Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a3a2f33322d3332203d3e20323635323930.roa
File:                     323830343a326439343a3a2f33322d3332203d3e20323635323930.roa (raw, json)
Hash identifier:          VHGtXQJ8SN5lJTxPd1Du3wROkRLjBppoJphQK4MrG3Y=
Subject key identifier:   B3:50:D6:FA:B5:AD:79:42:FE:0F:5B:85:DC:DB:9B:B0:0D:65:EE:69
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       2D5B55F00A5546D877B07E130E0C9A0835F97CFB
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a3a2f33322d3332203d3e20323635323930.roa
Signing time:             Thu 04 Apr 2024 10:32:28 +0000
ROA not before:           Thu 04 Apr 2024 10:27:28 +0000
ROA not after:            Thu 03 Apr 2025 10:32:28 +0000
asID:                     265290
IP address blocks:        2804:2d94::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 20:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5b:55:f0:0a:55:46:d8:77:b0:7e:13:0e:0c:9a:08:35:f9:7c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Apr  4 10:27:28 2024 GMT
            Not After : Apr  3 10:32:28 2025 GMT
        Subject: CN=B350D6FAB5AD7942FE0F5B85DCDB9BB00D65EE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:10:ee:3b:62:56:21:98:e8:4e:4c:d9:d4:
                    62:66:88:6c:eb:17:ce:5c:a4:81:0d:60:1f:3e:32:
                    7e:45:23:a6:8b:47:5d:37:c7:3b:fe:31:c5:e6:d5:
                    2b:fb:85:51:84:3e:8e:92:e3:09:27:e9:43:57:41:
                    62:2c:99:54:ab:27:e7:22:3f:5f:86:aa:1c:b4:10:
                    b4:14:73:9a:2b:b6:9b:76:eb:e7:e7:13:f8:66:8a:
                    e7:9d:bc:7e:d0:4d:3e:d0:2a:0c:b4:42:35:5f:14:
                    9a:3c:e5:da:f9:a2:c2:ea:e8:d1:49:63:aa:5a:f6:
                    f2:13:e7:b4:d6:b4:ca:96:2d:0e:7b:46:27:da:c4:
                    f3:62:0c:1b:e8:eb:39:74:b9:2e:6e:b1:0b:63:af:
                    c0:dc:f0:bd:96:d4:a1:ea:ff:e0:14:7d:a0:9c:42:
                    18:ee:cb:37:61:f7:e4:0a:55:6a:de:e9:2a:67:89:
                    8b:1f:0a:96:77:46:be:db:01:33:c8:85:26:75:9f:
                    74:a5:83:72:3e:c2:d7:35:32:fb:01:16:6d:a6:27:
                    2a:23:9a:f6:3d:5f:2f:6b:1d:f8:3b:92:07:35:6c:
                    32:33:ba:62:7f:de:4c:91:99:94:c5:5d:21:a5:db:
                    59:d5:4c:f0:26:57:ee:38:bb:0f:52:57:76:a6:3c:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:50:D6:FA:B5:AD:79:42:FE:0F:5B:85:DC:DB:9B:B0:0D:65:EE:69
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a3a2f33322d3332203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d94::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:15:9f:0c:9b:6a:c0:0f:8a:17:e0:54:af:6c:aa:fb:c7:c9:
         3e:1a:03:61:46:63:47:8b:de:77:37:c4:4d:e1:45:5f:91:e3:
         8c:f6:27:b9:b5:78:6c:5f:46:a7:88:a0:53:9f:ff:10:d6:77:
         17:6b:a6:db:92:a5:25:0d:fb:14:7c:3f:e6:96:99:ed:83:f3:
         d3:21:19:dc:3d:39:f9:29:7e:86:ee:0e:b8:42:b2:cf:97:54:
         5e:d7:60:12:b0:1a:4b:d1:3c:14:20:44:ec:39:d5:c0:ef:a1:
         47:75:41:ab:63:f6:c8:ca:58:96:1e:75:ea:4d:95:1c:d3:3a:
         b3:3c:ae:f1:f4:16:0c:c4:fe:f2:7d:2d:83:54:b6:c8:2c:6c:
         42:3b:63:e5:be:7b:02:82:89:61:9b:23:e9:b1:5a:8d:cc:cc:
         65:79:cf:1b:a2:68:fc:a9:cc:d5:70:bc:33:8a:4c:d8:32:5c:
         27:b8:c3:df:75:9b:d6:3a:0a:8d:85:0a:27:b6:14:c6:d5:8d:
         28:5b:b7:28:6a:5d:3c:6b:ca:3c:ac:b3:ca:06:f6:0a:f3:a4:
         67:b6:29:b3:76:47:76:72:7a:c0:e7:ab:73:91:4e:84:1a:8d:
         d4:2c:53:c1:f6:7c:7b:53:ed:f2:9e:8a:ce:7c:d7:49:ba:e3:
         ef:cd:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----