Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa
File:                     323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa (raw, json)
Hash identifier:          LsfcGlkVhMTzG7j/lpCeEReNf36S+VFWr8TEYk2zgR0=
Subject key identifier:   F3:DA:B7:EB:05:3E:0F:20:7D:FE:85:F0:A6:38:4F:74:4A:F3:04:3B
Certificate issuer:       /CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
Certificate serial:       43810E985CD8BEA367769F8147F21239863B7832
Authority key identifier: 6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa
Signing time:             Sat 02 Nov 2024 15:23:07 +0000
ROA not before:           Sat 02 Nov 2024 15:18:07 +0000
ROA not after:            Sat 01 Nov 2025 15:23:07 +0000
asID:                     272581
IP address blocks:        2804:8578:1201::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 05 Nov 2024 02:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:81:0e:98:5c:d8:be:a3:67:76:9f:81:47:f2:12:39:86:3b:78:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F5F758D20D21707BE60C25F3004D0EFA8A9FF54
        Validity
            Not Before: Nov  2 15:18:07 2024 GMT
            Not After : Nov  1 15:23:07 2025 GMT
        Subject: CN=F3DAB7EB053E0F207DFE85F0A6384F744AF3043B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:c8:f9:2d:c7:08:73:f6:4d:49:89:34:62:
                    a5:25:4a:fb:67:26:30:df:d6:93:e5:d3:99:cb:fc:
                    ea:b8:cf:77:57:1b:1e:f6:82:4e:0e:35:65:5f:cb:
                    24:ad:a5:40:e6:eb:11:90:ca:54:9d:f8:36:d4:fa:
                    61:d8:45:3e:90:cd:96:5a:fe:70:70:9d:fa:b0:bc:
                    07:6f:0d:8d:87:6b:f3:81:93:e7:bb:f5:f2:c5:0b:
                    2f:30:8b:06:af:65:ba:9c:1e:96:75:9f:28:c2:54:
                    6a:45:1b:63:60:5b:45:01:44:21:33:36:2c:d6:b7:
                    2b:0c:e2:e6:a7:89:5e:3d:0e:28:6c:68:dc:95:37:
                    64:0b:31:ab:de:9a:95:6e:f4:d1:9d:e1:cf:dc:bd:
                    0d:19:6a:f6:ab:48:f2:4b:49:79:c0:37:14:e7:ce:
                    76:54:62:37:61:0a:95:f1:ec:3d:91:4b:a1:b2:db:
                    c5:29:bf:9f:71:a6:44:ea:c7:8c:21:5c:f2:3c:e0:
                    0a:9d:57:c8:23:b4:ae:f7:3b:f6:09:dc:da:e6:8f:
                    47:20:f8:8b:38:35:ec:c0:84:09:ea:58:43:43:14:
                    80:e9:5f:fb:2c:fe:6d:78:ee:4d:9b:d9:3e:e0:8a:
                    25:d2:ea:c1:de:86:34:7e:60:78:fb:36:39:66:34:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DA:B7:EB:05:3E:0F:20:7D:FE:85:F0:A6:38:4F:74:4A:F3:04:3B
            X509v3 Authority Key Identifier:
                keyid:6F:5F:75:8D:20:D2:17:07:BE:60:C2:5F:30:04:D0:EF:A8:A9:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F5F758D20D21707BE60C25F3004D0EFA8A9FF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a313230313a3a2f34382d3438203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:1201::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:17:ef:c1:92:fa:1a:42:0b:37:04:b0:46:45:b3:06:58:ff:
         2d:1d:0d:4a:c7:65:9a:3e:56:7a:f6:a8:84:ae:0d:7f:f7:bc:
         33:16:8d:fe:c9:b8:39:8f:b6:15:26:22:55:28:c3:5b:7c:99:
         4c:74:44:88:a0:3e:c7:b4:ac:5e:07:bb:c2:e3:c4:0c:f5:50:
         a3:a8:5a:08:5d:ec:18:fd:17:ba:86:03:45:d5:c3:d0:c0:34:
         fa:05:39:11:6e:a5:8c:c2:fe:b6:10:60:d6:fd:70:4a:35:2b:
         b6:12:f5:94:9a:ac:87:4e:60:5e:f9:90:82:82:b2:bf:9a:f7:
         e6:e7:cf:63:46:cc:fb:c4:03:1a:c5:c8:36:47:6d:8f:11:81:
         67:4f:dc:77:68:f8:eb:dc:f8:2d:8e:c2:7d:06:a7:c1:fe:a8:
         2a:77:e6:9f:db:18:1c:9e:be:0d:d4:a6:2e:33:f5:0e:17:ee:
         f2:9b:dd:41:c4:78:f2:30:02:49:64:c0:6e:85:d4:c2:76:25:
         7c:a6:a5:f1:75:02:a7:32:60:0f:60:2a:aa:b0:ba:f8:48:de:
         9f:89:3a:8e:b6:34:75:52:df:96:b3:dc:48:c9:9a:6c:fc:02:
         dd:33:88:cf:83:3f:60:83:cd:32:81:dd:a4:19:0d:2e:c2:5e:
         d2:d9:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----