Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33342d3334203d3e20323733353137.roa
File:                     323830343a386664633a3a2f33342d3334203d3e20323733353137.roa (raw, json)
Hash identifier:          jHFJiD3t8fnY+0bxVvzKVcB43olfe1NbvMg395KStjM=
Subject key identifier:   CE:B1:FD:31:8B:44:B2:0E:78:19:A7:48:B2:D0:E7:5B:F3:DE:49:82
Certificate issuer:       /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial:       27673AA58DA5E5AFFC9037465FE0266A88D3D76E
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33342d3334203d3e20323733353137.roa
Signing time:             Tue 27 Aug 2024 17:18:53 +0000
ROA not before:           Tue 27 Aug 2024 17:13:53 +0000
ROA not after:            Tue 26 Aug 2025 17:18:53 +0000
asID:                     273517
IP address blocks:        2804:8fdc::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:3a:a5:8d:a5:e5:af:fc:90:37:46:5f:e0:26:6a:88:d3:d7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
        Validity
            Not Before: Aug 27 17:13:53 2024 GMT
            Not After : Aug 26 17:18:53 2025 GMT
        Subject: CN=CEB1FD318B44B20E7819A748B2D0E75BF3DE4982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:e6:54:8f:d6:10:cc:e7:ee:81:d0:1e:00:
                    bb:7f:ef:7e:46:b4:8e:9c:b5:66:dc:06:62:d4:98:
                    81:2d:13:6f:89:44:8d:f6:34:17:73:76:df:06:76:
                    3c:8f:bb:8e:d7:c8:bc:74:ee:b4:75:1f:a3:80:a3:
                    6d:0b:0d:f2:5e:32:78:be:20:40:70:0e:13:f8:80:
                    a4:47:99:a0:f8:a7:27:9a:a1:bb:90:90:cb:b4:d8:
                    d9:cb:06:88:4b:86:79:c0:57:0e:34:e1:2c:fa:4d:
                    c3:9a:80:4d:1b:82:dd:b9:ba:c3:e6:2f:17:c4:82:
                    ad:8c:c7:51:12:62:a6:0b:64:b3:fe:d3:22:8d:a8:
                    f8:60:a8:46:d0:a1:ce:60:8d:3a:5b:c6:57:f9:a5:
                    61:a2:86:91:74:7f:cc:63:df:62:1b:74:50:83:02:
                    b9:c8:00:44:57:db:2d:a5:90:7f:b5:58:e0:82:94:
                    19:5b:c3:14:2c:0e:4c:48:f8:11:3d:ac:ba:71:ec:
                    9b:c7:e5:9d:66:73:f0:79:e7:48:61:05:07:c4:29:
                    85:62:86:9d:54:ae:f4:ce:ce:10:b8:7a:51:48:80:
                    0a:b5:8a:38:60:e7:57:5b:5d:48:6f:a2:30:a7:e0:
                    ae:fe:ee:f9:30:f2:c3:f8:7f:0a:20:e1:30:35:08:
                    e1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B1:FD:31:8B:44:B2:0E:78:19:A7:48:B2:D0:E7:5B:F3:DE:49:82
            X509v3 Authority Key Identifier:
                keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33342d3334203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fdc::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:c7:72:35:47:27:e2:0a:1d:54:4e:a6:95:75:1a:54:8f:0b:
         e1:d9:5d:f2:6c:92:4c:72:c2:27:a7:89:c9:31:8d:8e:cd:dd:
         77:59:01:f7:39:0f:c5:dc:94:d4:50:f0:b7:7d:82:52:f3:8e:
         de:0d:f8:bb:bd:40:dc:da:e2:70:f2:19:01:c3:fa:bf:1f:06:
         61:fc:60:fe:83:05:20:b9:9c:a1:ed:01:b7:04:c3:26:b6:93:
         2a:10:34:a9:92:b0:08:e6:4d:70:92:08:bb:ed:d5:73:60:e6:
         9b:73:f7:9a:b0:dc:c9:8d:64:55:b5:ff:f1:b8:c3:06:52:68:
         3b:22:40:82:8c:2f:d4:7f:53:29:56:12:b3:e8:57:a1:ce:da:
         d2:b1:46:ee:6d:11:7a:17:a3:ac:89:42:6f:22:ff:b8:d4:83:
         37:4f:06:e1:a3:9e:78:2e:ec:7c:71:e3:4d:30:f8:a8:bc:18:
         2e:01:0f:89:30:49:c8:40:f1:ac:e8:2e:9f:1e:8d:16:17:2e:
         d3:cf:74:37:0d:e1:2f:bf:d6:aa:8f:6b:0f:8b:be:7b:12:d8:
         d4:42:3c:a4:85:76:b4:d6:f7:c2:ce:9e:dd:09:42:35:f1:19:
         5f:e5:04:78:3c:c5:94:9f:7b:ab:88:8f:ff:80:86:87:4f:7e:
         db:79:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----