Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a343030303a3a2f33342d3334203d3e20323733353137.roa
File:                     323830343a386664633a343030303a3a2f33342d3334203d3e20323733353137.roa (raw, json)
Hash identifier:          3d93PqW3rptH9S4ikvPD+6ZZukOBV5OP+pBywF00hqM=
Subject key identifier:   00:00:13:54:C6:36:0E:F2:5C:A9:7D:34:16:E6:AA:B0:16:63:87:33
Certificate issuer:       /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial:       599D9A4ECF65848A63125F434E94DB466BCAD4AA
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a343030303a3a2f33342d3334203d3e20323733353137.roa
Signing time:             Tue 27 Aug 2024 17:19:01 +0000
ROA not before:           Tue 27 Aug 2024 17:14:01 +0000
ROA not after:            Tue 26 Aug 2025 17:19:01 +0000
asID:                     273517
IP address blocks:        2804:8fdc:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9d:9a:4e:cf:65:84:8a:63:12:5f:43:4e:94:db:46:6b:ca:d4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
        Validity
            Not Before: Aug 27 17:14:01 2024 GMT
            Not After : Aug 26 17:19:01 2025 GMT
        Subject: CN=00001354C6360EF25CA97D3416E6AAB016638733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:10:aa:ef:3d:50:64:49:ec:18:1f:cb:38:
                    b7:cb:f4:77:81:e6:73:4d:07:e4:0d:74:da:41:6f:
                    09:c1:e2:e7:f7:0c:bf:33:e6:bd:cf:81:53:03:e8:
                    0d:52:8a:ab:5d:d2:1e:46:c8:aa:8a:b8:69:22:c8:
                    09:aa:97:87:d6:97:33:38:33:fa:75:c6:51:cc:af:
                    f4:34:f7:59:fb:4c:58:c3:82:e4:9d:81:75:4f:2d:
                    b6:06:19:2d:25:95:df:19:1b:13:4c:0f:eb:b7:a9:
                    75:c3:b1:b6:cc:e5:c8:99:50:5a:83:be:d3:07:a7:
                    92:d9:70:50:02:a1:27:7f:ea:27:6a:a1:18:fb:bb:
                    2d:dc:a6:62:67:9a:70:48:3f:54:4d:5a:fd:75:12:
                    5f:52:1c:63:91:8b:9f:9e:2a:b7:c9:b2:9c:61:75:
                    9c:7a:7f:03:f6:d2:43:5d:77:d8:e3:d0:52:a2:a1:
                    d1:bb:27:7f:db:4f:52:b1:dd:bb:dc:c0:7d:28:dc:
                    84:4e:58:d6:67:1e:c5:9a:13:ef:20:7e:c4:a2:6b:
                    3b:18:a9:70:b8:9e:bb:56:92:ba:73:c3:46:44:0b:
                    eb:33:fb:a1:6c:f4:74:b9:92:72:2c:de:3a:77:5d:
                    43:19:7b:70:bc:53:6d:3f:cf:18:57:06:d3:b3:42:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:00:13:54:C6:36:0E:F2:5C:A9:7D:34:16:E6:AA:B0:16:63:87:33
            X509v3 Authority Key Identifier:
                keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a343030303a3a2f33342d3334203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fdc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c2:dc:be:af:66:0f:1c:00:6f:d6:ec:15:5a:5e:27:76:06:7b:
         0c:3e:7a:e1:b1:89:e1:d8:21:8b:77:53:0b:37:ce:17:63:88:
         71:f2:fd:8e:30:49:8f:c3:27:59:c6:1f:3c:c3:cb:b7:82:f3:
         2a:3c:07:c5:d2:af:9b:2e:7e:de:7c:c7:6f:ef:fd:59:e0:d7:
         71:c5:03:16:ee:1c:d1:85:1e:0e:12:05:2b:8a:28:0a:0b:b8:
         06:24:1b:90:75:ee:d0:af:76:33:ab:03:ba:28:7c:3d:82:77:
         f2:d0:51:74:7e:74:f8:36:22:b8:db:a4:7c:73:ff:0e:c6:df:
         34:14:41:01:db:be:c8:61:31:28:92:d5:7c:2b:5b:91:34:be:
         62:42:ba:e6:0e:9a:fd:9c:30:8b:ac:6b:e3:4e:de:63:a6:82:
         49:f5:05:93:96:44:8a:9d:c6:75:d5:9f:a3:c8:fd:50:ec:30:
         5a:d1:dd:6e:c5:2e:5d:aa:34:e6:2b:d7:73:5e:67:b3:f0:a4:
         39:5e:be:72:12:f1:e9:ee:bc:d7:71:29:44:88:23:d6:4b:24:
         3c:be:cf:13:35:78:0f:8e:d4:23:f5:68:e6:5c:7a:52:0f:d2:
         3d:5d:0c:23:98:2c:db:f2:97:09:fe:fa:9d:08:1b:8e:97:b1:
         3f:7d:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----