Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          h5c9wQiBpLlydQu0dJ6dck5d3R2DL02mnRgNQgcUiNU=
Subject key identifier:   13:53:69:84:DC:F0:27:36:61:B9:8A:13:EE:CC:61:64:70:77:CD:D1
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       434A2FC032F785137CABCC43DF6DCF448EBD65F8
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Fri 14 Oct 2022 16:54:03 +0000
ROA not before:           Fri 14 Oct 2022 16:49:03 +0000
ROA not after:            Fri 13 Oct 2023 16:54:03 +0000
asID:                     268144
IP address blocks:        2804:58b0:120::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4a:2f:c0:32:f7:85:13:7c:ab:cc:43:df:6d:cf:44:8e:bd:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Oct 14 16:49:03 2022 GMT
            Not After : Oct 13 16:54:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:9a:52:ab:65:43:2b:24:da:b4:2a:52:41:
                    2d:b9:13:92:51:d5:f2:b7:4d:8f:4f:0a:54:61:8d:
                    d7:54:85:db:95:37:b1:98:97:96:7c:bb:1c:3a:e3:
                    64:04:25:52:04:5c:f9:3b:1e:6d:85:7f:31:d6:be:
                    2e:57:ac:93:5b:a7:6b:32:fc:1b:2e:52:54:16:0d:
                    1a:00:58:e0:33:d2:7a:e4:00:7b:4f:76:06:a3:79:
                    f8:1f:2b:9b:1c:fd:84:76:2c:5e:38:b4:1d:1f:31:
                    df:92:ba:f8:37:06:ed:f3:ce:b6:81:fb:83:93:49:
                    b4:33:9f:86:43:f4:a1:9c:40:b3:df:9c:d8:c5:41:
                    6e:52:03:23:21:76:6f:fd:f2:a6:66:e5:6e:ba:70:
                    b7:49:4f:3c:b4:ab:50:34:f5:b1:53:45:9a:1f:2c:
                    03:fc:47:1a:fc:7b:e1:1f:96:46:30:57:85:9c:d4:
                    4e:a8:59:79:f4:61:46:cd:0d:a0:28:c9:01:21:67:
                    19:f7:d9:51:3b:60:13:bb:a6:8e:11:0d:e0:49:77:
                    72:f3:c0:7a:41:15:8a:0e:08:1e:49:b9:4b:5e:e1:
                    70:e0:da:77:80:99:60:e1:4f:e4:72:73:23:61:08:
                    9a:08:0b:16:df:61:48:95:3d:43:c5:e8:64:ee:6e:
                    74:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:53:69:84:DC:F0:27:36:61:B9:8A:13:EE:CC:61:64:70:77:CD:D1
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:120::/46

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:e0:43:f5:b2:ca:ca:07:71:08:08:f1:f2:23:72:7e:1b:
         81:2d:dc:2c:49:27:57:9f:aa:87:cb:8a:72:5e:45:8c:f4:79:
         44:f2:4f:de:92:a4:86:2b:82:25:9b:31:b7:fc:a1:a7:c2:5e:
         cc:6a:07:a6:b5:c4:0a:69:58:43:a2:08:2c:2e:de:29:1c:d3:
         99:26:98:70:97:52:e2:dd:e1:23:8e:16:5c:53:53:8e:b6:82:
         9a:a5:3a:e1:db:fa:19:96:52:d2:8a:5f:37:1c:b2:32:ee:fa:
         f3:c1:81:cf:1c:0f:95:1a:b5:77:3c:b0:3c:ec:23:78:95:5c:
         89:ee:4e:47:b3:9c:ed:ad:74:ee:73:26:f9:1c:a6:4b:df:ef:
         06:a4:72:4f:e4:3a:94:23:ba:82:11:91:43:5e:0b:f3:50:25:
         f8:05:56:6d:f2:3e:98:de:61:66:e6:6e:c6:7e:f1:f1:03:17:
         21:82:72:8f:57:74:72:f5:f9:ea:13:cc:7c:ba:12:06:de:69:
         1d:39:b5:59:31:bd:c6:4d:6f:f7:d6:49:d7:c3:af:fd:04:37:
         7c:6d:42:90:9e:96:4d:27:7b:4a:8b:20:9d:f0:ce:9d:49:19:
         d2:9b:d6:38:db:5f:43:a5:37:39:f5:0e:a3:52:7a:40:9f:43:
         69:48:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----