7c:89:90:aa:7b:24:4e:22:d5:48:
                    22:8b:27:1b:35:7f:9a:c5:2d:99:23:85:bf:ac:a9:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1E:F8:D9:E7:F4:D6:7D:1A:67:1A:8B:67:A6:84:83:25:8D:3C:59
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323062313a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:20b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:21:b5:96:f2:e6:b9:6e:78:b0:55:3e:49:59:05:7f:19:
         f6:b3:1f:91:03:25:01:bb:d7:ec:c6:42:33:58:b5:b0:87:80:
         71:b8:17:f5:64:9f:46:13:84:f7:d5:31:ff:ab:24:15:af:50:
         5f:4a:b4:ba:29:1a:58:d0:90:0c:a7:c5:dc:57:74:60:e4:2a:
         54:58:71:66:08:62:91:3d:2e:cc:62:bc:b3:fc:6c:78:ce:47:
         2c:25:65:2b:bd:ab:f4:bc:2e:ba:e2:1c:05:70:93:69:f5:e3:
         39:75:c8:37:ab:f2:85:24:e7:3b:f1:a4:63:f5:0b:09:fd:82:
         19:35:f1:67:18:5b:3b:66:ee:85:ef:a1:35:6d:41:ce:96:8e:
         b3:2b:06:bd:d8:e2:39:fd:3a:a8:a6:37:28:68:66:f3:3b:fc:
         c0:8f:b1:aa:9f:ef:d5:ba:b8:bd:14:4f:37:75:83:74:96:24:
         73:97:71:81:13:72:63:fb:88:03:7c:0e:fa:bb:94:b9:aa:7f:
         25:b1:6c:c7:d1:a4:0c:ae:89:84:46:3e:03:ec:71:e3:45:20:
         47:29:52:51:11:3c:24:be:31:39:6a:46:99:da:b5:72:ed:64:
         26:a7:45:5c:f5:8e:d2:8b:eb:6e:98:d8:f9:ae:ae:5f:fb:aa:
         21:aa:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----