Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323039303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a323039303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          yWNqN1bRGtI2XrRsli4QxVBnJB3s9v5ka1YkZV8WIsQ=
Subject key identifier:   33:FE:02:28:C3:0F:1C:1D:0A:AD:E6:34:32:1F:44:42:80:70:C1:60
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       4DCEB06B3E860FE92BA6C4E508C4837C58EAA202
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323039303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:23 +0000
ROA not before:           Thu 16 May 2024 11:33:23 +0000
ROA not after:            Thu 15 May 2025 11:38:23 +0000
asID:                     263338
IP address blocks:        2804:1494:2090::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ce:b0:6b:3e:86:0f:e9:2b:a6:c4:e5:08:c4:83:7c:58:ea:a2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:23 2024 GMT
            Not After : May 15 11:38:23 2025 GMT
        Subject: CN=33FE0228C30F1C1D0AADE634321F44428070C160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:23:f7:d6:13:7b:dd:52:b3:88:5f:49:99:
                    0d:d5:11:9b:ae:eb:1c:f6:de:4c:f5:6f:8c:20:7e:
                    32:74:51:24:56:7e:5c:67:aa:09:49:8d:2a:fd:36:
                    1a:78:52:5e:47:12:8a:89:60:8e:aa:71:ba:1c:ca:
                    04:30:38:2a:07:79:0d:ec:e4:75:c8:f7:9e:8a:eb:
                    a8:24:74:db:d8:eb:e3:ef:78:a8:37:85:26:34:35:
                    8d:97:68:b4:ae:5c:37:45:1b:1a:af:05:9a:7e:f6:
                    10:b3:85:7b:0a:bf:12:67:63:23:0f:45:94:b6:ef:
                    fd:f4:86:cd:db:d9:c0:d0:83:ea:bd:7d:e6:22:2f:
                    05:97:07:3d:46:e0:3a:d9:75:7f:64:da:b0:14:e3:
                    b7:f8:8c:a8:fa:cd:23:49:5d:89:23:9e:9e:94:c9:
                    eb:c7:f1:0b:1c:0e:e2:eb:93:e0:e2:b6:7e:a5:d6:
                    95:1c:f7:0b:6c:75:c3:0d:1d:13:8e:59:3a:ea:67:
                    f4:78:ad:20:f3:ce:bc:8c:22:e7:d3:8d:f5:ee:b6:
                    72:03:c7:34:f7:0b:3b:73:05:73:b8:f0:16:56:78:
                    dc:75:b8:35:d0:76:ab:85:46:06:33:c5:be:18:f5:
                    a8:4e:4a:d6:88:4c:79:a3:94:61:5f:cc:73:ad:f1:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FE:02:28:C3:0F:1C:1D:0A:AD:E6:34:32:1F:44:42:80:70:C1:60
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a323039303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:2090::/45

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:5b:bb:6e:c1:af:14:bb:cf:67:a3:b5:cc:cf:aa:29:1b:
         c8:55:ac:00:42:41:36:1e:e1:8d:68:77:f6:1b:06:de:09:ea:
         bb:96:25:2f:a8:1c:9c:d5:ae:5c:51:3d:ff:bb:b4:0c:ac:79:
         92:56:b0:b0:d7:f6:c0:42:f4:4c:d0:ed:3c:56:02:e7:08:c6:
         5b:18:77:90:83:bd:37:16:32:af:99:69:83:5e:9b:aa:c3:d9:
         b6:f0:bb:07:a8:d7:4d:58:01:cf:76:23:e4:06:33:fa:16:47:
         3a:b8:05:33:95:bd:5c:b2:5a:4e:f6:0c:b2:3c:a4:95:a5:1a:
         17:de:56:aa:09:43:b0:8c:e1:a6:da:af:e3:6e:4e:ff:2d:36:
         17:bd:4a:c6:8f:e6:52:dc:a8:be:24:92:05:d6:08:a4:8d:7d:
         81:7d:a1:5a:4e:c5:5c:1f:29:20:b8:7a:22:8c:1f:d6:ea:93:
         79:dd:74:22:28:26:d4:36:ad:45:e5:a8:c0:a2:55:96:df:e6:
         c3:a8:72:60:ea:64:e4:11:cc:8c:34:10:4d:41:de:20:d7:92:
         f3:9c:31:57:a9:c3:52:69:bd:b6:a2:8f:8f:25:6f:f7:8e:6f:
         a7:3b:88:f7:39:63:01:73:17:ea:60:c2:02:63:eb:6e:9b:c8:
         b6:33:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----