Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3231362e302f32322d3234203d3e20323632343230.roa
File:                     3138392e3131332e3231362e302f32322d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          iNYKJJZA/sRzcfpGew1FBsXbchyJJQ4HpCi8cXsQVFs=
Subject key identifier:   AF:79:63:4E:73:01:BA:61:F6:E2:B6:13:EA:0A:03:8E:70:52:8E:4F
Certificate issuer:       /CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
Certificate serial:       3312D2CB66034B248B6A54A9613A6ED98A2250C9
Authority key identifier: 0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3231362e302f32322d3234203d3e20323632343230.roa
Signing time:             Fri 12 May 2023 20:00:42 +0000
ROA not before:           Fri 12 May 2023 19:55:42 +0000
ROA not after:            Fri 10 May 2024 20:00:42 +0000
asID:                     262420
IP address blocks:        189.113.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:12:d2:cb:66:03:4b:24:8b:6a:54:a9:61:3a:6e:d9:8a:22:50:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4DF3AF032C850A61C6DC7737B315F955F57E71
        Validity
            Not Before: May 12 19:55:42 2023 GMT
            Not After : May 10 20:00:42 2024 GMT
        Subject: CN=AF79634E7301BA61F6E2B613EA0A038E70528E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:1c:d3:a8:fc:41:b0:d0:9b:09:aa:72:f8:
                    1b:d7:90:ae:0b:c5:ca:7e:7b:c0:4e:47:b5:0a:39:
                    82:b9:54:54:7d:0c:8e:b2:ae:16:c7:f6:3f:7e:69:
                    0d:37:ea:39:1b:e4:e8:e7:5d:c8:90:63:18:c6:2b:
                    38:d1:70:9e:e2:ec:6c:0b:39:9c:b2:94:25:64:a7:
                    89:62:5f:19:a3:00:dd:63:ac:ab:be:15:cd:98:49:
                    7c:31:6d:92:13:b2:96:77:5b:3f:d3:c4:81:06:7e:
                    5c:08:21:3d:e4:e9:ae:c0:b2:91:86:21:0d:2b:da:
                    fe:d1:47:77:29:73:7e:c5:b1:a0:9b:af:55:c2:2a:
                    59:68:84:8b:3c:d4:37:09:a9:b0:4e:54:e2:e0:46:
                    aa:c9:e3:d9:73:4a:c0:51:94:80:00:13:66:74:58:
                    e7:f4:6d:88:b8:3f:d6:4c:9d:23:84:de:e2:9b:79:
                    ff:92:a6:84:a2:36:22:13:bb:32:0c:10:05:23:ec:
                    5b:c9:77:f0:af:cc:17:55:2e:7b:99:2c:52:b4:d2:
                    b6:a4:f0:21:db:34:db:ef:13:bd:a8:d6:39:c8:1c:
                    d0:e8:0c:6b:74:cc:5c:48:15:7f:1d:e6:63:10:d0:
                    f5:22:09:55:c7:59:b1:b2:2b:f2:17:b6:18:51:3a:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:63:4E:73:01:BA:61:F6:E2:B6:13:EA:0A:03:8E:70:52:8E:4F
            X509v3 Authority Key Identifier:
                keyid:0B:4D:F3:AF:03:2C:85:0A:61:C6:DC:77:37:B3:15:F9:55:F5:7E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B4DF3AF032C850A61C6DC7737B315F955F57E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3231362e302f32322d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:07:5c:8d:ec:8d:48:0b:88:a3:aa:5e:d9:5c:04:a3:6d:
         94:aa:ee:98:c9:7f:d2:51:9c:bd:d6:f0:f1:51:22:ae:bf:33:
         37:dd:3c:1c:d1:e9:21:e5:54:9f:42:ae:ba:cb:96:75:8d:33:
         9b:e1:01:ac:92:df:7f:90:0b:d9:f6:47:6e:6e:01:b2:9e:2e:
         58:f8:20:82:4d:57:78:6f:74:7e:e3:f8:9b:a5:ea:a1:49:d0:
         8f:d6:d8:d1:34:66:67:b2:01:cc:8a:35:9d:a5:d2:82:f0:55:
         53:b5:cf:a3:dc:26:50:e6:3c:bb:86:d8:a6:5f:65:57:10:b0:
         4c:8e:ce:70:a4:3a:23:51:2b:e9:f2:36:9f:64:22:43:ab:a0:
         31:4a:0f:63:af:ec:d2:fe:7e:e9:f0:e5:7f:f7:22:fa:b2:9f:
         71:f2:0d:6b:70:e6:af:74:8f:3b:3a:79:97:f3:40:46:10:67:
         9a:3c:c9:d6:23:d7:77:49:dc:cb:0f:8e:78:12:a8:09:56:fa:
         99:76:08:0b:df:de:22:a8:7f:5c:ea:49:59:42:dd:24:34:aa:
         e6:cf:5c:2e:1d:ff:27:8d:71:a2:88:08:c8:68:09:c9:ad:7a:
         dd:13:18:d7:ea:fc:20:d1:17:53:1b:86:5f:5e:a0:a1:a1:1c:
         8c:43:b9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----