Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33322d3332203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33322d3332203d3e20323639353032.roa (raw, json)
Hash identifier:          YcOIBsmyZrOrg/H7cw9B4GEiqajvq8AfKiiqV3vtMnY=
Subject key identifier:   35:DD:8F:62:25:43:65:58:24:68:EF:B5:7B:1A:45:53:C8:6B:45:54
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       1F3D96442EC7E091F7D21CDB7D204FB86D901741
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33322d3332203d3e20323639353032.roa
Signing time:             Mon 25 Jul 2022 21:00:00 +0000
ROA not before:           Mon 25 Jul 2022 20:55:00 +0000
ROA not after:            Mon 24 Jul 2023 21:00:00 +0000
asID:                     269502
IP address blocks:        2804:6598::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3d:96:44:2e:c7:e0:91:f7:d2:1c:db:7d:20:4f:b8:6d:90:17:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Jul 25 20:55:00 2022 GMT
            Not After : Jul 24 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:ce:5a:d7:98:8c:67:fb:ce:41:e9:4d:5c:
                    80:91:87:d9:33:0e:4f:db:df:8a:66:93:fc:10:f2:
                    ea:a4:9b:d1:e4:22:d4:51:bc:4a:cd:b0:2a:45:c5:
                    21:15:9d:73:6d:31:8c:25:6f:81:46:a9:c2:86:f0:
                    62:72:12:79:2c:79:19:57:c5:8e:46:c7:d8:ce:31:
                    0b:a8:63:a7:eb:27:1c:40:e2:05:ec:75:f0:97:9c:
                    b8:e6:07:0e:a5:2e:c4:db:5b:5f:62:cc:a0:60:63:
                    72:2a:0d:97:20:ab:07:2d:89:b7:a2:3f:7b:e3:22:
                    1b:ed:8a:82:04:3c:1d:e1:24:97:27:3d:a5:58:19:
                    91:c3:f5:c8:b3:45:0c:19:29:fb:b4:fb:4b:cc:f1:
                    71:c1:8a:6e:de:bc:63:9e:3d:7f:dd:9d:cc:58:c3:
                    47:12:a4:3a:bc:45:cd:9f:60:0d:02:eb:68:88:9c:
                    de:7a:1e:83:8d:5f:60:a7:b0:50:0e:e8:d0:c3:10:
                    2e:b3:65:65:c1:36:8f:7d:63:10:3b:32:bd:7e:da:
                    c5:8c:1d:75:a6:38:53:10:ee:d3:73:d4:3a:83:8f:
                    f9:33:94:0e:18:40:42:12:aa:55:94:2c:54:16:e4:
                    fc:aa:28:1a:97:86:23:33:e9:56:14:4e:52:6d:31:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:8F:62:25:43:65:58:24:68:EF:B5:7B:1A:45:53:C8:6B:45:54
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33322d3332203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:99:ea:71:00:44:86:5d:ab:4a:97:68:e7:47:18:ec:e1:
         2b:e8:74:4b:1e:95:4e:73:35:6b:62:7d:66:8e:2d:24:cc:f7:
         76:9d:83:bf:3b:c1:cf:30:b0:7c:69:75:39:3a:9b:2d:5b:26:
         92:d5:1a:fe:31:75:db:92:32:59:27:3b:fe:c3:9c:98:72:a1:
         2d:7c:a4:ef:4e:29:bd:fc:97:e3:ff:d6:3a:d8:70:e6:87:2b:
         c1:ef:61:66:28:c4:3e:7a:93:ea:6b:29:95:e5:d9:3d:71:dd:
         d2:ef:15:32:13:57:01:46:6e:9a:21:f8:48:c0:a8:9b:dd:6a:
         de:cc:a3:72:f6:8f:1a:6b:c2:16:7d:da:61:5b:1c:17:d3:c7:
         34:94:2f:a1:2a:f8:f5:76:80:c4:6f:88:e6:37:b7:31:af:95:
         69:21:e6:ca:34:41:e4:fc:23:da:40:d9:c4:a7:cb:a1:84:8d:
         df:0a:79:89:98:6f:90:7e:de:de:75:90:50:a6:47:3d:12:0f:
         ad:a7:57:07:3c:2d:06:0b:5e:28:00:af:5a:bd:d5:73:a0:70:
         a2:62:22:7f:d1:6f:95:ca:0b:a6:3d:cd:d8:47:77:9c:9b:32:
         0b:3f:91:81:c9:01:f0:35:69:f8:46:73:eb:7f:74:78:93:1b:
         25:09:62:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----