Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064343a3a2f34382d3438203d3e20323632333136.roa
File:                     323830343a3763303a323064343a3a2f34382d3438203d3e20323632333136.roa (raw, json)
Hash identifier:          5Ogu9lWlGyKWTvmNGRofzk5ws6W4jfPebMlV5xc0pAo=
Subject key identifier:   96:D0:E6:AE:A2:61:DC:E8:92:67:59:E1:C6:94:B7:C8:79:D2:EB:16
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       5B1F125995CCFA19AC4A01FCAEB7B1691F0FA197
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064343a3a2f34382d3438203d3e20323632333136.roa
Signing time:             Thu 14 Sep 2023 13:12:27 +0000
ROA not before:           Thu 14 Sep 2023 13:07:27 +0000
ROA not after:            Thu 12 Sep 2024 13:12:27 +0000
asID:                     262316
IP address blocks:        2804:7c0:20d4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1f:12:59:95:cc:fa:19:ac:4a:01:fc:ae:b7:b1:69:1f:0f:a1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 14 13:07:27 2023 GMT
            Not After : Sep 12 13:12:27 2024 GMT
        Subject: CN=96D0E6AEA261DCE8926759E1C694B7C879D2EB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:12:a1:48:cc:25:9a:ba:64:c9:2a:c0:04:b8:
                    ff:9c:65:9a:0b:4a:b3:39:41:01:21:17:01:1d:59:
                    ed:e5:ad:05:9a:a9:98:02:24:ef:a0:19:27:cc:45:
                    c4:98:ad:4a:48:cf:ef:cc:81:70:19:e0:62:87:ed:
                    8a:f4:6d:3f:2b:7e:20:88:56:be:ee:9f:ce:cc:c6:
                    c2:3d:e4:b9:55:fc:7a:fa:a5:c7:31:90:ff:b4:8d:
                    03:6a:c7:50:57:35:9d:79:df:d8:6f:0a:51:7a:d3:
                    1f:10:37:19:7c:26:19:b4:53:89:f1:50:da:99:0d:
                    87:03:16:cf:d3:59:ae:ed:72:7a:f5:ae:ab:58:ab:
                    49:6e:30:ef:ba:9b:93:1f:83:a5:2d:b5:0b:da:2b:
                    90:62:82:1f:2e:87:a0:f5:7d:5a:c8:d4:c1:c3:e6:
                    a2:58:c6:ec:7b:c4:11:b1:c8:de:dd:33:8b:e1:6a:
                    47:55:f9:fb:0c:fd:e7:8e:f3:0b:fa:df:76:c2:9d:
                    86:fb:2a:21:42:60:a6:1c:5e:d1:7c:ea:13:59:15:
                    68:f6:45:79:00:ab:84:f5:0c:e1:30:ad:4a:82:bc:
                    3d:93:27:f2:bb:a0:e2:51:10:01:65:94:22:2a:93:
                    4d:60:0e:e3:8b:63:d9:17:04:c6:66:7d:56:8c:28:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:E6:AE:A2:61:DC:E8:92:67:59:E1:C6:94:B7:C8:79:D2:EB:16
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323064343a3a2f34382d3438203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:20d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:01:be:ba:32:d9:a8:b6:69:36:16:09:3c:cd:ba:c3:0e:
         7c:e6:f8:79:2a:2a:b5:52:4e:0c:bd:b1:13:5f:d2:27:e1:43:
         82:45:1e:ff:31:26:2e:b6:08:b5:7d:81:35:dc:85:d9:df:56:
         04:ec:5c:22:26:4c:29:6d:d8:32:c6:98:09:5f:47:4e:97:05:
         31:7a:26:02:ab:69:85:77:28:36:68:17:f2:9a:e6:cc:03:f1:
         0c:c1:5d:e2:85:d7:6c:0c:a6:ac:82:f0:3c:72:80:12:b5:40:
         a7:44:c6:d4:a8:da:db:95:e1:78:a5:6d:88:39:a5:29:7c:7e:
         c6:89:56:ee:e7:da:18:33:2e:d6:91:30:1c:0a:30:51:8a:87:
         51:cf:e2:a7:8b:9e:c9:6f:59:46:82:8c:c6:7d:df:1b:66:13:
         84:9e:6d:c2:d4:e5:5a:a5:f8:16:d8:43:f9:7e:55:f0:00:69:
         11:15:c6:5e:30:ad:e5:55:01:c3:57:48:bc:15:5c:04:4e:9f:
         cc:49:9c:ac:a9:30:46:ef:10:15:80:61:56:2e:f2:5c:89:19:
         82:60:f0:8b:b4:e8:74:21:90:9d:fb:ec:34:10:b4:f7:1b:78:
         5d:c1:34:d5:19:5c:19:47:a2:4f:b7:c2:b2:38:2f:0b:26:69:
         1b:98:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----