Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a383830303a3a2f34302d3430203d3e20323638353638.roa
File:                     323830343a353332633a383830303a3a2f34302d3430203d3e20323638353638.roa (raw, json)
Hash identifier:          VP5KQBZvK1cI00UdffTiN2W/in/OsSx/kbgdVnaD5Fo=
Subject key identifier:   CD:43:81:89:22:07:68:7E:42:39:8D:D1:5C:4F:E9:6D:08:F5:1F:23
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       16BF6CAA2957E96FFDF0DB37D3FBD374612F865F
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a383830303a3a2f34302d3430203d3e20323638353638.roa
Signing time:             Tue 31 Jan 2023 23:44:33 +0000
ROA not before:           Tue 31 Jan 2023 23:39:33 +0000
ROA not after:            Tue 30 Jan 2024 23:44:33 +0000
asID:                     268568
IP address blocks:        2804:532c:8800::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bf:6c:aa:29:57:e9:6f:fd:f0:db:37:d3:fb:d3:74:61:2f:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 31 23:39:33 2023 GMT
            Not After : Jan 30 23:44:33 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:14:70:7c:8f:39:f2:9a:63:75:a7:cc:2e:
                    b3:4b:8a:2b:8a:29:65:96:bc:93:77:a0:f3:7f:fd:
                    9b:3f:cc:35:36:a9:bd:91:46:cb:28:f8:d0:8b:e1:
                    77:69:c8:8b:9b:fc:d4:b2:c6:0d:1a:62:e8:43:1a:
                    bc:32:34:60:e7:43:2f:a6:49:7c:c3:df:3c:34:5f:
                    60:03:56:78:0f:38:f8:54:38:81:52:99:af:e4:1e:
                    70:64:aa:3d:59:d3:46:8e:2d:fc:50:ec:25:db:69:
                    45:c9:4a:c6:c3:71:80:27:f3:02:21:be:25:69:f2:
                    a6:b6:fc:26:33:4e:d7:41:03:c3:b5:9e:fe:73:0e:
                    55:75:2a:0d:d6:4d:76:ee:a7:21:42:4f:6a:20:75:
                    5c:8d:0c:f4:54:41:f1:6c:61:b9:29:7b:df:29:21:
                    2f:f9:0e:99:68:14:e1:c1:32:ef:9f:eb:a1:7d:40:
                    3e:85:e9:74:c2:ad:4a:2b:16:e6:bc:de:3d:9e:fe:
                    98:4a:82:fb:a4:06:f8:c3:51:61:4c:a8:88:50:ce:
                    33:8d:98:3b:28:b6:97:41:29:13:0e:30:75:e3:6f:
                    28:5d:8f:4c:9b:2f:dc:2a:fa:4c:86:33:da:fb:c4:
                    21:5e:17:d1:2c:2e:ad:50:cb:73:ee:be:8a:ff:a9:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:43:81:89:22:07:68:7E:42:39:8D:D1:5C:4F:E9:6D:08:F5:1F:23
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a383830303a3a2f34302d3430203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:16:d6:63:ad:4f:68:ef:3e:42:5f:77:ca:b1:84:1a:06:c3:
         0c:55:64:d5:f4:03:f8:59:ef:d8:79:d8:a7:93:74:06:9b:fd:
         4a:0a:97:78:5a:3f:7a:93:36:4f:06:07:ca:9c:d4:52:9d:23:
         3e:76:84:63:fc:62:6d:a8:92:5b:55:06:aa:45:77:cb:09:a2:
         db:b2:5d:f7:59:b9:22:3e:1f:52:a5:b6:c4:aa:9c:85:0a:f9:
         b4:c3:d3:f3:80:98:1c:3a:4f:34:27:b3:a2:49:ee:e5:a6:f8:
         ff:1f:3e:19:fb:0f:d5:9c:da:24:19:e4:8c:e8:d5:17:cb:8c:
         35:ec:34:d0:c6:45:2d:86:07:b7:49:e8:50:96:55:97:6d:73:
         fb:ed:6e:f4:5d:41:29:57:aa:5d:c3:cf:85:a7:f7:a2:d1:c8:
         23:4a:be:93:41:b2:6e:e0:0e:98:0f:f2:f5:3e:4e:5b:e9:b7:
         3f:fd:c4:bc:d7:c4:49:2c:cd:a0:7d:e2:75:38:33:d6:3d:26:
         cc:fc:41:f1:5e:e0:71:cd:25:28:44:87:2a:38:e4:1d:97:4c:
         bb:4c:39:51:32:b2:2a:28:d4:ac:e7:fc:07:67:78:42:f2:2f:
         11:92:d7:a5:2b:62:68:5e:d0:b8:f0:95:56:4f:03:ef:63:7b:
         dd:44:95:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----