Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33372d3337203d3e203631373736.roa
File:                     323830343a313932633a323030303a3a2f33372d3337203d3e203631373736.roa (raw, json)
Hash identifier:          ygPQibWMJCfkHkXGwMcH4HEn+dR1aTdTSLrhSy81Tgo=
Subject key identifier:   D5:AA:70:11:AF:0F:A1:A2:8F:39:9B:98:F6:7E:D6:07:21:3D:0F:D9
Certificate issuer:       /CN=D5AC9B9277A1EBF21D85A281540155F60527A721
Certificate serial:       4F21B64B733D2BD76D2A81D3A3A719591EF1F14E
Authority key identifier: D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33372d3337203d3e203631373736.roa
Signing time:             Tue 12 Dec 2023 16:24:44 +0000
ROA not before:           Tue 12 Dec 2023 16:19:44 +0000
ROA not after:            Tue 10 Dec 2024 16:24:44 +0000
asID:                     61776
IP address blocks:        2804:192c:2000::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:21:b6:4b:73:3d:2b:d7:6d:2a:81:d3:a3:a7:19:59:1e:f1:f1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Validity
            Not Before: Dec 12 16:19:44 2023 GMT
            Not After : Dec 10 16:24:44 2024 GMT
        Subject: CN=D5AA7011AF0FA1A28F399B98F67ED607213D0FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:39:fe:e8:b6:eb:a4:c5:53:40:1c:c7:c5:
                    e4:2a:e2:fe:2b:09:40:1e:89:6b:2a:14:8d:33:8f:
                    02:78:91:f6:6e:5f:33:6a:5c:3c:a5:9b:2a:7d:29:
                    de:20:f7:bb:c5:fd:17:43:56:26:aa:3e:20:d0:10:
                    57:73:e3:0a:f8:fb:b6:3f:38:9f:df:a6:09:68:e5:
                    b0:32:d9:85:97:ac:dc:50:03:60:55:37:d1:1b:7a:
                    91:c2:5f:35:2b:c0:81:22:8e:26:09:99:b3:f3:e0:
                    af:b6:3c:53:db:09:06:94:4d:e7:c7:7b:14:f5:92:
                    25:93:5c:b3:33:a3:ef:d3:5a:bc:6a:e3:4b:6a:db:
                    90:76:4c:fd:df:00:7d:c9:b6:88:cc:ba:4f:cf:72:
                    fd:6e:6f:68:32:ed:9c:58:b9:68:66:cf:33:f0:1f:
                    50:c2:df:23:12:1a:29:f0:81:5c:65:7b:a3:3a:fb:
                    65:06:a8:6b:49:9e:e7:50:a7:59:a8:74:66:e3:ba:
                    03:ea:9e:fa:4a:71:6b:a7:94:2c:80:5d:54:01:bc:
                    60:99:e2:91:a2:83:b4:ba:a4:81:fa:d8:7e:cf:88:
                    f8:4a:a0:b6:13:31:ad:1a:df:07:e7:13:60:91:5f:
                    8d:74:01:fb:bd:16:8b:f9:49:8c:41:ce:a1:f2:82:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AA:70:11:AF:0F:A1:A2:8F:39:9B:98:F6:7E:D6:07:21:3D:0F:D9
            X509v3 Authority Key Identifier:
                keyid:D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323030303a3a2f33372d3337203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:2a:44:64:83:49:8e:a7:b4:29:94:02:07:31:ca:6b:79:
         74:f8:b3:d4:d2:72:77:88:68:14:12:43:57:cd:b4:98:3a:74:
         46:75:0b:fb:c2:8f:40:6a:2f:06:da:55:37:07:5e:8f:d7:bc:
         80:17:55:66:34:44:73:58:8c:06:34:cb:f5:b2:b6:c1:9d:2d:
         89:81:9b:29:44:a3:f2:f6:cb:b9:a7:e1:8d:01:dd:a4:83:17:
         3f:3f:13:30:27:41:b3:87:95:c9:7c:e7:fa:35:87:95:61:10:
         33:02:74:98:b3:7d:5b:cf:da:59:28:36:9e:19:4a:13:2c:21:
         9d:b1:a1:7e:b3:80:08:43:7f:d4:93:fb:42:32:13:66:44:89:
         e1:1e:2a:a3:f0:c8:9e:9f:a9:8d:af:38:57:80:ed:fb:6d:d5:
         14:ca:0d:f8:1f:7b:a6:f0:5f:0e:25:31:ed:19:78:fc:2b:1d:
         10:ba:45:ac:4e:28:2f:73:e3:18:e5:61:ec:4d:f6:da:11:f0:
         4b:42:60:2d:24:13:68:95:d8:0a:ee:65:46:c8:49:47:f8:48:
         47:03:e5:5f:6a:b6:4d:ae:c6:b8:1a:b5:af:81:b2:30:e5:e9:
         d8:60:6c:80:56:0d:ad:a7:96:28:13:89:48:ad:74:48:56:a5:
         f9:50:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----