Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3332203d3e20323634313935.roa
File:                     323830343a323430303a3a2f33322d3332203d3e20323634313935.roa (raw, json)
Hash identifier:          zd+YjwTyU73duMpla+IOMVP8EXsfjXR3ffh7fWxapao=
Subject key identifier:   3E:86:22:D4:2E:5C:59:4D:F3:A5:F6:E3:E3:A8:0A:87:F7:A0:20:BD
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       6AF6A511DDD3F8630C025212E95C8CCCACCF771D
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3332203d3e20323634313935.roa
Signing time:             Mon 10 Jul 2023 23:05:53 +0000
ROA not before:           Mon 10 Jul 2023 23:00:53 +0000
ROA not after:            Mon 08 Jul 2024 23:05:53 +0000
asID:                     264195
IP address blocks:        2804:2400::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f6:a5:11:dd:d3:f8:63:0c:02:52:12:e9:5c:8c:cc:ac:cf:77:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 10 23:00:53 2023 GMT
            Not After : Jul  8 23:05:53 2024 GMT
        Subject: CN=3E8622D42E5C594DF3A5F6E3E3A80A87F7A020BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:87:68:e5:67:ba:4d:60:e0:9d:c0:1a:2e:
                    d8:06:e5:3e:ef:5d:9e:ef:7a:8b:02:6a:75:97:8d:
                    f8:73:11:e6:c5:8b:db:8e:a9:f0:3e:eb:78:56:38:
                    6e:27:bb:4c:b9:b8:15:fb:57:9c:a1:6d:ec:e5:57:
                    68:6e:29:01:82:2c:8c:24:0a:72:e9:b5:98:96:1e:
                    44:7f:7b:11:6b:cf:30:89:d3:72:29:36:f3:98:76:
                    2f:0c:c2:09:f2:5a:9f:67:c9:a6:1e:a2:37:dc:05:
                    8e:a8:67:b6:5b:ac:82:a5:19:39:06:ad:fe:44:ba:
                    04:eb:b5:db:0c:b3:29:54:2a:d8:47:45:64:d3:e1:
                    3c:1b:02:d4:0c:c3:d1:99:3a:11:6e:50:3c:1f:8e:
                    63:f9:93:41:79:6d:f5:25:1f:0f:51:e0:59:62:84:
                    c7:2a:38:08:9d:ab:b8:30:07:11:09:76:25:44:a6:
                    01:e8:97:30:6a:4a:79:7e:d9:08:4d:2e:9a:34:5e:
                    e8:c5:fb:11:11:33:ea:c2:33:d0:9f:03:c2:b3:f4:
                    3c:b7:c5:e8:a0:3b:c4:bf:43:11:d9:fd:97:2a:d4:
                    1a:e2:5a:55:37:9f:b8:db:92:ae:80:f5:2a:3a:b3:
                    6d:6e:48:f1:8e:c8:49:70:f3:09:bf:27:10:8f:5f:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:86:22:D4:2E:5C:59:4D:F3:A5:F6:E3:E3:A8:0A:87:F7:A0:20:BD
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d3332203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:f5:2d:17:05:ee:31:40:b0:0b:74:5e:b2:09:a8:d2:06:
         d8:66:8a:60:86:e0:56:a1:0c:4c:18:c3:de:c2:df:cd:f8:3c:
         06:11:fd:c0:d5:a3:fb:56:4f:9f:69:7b:52:00:ef:18:f8:af:
         26:c4:4a:e3:da:59:31:3c:b8:72:8b:a2:64:ba:08:60:92:36:
         dc:3d:79:40:72:0e:8a:f1:71:54:99:94:f1:39:48:35:81:f9:
         18:d5:04:61:86:6b:0b:55:80:f6:04:c7:ec:d5:8e:28:62:5b:
         3c:56:bf:38:7a:46:4b:a1:f6:37:f0:db:3f:bd:2a:46:28:37:
         65:2e:af:ce:63:4f:f1:8b:d7:37:76:c1:b3:21:6a:e0:27:16:
         2c:68:52:c6:3c:32:98:e7:58:14:f1:d6:10:3e:5e:b1:7b:a6:
         44:93:ef:b3:3d:27:ba:48:81:d1:9e:6a:bc:1d:2c:2d:89:6b:
         8d:60:65:63:1c:54:8d:28:a0:22:11:fe:c1:92:c0:13:d5:65:
         a5:84:c3:64:23:e7:7a:ab:cc:33:f6:0d:25:a6:83:d5:e5:94:
         1e:f4:2d:d8:93:f1:d4:a7:1c:56:5b:78:87:f9:ff:3f:46:9d:
         88:5b:7b:1d:fe:94:50:79:b3:ce:ce:a7:89:42:c4:a0:1c:00:
         23:6c:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----