Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa
File:                     323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa (raw, json)
Hash identifier:          xNCEhIdurcu9e/U+o7oX8Ml12B5q9+HiDyqvUXr8uEs=
Subject key identifier:   71:07:20:05:1A:26:3B:95:62:17:2E:C7:6D:C1:52:75:BF:0D:BB:B0
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       38F468A9AF339EAAEA5EE2AC569B354D690714C2
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa
Signing time:             Tue 26 Jul 2022 16:00:00 +0000
ROA not before:           Tue 26 Jul 2022 15:55:00 +0000
ROA not after:            Tue 25 Jul 2023 16:00:00 +0000
asID:                     269502
IP address blocks:        2804:6598:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f4:68:a9:af:33:9e:aa:ea:5e:e2:ac:56:9b:35:4d:69:07:14:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Jul 26 15:55:00 2022 GMT
            Not After : Jul 25 16:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:a1:3f:31:01:8a:f3:27:ca:d2:f4:ac:e9:
                    bb:3c:6d:ed:e8:d0:84:fa:5e:fd:e0:bd:0f:df:01:
                    a1:93:b4:b0:6f:6d:b6:01:91:cd:65:18:7c:8f:02:
                    38:e5:ff:04:d8:23:ed:b9:b8:ee:29:61:f8:7b:98:
                    0c:bd:4a:4a:80:75:f0:91:f4:18:8f:3b:27:ba:8b:
                    78:ac:69:89:98:56:b9:9e:0d:08:e4:9a:a6:76:23:
                    07:e9:50:87:c3:27:d0:22:1f:e3:1d:22:27:02:20:
                    6a:04:a9:50:d1:d3:28:7d:8f:72:3c:18:de:06:9a:
                    f9:c6:5a:2b:d5:7c:bb:9b:86:6c:04:b0:ac:85:43:
                    72:cf:df:97:1f:ee:a8:d6:51:29:6a:e1:fc:f9:ad:
                    88:d6:1c:f9:90:b7:49:5d:85:9f:f7:b8:3d:d0:ea:
                    c7:36:68:2f:f8:c8:3e:bd:04:97:09:7e:0d:8e:fb:
                    14:db:0f:36:ee:cc:7e:cd:55:8a:6a:9a:6c:be:36:
                    cd:11:ce:3c:e7:17:58:60:e3:ec:d7:19:ad:8c:0e:
                    2e:05:fd:2b:c1:f0:07:ba:03:3e:3e:56:a4:90:9f:
                    69:bc:c0:7f:8e:36:0b:65:83:d6:e1:2c:e4:c2:c8:
                    19:5b:40:6f:8a:7d:77:f2:8a:25:91:e5:5f:b8:5c:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:07:20:05:1A:26:3B:95:62:17:2E:C7:6D:C1:52:75:BF:0D:BB:B0
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a343030303a3a2f33342d3334203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:60:26:b0:84:21:d3:52:a5:9d:64:4d:8b:3b:47:2c:5d:
         fa:eb:6d:b2:90:e9:7c:1d:ec:db:c3:fa:1f:04:34:7b:d4:39:
         d3:fc:0a:08:20:25:10:31:9c:14:67:44:1a:5c:8e:42:ae:38:
         61:11:47:2f:f1:2b:b2:fb:a3:62:51:39:60:45:b9:80:63:0c:
         26:a4:78:39:9f:d2:dc:17:76:d0:1a:bf:9b:9f:b3:9e:50:e2:
         f7:f5:2e:e1:03:1e:a5:9c:75:2b:7e:3c:73:e2:86:f1:56:ae:
         77:de:b5:31:c5:88:56:56:ad:9b:c5:ab:1d:a0:04:aa:97:95:
         2f:95:42:f8:52:62:18:80:71:52:cc:51:59:52:5e:6d:8a:34:
         7f:52:3a:e2:43:47:89:ce:74:a7:23:5c:75:fe:71:7a:ce:8f:
         ab:a2:f7:c2:72:a6:b3:5a:0d:d9:42:f2:23:a8:ec:b0:a9:73:
         d3:d3:32:d4:d6:a1:7d:a3:c6:8e:b2:81:4c:59:5b:8e:3f:8b:
         ce:57:ff:2d:f7:7d:83:be:67:01:d4:8d:c8:6d:72:45:ad:1f:
         67:40:6c:a4:1f:00:f9:c2:95:21:c7:ef:4e:e8:d0:a2:33:25:
         d5:af:5b:55:be:19:35:80:f0:77:fc:5c:f9:8e:60:16:fb:5e:
         39:ad:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----