Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323038383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323038383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          vWbdStmTVeomcjNN06HfXbw8AU+B/rg/7BoZBjJw5LE=
Subject key identifier:   82:11:6A:7B:21:BE:5F:75:3E:60:E3:82:63:4F:54:D3:49:3B:EF:8E
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       1C009DD67A2B58A637086A0CE1D0F9D5AC0CF856
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323038383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:20 +0000
ROA not before:           Thu 16 May 2024 11:33:20 +0000
ROA not after:            Thu 15 May 2025 11:38:20 +0000
asID:                     263338
IP address blocks:        2804:1494:2088::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:00:9d:d6:7a:2b:58:a6:37:08:6a:0c:e1:d0:f9:d5:ac:0c:f8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:20 2024 GMT
            Not After : May 15 11:38:20 2025 GMT
        Subject: CN=82116A7B21BE5F753E60E382634F54D3493BEF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:84:f4:76:24:7c:9c:13:21:e0:d6:2f:fe:
                    a2:b7:9f:29:33:74:2e:41:53:f5:c0:83:ef:c2:1d:
                    38:fa:16:7f:33:16:02:72:c0:c3:3c:3b:38:62:b2:
                    40:c0:df:3e:7a:bf:b2:5d:03:61:ef:12:92:de:e5:
                    74:86:7b:e8:a6:ff:e5:19:2c:aa:ed:41:60:7d:c3:
                    a5:18:83:47:fe:f1:d4:d8:e7:12:c1:5f:2d:8b:2c:
                    d4:16:df:01:9c:1a:f4:cf:a9:f3:25:ce:d7:ff:05:
                    47:82:56:db:52:1a:22:6e:df:8c:0b:d9:82:ec:aa:
                    75:ab:98:71:a4:4d:26:75:e0:f2:cf:ca:45:4c:56:
                    f2:87:4a:be:5a:93:37:9a:18:31:21:34:32:76:b0:
                    f2:df:b4:d4:fd:a7:bc:b1:0d:c0:9a:69:75:b3:1c:
                    d7:db:6d:e1:87:ca:59:49:8d:37:5b:91:85:4d:9d:
                    4b:f9:5d:2e:42:d1:01:73:47:d2:d2:9b:09:c2:8d:
                    01:9d:73:3a:49:dc:0e:48:6e:8b:38:60:cd:b9:2f:
                    f6:9c:d7:92:af:9f:57:b3:70:fd:19:f3:7a:e9:64:
                    02:0d:d4:78:fe:44:f4:1f:2f:f1:40:d8:03:70:1b:
                    c1:e2:45:10:e7:70:07:a4:32:5e:46:10:3b:a6:53:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:11:6A:7B:21:BE:5F:75:3E:60:E3:82:63:4F:54:D3:49:3B:EF:8E
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323038383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:2088::/45

    Signature Algorithm: sha256WithRSAEncryption
         80:32:f2:2f:4c:0c:56:ba:02:85:8a:55:e3:00:11:eb:52:dc:
         0b:a8:73:5a:f8:0e:4b:9d:f5:06:22:c5:d3:5b:44:8e:72:8e:
         7d:ab:0b:5e:5a:17:ab:3e:c5:7e:c9:b4:a6:0d:b8:91:7a:f7:
         48:ec:7f:46:56:1b:8a:f3:32:47:58:ff:dd:cd:86:9a:04:76:
         c9:43:e9:c4:bf:dd:f4:f7:9e:23:fe:ad:e3:0a:25:76:74:dc:
         63:4f:0e:4e:69:6b:49:db:3a:f7:b1:cc:0a:a6:af:f6:0d:a3:
         9b:7f:4b:60:9c:f9:71:e5:f7:47:4b:2b:03:07:76:40:15:01:
         97:0d:6a:d0:e7:e6:c6:0c:76:4a:73:8f:b4:d1:22:e6:47:d9:
         9c:fa:2f:52:4c:48:1a:d5:75:a6:70:0c:6e:2f:df:0c:27:8f:
         e3:ed:06:07:4a:6d:dd:8e:91:83:15:e0:87:52:30:1e:f9:76:
         c9:5a:f7:fd:98:77:25:03:46:a4:ba:3d:9c:f3:ed:59:98:45:
         22:4a:2c:3a:85:e2:f5:95:3a:ec:87:97:6d:3f:b0:03:d4:9b:
         a9:d8:ca:09:93:e5:d3:e2:bd:6e:ea:22:17:a3:ef:95:0e:a5:
         45:d3:ce:9a:be:c7:9f:1b:1e:4e:e6:8d:ee:f7:a1:57:be:ff:
         3d:39:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----