Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa
File:                     323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa (raw, json)
Hash identifier:          7SndvgYcjak2bOqxnnqH+pAPuCpV4D/qZHIQaBZdBNM=
Subject key identifier:   5E:07:A2:DC:D0:53:E7:43:31:2C:8E:77:B6:94:77:A3:2C:72:AE:94
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       783B9D43410B3647788B7A39D840A7DEAE7F23E0
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa
Signing time:             Wed 03 Apr 2024 18:31:33 +0000
ROA not before:           Wed 03 Apr 2024 18:26:33 +0000
ROA not after:            Wed 02 Apr 2025 18:31:33 +0000
asID:                     269532
IP address blocks:        2804:6614:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3b:9d:43:41:0b:36:47:78:8b:7a:39:d8:40:a7:de:ae:7f:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Apr  3 18:26:33 2024 GMT
            Not After : Apr  2 18:31:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:da:40:e5:a9:76:aa:85:d6:5d:d5:ba:6c:
                    4d:4c:89:a1:86:0c:67:3a:26:37:46:70:f0:e2:d6:
                    90:ec:84:8d:5c:49:b5:b6:03:4e:fd:50:73:9b:6b:
                    ab:61:6d:dd:e4:a3:f7:b9:db:d1:9a:31:a7:61:f3:
                    2c:17:95:c0:a5:7e:83:78:2a:f6:8c:cd:82:3c:87:
                    59:99:d7:34:15:4a:9e:68:ae:cf:36:f0:0b:cc:00:
                    0f:77:62:a3:2e:a0:fc:9f:62:9d:8e:0d:55:72:1b:
                    e9:53:1d:cb:27:3b:a2:41:ad:e9:00:2f:11:2b:17:
                    04:36:65:26:2d:54:33:16:05:0b:ae:63:ed:63:af:
                    96:fc:c4:55:53:ec:de:f2:ee:d9:9b:27:25:85:ce:
                    bb:cb:36:61:4d:2a:45:1e:6b:ce:28:d7:21:30:b4:
                    9a:6b:62:f4:a5:09:aa:65:ad:60:78:80:de:35:20:
                    89:97:6c:b5:43:48:db:4e:f2:17:ef:da:a4:0e:8b:
                    36:f0:83:16:42:fe:c9:56:fe:20:a0:5b:3e:70:2a:
                    ef:81:56:9a:1c:f2:9d:3b:fc:41:54:cd:1e:5c:db:
                    a8:b1:76:bb:38:2e:a1:38:03:46:66:4d:7c:9b:73:
                    85:a2:be:d4:d2:e5:49:e6:9d:65:ec:a7:9d:fe:5a:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:07:A2:DC:D0:53:E7:43:31:2C:8E:77:B6:94:77:A3:2C:72:AE:94
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a313a3a2f34382d3438203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:ef:3d:0d:dd:26:26:0a:27:5d:ce:87:8b:76:54:fd:a7:
         2f:ff:38:40:70:57:97:fa:a2:31:ab:35:98:7f:82:3a:35:da:
         91:20:42:f0:65:81:82:38:b9:f0:4a:3d:6b:c0:50:c0:31:dc:
         5f:55:bc:6f:c9:d1:7c:59:fa:3c:a5:93:2a:14:1c:a1:aa:11:
         cf:bf:d3:ba:76:2c:5b:6f:d0:3a:b0:b8:87:d8:0e:70:00:6a:
         35:83:91:e8:c4:78:a7:9c:04:e9:b3:84:6f:3d:68:04:51:dd:
         0c:da:69:43:d1:cb:12:56:b7:20:9e:5a:b7:40:3b:73:4b:de:
         1c:d4:87:f3:b4:7f:f4:c3:4e:5f:c7:f3:66:9e:8a:9b:97:7d:
         ee:2c:e2:48:6e:b7:58:8a:68:32:5c:07:cf:5a:3a:4a:93:48:
         64:1f:3d:7f:30:2a:a2:3e:9f:45:f6:d5:a6:6a:28:e7:d6:76:
         f2:a0:d8:63:40:59:cb:05:97:90:2d:8c:8e:95:4b:63:6f:e0:
         ff:bf:8a:e6:a6:bc:22:79:f5:0d:b3:b1:e1:87:80:0f:12:68:
         08:b7:3a:cb:79:69:de:35:84:3a:dd:7e:81:35:aa:08:29:63:
         16:7c:b0:e3:6a:9d:6b:ac:f1:cc:c0:0c:ae:8a:a1:ad:be:5c:
         29:db:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----