Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030313a3a2f34382d3438203d3e20323730363834.roa
File:                     323830343a366663383a393030313a3a2f34382d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          3u1QNXUmIQIifhY0L7YkkVlqps8QU/SQIwbIkYAkagY=
Subject key identifier:   04:17:CE:46:71:36:3E:3E:C0:85:6F:59:76:CB:54:3C:A4:F4:43:B3
Certificate issuer:       /CN=483787B7037C3DA540ACD3A5B893D65DA468956A
Certificate serial:       228F34389EE5F941A27BFB681B5872D2C8F33059
Authority key identifier: 48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030313a3a2f34382d3438203d3e20323730363834.roa
Signing time:             Fri 01 Sep 2023 11:29:55 +0000
ROA not before:           Fri 01 Sep 2023 11:24:55 +0000
ROA not after:            Fri 30 Aug 2024 11:29:55 +0000
asID:                     270684
IP address blocks:        2804:6fc8:9001::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8f:34:38:9e:e5:f9:41:a2:7b:fb:68:1b:58:72:d2:c8:f3:30:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483787B7037C3DA540ACD3A5B893D65DA468956A
        Validity
            Not Before: Sep  1 11:24:55 2023 GMT
            Not After : Aug 30 11:29:55 2024 GMT
        Subject: CN=0417CE4671363E3EC0856F5976CB543CA4F443B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a6:84:4a:c4:eb:d5:10:6e:cf:ae:67:1f:88:
                    e1:e2:d1:42:75:79:36:a9:39:ff:ee:d3:b9:64:6b:
                    50:c0:fa:b5:c5:1d:ff:50:26:2d:05:d4:3c:5b:31:
                    ac:43:91:c4:87:47:0c:22:bd:60:bc:57:f3:6e:f0:
                    61:d2:0d:1f:9f:dd:dd:62:45:c5:8a:97:ad:95:67:
                    39:0b:14:a3:db:67:89:dc:cb:5a:8f:2b:31:f1:48:
                    33:d2:2f:6b:5f:41:50:77:d4:df:46:3b:1d:03:2a:
                    fd:46:19:11:f8:d8:fa:14:ad:cc:42:0b:9c:5c:b0:
                    20:39:e0:b4:c0:27:30:a8:8a:f9:84:b7:d9:99:a1:
                    5c:0f:43:f7:ac:04:f5:2d:65:34:a8:4d:2a:5a:81:
                    52:d9:0b:de:b7:15:d5:90:c1:15:5f:1d:d8:0d:8a:
                    bc:f9:04:35:68:95:11:9d:d8:b0:c3:3a:62:e1:80:
                    e3:ff:4b:8e:51:d5:5f:b4:91:76:54:8a:b1:a6:3d:
                    85:c0:d1:bf:bd:93:53:63:b5:e4:ac:cc:b1:62:94:
                    fb:ea:0b:51:32:c6:c7:d1:0f:60:d1:40:52:a9:c5:
                    54:ba:a1:b2:7d:11:9d:48:33:8a:bd:55:54:4a:82:
                    a8:3d:c5:b9:3f:d8:0a:22:1b:d9:a4:c5:f3:2b:41:
                    c0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:17:CE:46:71:36:3E:3E:C0:85:6F:59:76:CB:54:3C:A4:F4:43:B3
            X509v3 Authority Key Identifier:
                keyid:48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/483787B7037C3DA540ACD3A5B893D65DA468956A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030313a3a2f34382d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:4e:88:65:0a:98:ad:02:8a:89:6b:88:8f:f4:fb:15:51:d7:
         29:34:b5:17:04:7b:67:81:5f:b0:28:1c:83:21:cd:00:34:da:
         01:dd:d0:fd:5c:d3:7e:e2:fa:25:29:de:02:33:58:d2:99:c0:
         ff:94:5b:7b:fc:bb:ce:6c:80:ef:11:ef:62:50:37:84:09:7b:
         de:5d:e5:b2:f9:8b:3b:dc:87:90:62:41:6b:7b:93:72:ca:61:
         0c:a1:38:02:12:50:7d:7d:57:3a:7f:8f:9d:f1:7a:4e:e3:11:
         21:ae:92:2f:12:43:0b:78:d6:51:e8:d7:a9:c2:a0:3e:3e:ec:
         35:3b:32:2e:5a:03:f8:63:81:11:14:a2:2d:37:94:b2:9d:61:
         1d:f6:f3:db:23:6d:6a:88:67:ce:20:f9:5f:80:ae:80:15:33:
         8d:9f:a7:6d:2e:c0:22:6c:b7:15:35:86:08:cc:e8:6f:c6:df:
         b7:f2:f2:11:2b:b9:7f:e5:dd:19:b6:21:a3:8a:9b:6e:4f:69:
         23:62:b5:7c:8a:53:a0:9f:89:38:35:97:08:67:9f:82:64:48:
         a8:84:53:14:78:40:bb:70:ae:f5:16:83:d7:76:db:d2:e8:4c:
         56:1c:53:3c:27:c7:56:90:bc:12:80:10:8d:c3:69:b1:8d:3e:
         82:bf:78:b0
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUIo80OJ7l+UGie/toG1hy0sjzMFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgzNzg3QjcwMzdDM0RBNTQwQUNEM0E1Qjg5M0Q2NURB
NDY4OTU2QTAeFw0yMzA5MDExMTI0NTVaFw0yNDA4MzAxMTI5NTVaMDMxMTAvBgNV
BAMTKDA0MTdDRTQ2NzEzNjNFM0VDMDg1NkY1OTc2Q0I1NDNDQTRGNDQzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3poRKxOvVEG7PrmcfiOHi0UJ1
eTapOf/u07lka1DA+rXFHf9QJi0F1DxbMaxDkcSHRwwivWC8V/Nu8GHSDR+f3d1i
RcWKl62VZzkLFKPbZ4ncy1qPKzHxSDPSL2tfQVB31N9GOx0DKv1GGRH42PoUrcxC
C5xcsCA54LTAJzCoivmEt9mZoVwPQ/esBPUtZTSoTSpagVLZC963FdWQwRVfHdgN
irz5BDVolRGd2LDDOmLhgOP/S45R1V+0kXZUirGmPYXA0b+9k1NjteSszLFilPvq
C1EyxsfRD2DRQFKpxVS6obJ9EZ1IM4q9VVRKgqg9xbk/2AoiG9mkxfMrQcCPAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUBBfORnE2Pj7AhW9ZdstUPKT0Q7MwHwYDVR0j
BBgwFoAUSDeHtwN8PaVArNOluJPWXaRolWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMC80ODM3ODdCNzAzN0MzREE1NDBBQ0QzQTVCODkzRDY1REE0Njg5NTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4Mzc4N0I3MDM3QzNEQTU0
MEFDRDNBNUI4OTNENjVEQTQ2ODk1NkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzOTMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEb8iQATANBgkqhkiG9w0BAQsF
AAOCAQEARk6IZQqYrQKKiWuIj/T7FVHXKTS1FwR7Z4FfsCgcgyHNADTaAd3Q/VzT
fuL6JSneAjNY0pnA/5Rbe/y7zmyA7xHvYlA3hAl73l3lsvmLO9yHkGJBa3uTcsph
DKE4AhJQfX1XOn+PnfF6TuMRIa6SLxJDC3jWUejXqcKgPj7sNTsyLloD+GOBERSi
LTeUsp1hHfbz2yNtaohnziD5X4CugBUzjZ+nbS7AImy3FTWGCMzob8bft/LyESu5
f+XdGbYho4qbbk9pI2K1fIpToJ+JODWXCGefgmRIqIRTFHhAu3Cu9RaD13bb0uhM
VhxTPCfHVpC8EoAQjcNpsY0+gr94sA==
-----END CERTIFICATE-----