Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030343a3a2f34362d3436203d3e20323730363834.roa
File:                     323830343a366663383a393030343a3a2f34362d3436203d3e20323730363834.roa (raw, json)
Hash identifier:          g9RNUheVYv+odtk9RRh/hnrsuP2Gu5d4RPS6PkhpkXU=
Subject key identifier:   B8:38:BF:23:71:31:8D:8B:EA:7D:DE:94:88:6F:B0:2F:A3:F9:EC:6F
Certificate issuer:       /CN=483787B7037C3DA540ACD3A5B893D65DA468956A
Certificate serial:       377B5306DC497FEAAC76DCCC41FBCC7A70AA1174
Authority key identifier: 48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030343a3a2f34362d3436203d3e20323730363834.roa
Signing time:             Fri 01 Sep 2023 11:29:53 +0000
ROA not before:           Fri 01 Sep 2023 11:24:53 +0000
ROA not after:            Fri 30 Aug 2024 11:29:53 +0000
asID:                     270684
IP address blocks:        2804:6fc8:9004::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7b:53:06:dc:49:7f:ea:ac:76:dc:cc:41:fb:cc:7a:70:aa:11:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483787B7037C3DA540ACD3A5B893D65DA468956A
        Validity
            Not Before: Sep  1 11:24:53 2023 GMT
            Not After : Aug 30 11:29:53 2024 GMT
        Subject: CN=B838BF2371318D8BEA7DDE94886FB02FA3F9EC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:98:c3:6a:99:2c:0d:c0:c3:14:af:0f:03:
                    1b:a0:3d:94:2f:f4:9e:3c:a7:aa:2e:c6:12:8d:57:
                    23:db:6d:2e:43:13:8b:85:32:0b:39:67:5b:4b:b6:
                    37:b4:86:64:ec:cb:93:37:cd:cc:fd:0c:c0:36:ce:
                    37:b8:03:b2:c5:23:64:9e:89:40:53:d4:87:62:02:
                    3f:d9:e3:2d:e1:ad:7c:32:50:bf:ca:a3:c4:79:b3:
                    0e:f6:f8:47:5f:2d:7a:ff:ff:fa:aa:df:ad:ff:6e:
                    7c:6f:4a:44:3d:cd:06:00:3c:08:26:93:1f:11:97:
                    3f:69:a4:c3:fa:96:f1:4a:56:61:f8:a1:59:62:e8:
                    06:4c:b1:7f:79:a2:1d:e5:86:48:d1:80:56:1a:10:
                    78:f9:8d:a1:7d:65:50:f2:09:04:4e:65:0a:3a:c6:
                    e0:3d:7f:6e:12:af:88:d5:41:30:b6:ce:78:8f:2a:
                    59:26:5b:cb:f2:f4:2f:89:bd:59:a3:ba:cf:a1:7e:
                    f3:da:4c:4b:27:9e:34:09:e0:a9:a9:11:81:da:e1:
                    6e:41:53:83:7b:84:bb:3e:8b:08:02:96:59:97:5b:
                    92:7f:e7:ba:fa:90:30:7c:68:88:72:48:ac:1c:e4:
                    f9:f3:8a:8a:f5:54:60:c0:18:88:2a:0e:86:ae:4c:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:BF:23:71:31:8D:8B:EA:7D:DE:94:88:6F:B0:2F:A3:F9:EC:6F
            X509v3 Authority Key Identifier:
                keyid:48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/483787B7037C3DA540ACD3A5B893D65DA468956A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a393030343a3a2f34362d3436203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:9004::/46

