Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa
File:                     323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa (raw, json)
Hash identifier:          Y6/VcUix724h4vSLRcPMu+M19MxGbVbtxIznZtN3ynQ=
Subject key identifier:   99:EE:E5:41:CA:FB:3E:20:AA:7B:EC:01:FD:33:12:51:99:FA:89:1E
Certificate issuer:       /CN=D5AC9B9277A1EBF21D85A281540155F60527A721
Certificate serial:       12EC485E3399A2792A32EACA9B791F26C3CEEC0A
Authority key identifier: D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa
Signing time:             Tue 12 Dec 2023 16:24:50 +0000
ROA not before:           Tue 12 Dec 2023 16:19:50 +0000
ROA not after:            Tue 10 Dec 2024 16:24:50 +0000
asID:                     61776
IP address blocks:        2804:192c:2800::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ec:48:5e:33:99:a2:79:2a:32:ea:ca:9b:79:1f:26:c3:ce:ec:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Validity
            Not Before: Dec 12 16:19:50 2023 GMT
            Not After : Dec 10 16:24:50 2024 GMT
        Subject: CN=99EEE541CAFB3E20AA7BEC01FD33125199FA891E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:a1:52:ec:93:74:ad:d1:8b:b6:3b:77:ac:
                    3a:4f:21:5b:3d:98:44:3a:9f:46:30:bc:e1:7d:20:
                    b0:de:ad:16:e1:3a:5f:d5:6c:3e:7e:e3:07:e3:59:
                    fc:a6:a5:07:95:42:de:04:ed:1b:e2:de:7b:dd:de:
                    04:59:b8:06:fc:a1:8f:9f:fe:8b:d5:da:be:82:7c:
                    ad:01:ac:0b:7d:1b:93:39:46:b1:d9:e1:41:05:6d:
                    f5:d3:e7:f6:45:6a:13:2d:3c:c8:0b:f4:7c:24:3b:
                    18:83:3b:34:1e:4e:50:c5:0f:fe:c5:c3:fe:ed:1f:
                    ee:85:52:85:f6:1a:a7:68:60:87:04:fc:b1:cc:ca:
                    29:53:58:d8:dd:ad:87:c4:ef:18:05:31:78:79:f7:
                    a9:b5:1b:68:1f:8b:52:77:13:a9:e2:7c:17:87:2e:
                    7b:86:35:72:e5:6b:71:ac:55:8a:57:97:ac:af:9c:
                    a8:5a:e1:6d:20:93:37:99:05:a4:94:5f:25:98:e0:
                    75:39:aa:9a:09:c1:be:1e:7e:57:e8:f6:d9:53:0e:
                    5e:20:fe:da:c7:2e:a8:6d:1a:fa:27:36:a1:10:c3:
                    c2:9e:cd:c3:8e:15:06:77:9f:d1:f8:cb:9b:f8:b0:
                    27:7e:c8:ca:ed:e7:2a:b6:0e:b9:4f:d8:ab:a8:98:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:E5:41:CA:FB:3E:20:AA:7B:EC:01:FD:33:12:51:99:FA:89:1E
            X509v3 Authority Key Identifier:
                keyid:D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a323830303a3a2f33372d3337203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         a2:7c:72:89:e0:74:27:f2:4b:9a:c9:43:52:bf:ca:23:e7:b3:
         c5:35:c3:6f:b6:78:29:ba:e5:62:dc:64:ca:73:91:0b:d0:79:
         d3:0c:6e:c6:21:ae:ba:47:96:7d:88:ba:ea:8d:e2:4d:ec:3f:
         f3:e6:25:5e:e8:15:c1:2e:3d:58:9a:bc:f3:bb:73:a1:c7:13:
         6c:b0:6d:a3:43:0f:e4:50:16:13:0e:24:35:6c:f3:27:b0:8e:
         ba:e4:e7:c2:99:a8:01:1a:8e:ae:e4:22:9f:28:4b:ea:ab:82:
         41:72:2f:60:f6:ab:ae:fa:01:c7:ba:cf:da:a8:5c:df:07:a3:
         d3:0b:33:52:f1:5a:54:e3:c3:a2:bf:82:4e:a4:21:5a:d5:1b:
         f4:84:76:03:19:0e:ac:3b:8f:3c:d5:fa:01:75:50:95:0f:86:
         a4:42:4d:80:13:bc:b3:ac:2e:c0:73:be:ed:b4:6d:59:58:e1:
         85:9a:fb:80:85:3d:6d:07:06:8f:dc:93:01:30:7f:d1:7b:7c:
         21:51:88:10:70:4c:1e:a6:e3:2a:ed:6d:35:c5:02:ac:11:81:
         56:75:9e:30:2a:a9:b0:e7:5d:c0:2e:38:f7:94:a1:ef:c2:19:
         ae:c8:3e:20:51:e5:70:1d:96:2b:05:dc:ac:b0:49:1b:08:f6:
         68:6f:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----