    Signature Algorithm: sha256WithRSAEncryption
         2b:98:92:e3:c7:43:e5:c5:ca:40:01:e6:b9:10:47:90:fd:98:
         75:40:be:cf:65:a4:f7:42:25:13:00:97:f4:b3:a1:25:8b:a9:
         1c:1a:6d:8b:4b:98:17:33:91:29:8a:7b:3c:6c:19:45:14:d6:
         ca:94:a7:80:76:dd:c3:01:f9:73:a4:46:43:d4:5c:50:a7:71:
         27:c1:b0:2a:ea:54:48:75:4e:eb:53:2a:a8:8d:89:ef:50:7a:
         fe:6c:9e:66:a8:f7:7b:fa:5a:54:4a:87:1e:36:b7:24:54:c6:
         74:40:65:e3:59:2d:8f:1e:a4:2a:31:43:11:5e:39:86:c4:b2:
         89:79:25:68:33:26:47:25:ad:fe:e4:41:cb:12:bb:82:7a:4d:
         c4:f0:37:e7:5a:90:38:66:fa:ff:3c:9c:0e:56:6a:85:7e:96:
         28:3f:af:02:a7:29:e1:50:47:26:85:c7:a1:76:74:32:8a:8f:
         ce:ad:5a:8c:1f:cc:91:6c:5c:52:ee:f1:03:1e:a7:0f:b3:b6:
         ac:ed:4a:16:d1:0d:73:27:b0:06:c8:32:6b:ff:c7:d5:69:39:
         e4:5b:e7:18:c0:e1:bb:35:a3:5f:f2:32:79:d6:d8:bf:f3:31:
         b4:80:6b:38:53:c7:c4:bd:7f:98:2e:f2:0c:74:18:01:ab:5f:
         39:84:f6:03
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUN3tTBtxJf+qsdtzMQfvMenCqEXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgzNzg3QjcwMzdDM0RBNTQwQUNEM0E1Qjg5M0Q2NURB
NDY4OTU2QTAeFw0yMzA5MDExMTI0NTNaFw0yNDA4MzAxMTI5NTNaMDMxMTAvBgNV
BAMTKEI4MzhCRjIzNzEzMThEOEJFQTdEREU5NDg4NkZCMDJGQTNGOUVDNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPZjDapksDcDDFK8PAxugPZQv
9J48p6ouxhKNVyPbbS5DE4uFMgs5Z1tLtje0hmTsy5M3zcz9DMA2zje4A7LFI2Se
iUBT1IdiAj/Z4y3hrXwyUL/Ko8R5sw72+EdfLXr///qq363/bnxvSkQ9zQYAPAgm
kx8Rlz9ppMP6lvFKVmH4oVli6AZMsX95oh3lhkjRgFYaEHj5jaF9ZVDyCQROZQo6
xuA9f24Sr4jVQTC2zniPKlkmW8vy9C+JvVmjus+hfvPaTEsnnjQJ4KmpEYHa4W5B
U4N7hLs+iwgCllmXW5J/57r6kDB8aIhySKwc5Pnzior1VGDAGIgqDoauTNxtAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUuDi/I3ExjYvqfd6UiG+wL6P57G8wHwYDVR0j
BBgwFoAUSDeHtwN8PaVArNOluJPWXaRolWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlhcTR1VFFLUXpMZHV5eHRSdXFucGZUMlF3QndOMmM1b2NMUXBZQnpp
NnYvMC80ODM3ODdCNzAzN0MzREE1NDBBQ0QzQTVCODkzRDY1REE0Njg5NTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4Mzc4N0I3MDM3QzNEQTU0
MEFDRDNBNUI4OTNENjVEQTQ2ODk1NkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZYXE0dVRRS1F6TGR1eXh0UnVxbnBmVDJRd0J3TjJjNW9jTFFwWUJ6aTZ2LzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzOTMwMzAzNDNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzczMDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEb8iQBDANBgkqhkiG9w0BAQsF
AAOCAQEAK5iS48dD5cXKQAHmuRBHkP2YdUC+z2Wk90IlEwCX9LOhJYupHBpti0uY
FzORKYp7PGwZRRTWypSngHbdwwH5c6RGQ9RcUKdxJ8GwKupUSHVO61MqqI2J71B6
/myeZqj3e/paVEqHHja3JFTGdEBl41ktjx6kKjFDEV45hsSyiXklaDMmRyWt/uRB
yxK7gnpNxPA351qQOGb6/zycDlZqhX6WKD+vAqcp4VBHJoXHoXZ0MoqPzq1ajB/M
kWxcUu7xAx6nD7O2rO1KFtENcyewBsgya//H1Wk55FvnGMDhuzWjX/IyedbYv/Mx
tIBrOFPHxL1/mC7yDHQYAatfOYT2Aw==
-----END CERTIFICATE-----