Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa
File:                     323830343a363436343a3a2f33322d3438203d3e20323639343235.roa (raw, json)
Hash identifier:          DI4ujpmk4ZlmVLhxWi+xB6z1jgKuegiL4hfTZ5fbftY=
Subject key identifier:   EC:E0:31:CB:11:3A:B3:E2:C1:F2:6E:69:45:D2:22:97:1C:19:D9:4B
Certificate issuer:       /CN=9B51B15273976450E1F7907A02174B498E4E9C95
Certificate serial:       1E4C89E7322EE1E2A29B0F8490FA5860F132F125
Authority key identifier: 9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa
Signing time:             Fri 12 Apr 2024 21:15:01 +0000
ROA not before:           Fri 12 Apr 2024 21:10:01 +0000
ROA not after:            Fri 11 Apr 2025 21:15:01 +0000
asID:                     269425
IP address blocks:        2804:6464::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 11 Apr 2025 21:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4c:89:e7:32:2e:e1:e2:a2:9b:0f:84:90:fa:58:60:f1:32:f1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B51B15273976450E1F7907A02174B498E4E9C95
        Validity
            Not Before: Apr 12 21:10:01 2024 GMT
            Not After : Apr 11 21:15:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:f9:64:88:5a:17:75:f9:d3:3c:0d:cb:57:
                    0f:91:9e:68:50:b9:5e:5b:06:62:ce:a2:35:8e:af:
                    6b:ca:0d:cf:4a:9e:9b:c3:b9:d9:1b:b8:32:f0:a3:
                    60:65:bb:bd:f7:51:73:c3:03:04:90:fd:f0:81:bb:
                    d0:ae:0b:cd:ed:86:fe:cd:b1:db:6e:80:41:1f:b2:
                    cb:a3:97:23:0f:4a:38:83:2b:4a:ea:a1:9b:1d:65:
                    51:20:7b:64:7c:95:94:a1:27:50:a4:66:e9:df:a9:
                    54:65:37:5f:96:93:5f:8f:8e:f6:32:ea:ca:00:e4:
                    35:80:05:77:14:8a:ba:b0:3e:86:5e:e8:b6:c4:a6:
                    71:f3:35:ab:d5:a0:60:f7:68:8c:85:1a:b1:55:20:
                    dd:35:ad:0e:f7:d4:24:52:11:b9:aa:3b:6e:04:31:
                    43:df:20:b2:f7:be:cd:06:0f:13:f0:b0:b4:c2:1f:
                    4a:6b:ab:5f:3c:7f:aa:9f:1b:0c:43:d8:b0:47:41:
                    a4:13:29:be:01:da:b6:55:10:3d:57:50:88:8f:d2:
                    2b:80:88:d8:b1:da:97:99:45:7d:66:06:6d:88:83:
                    8f:8e:3c:9f:df:3f:0e:53:65:8e:be:30:2d:db:27:
                    4e:11:80:28:99:ba:59:00:70:8e:4e:22:1f:5b:fd:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E0:31:CB:11:3A:B3:E2:C1:F2:6E:69:45:D2:22:97:1C:19:D9:4B
            X509v3 Authority Key Identifier:
                keyid:9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/9B51B15273976450E1F7907A02174B498E4E9C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:29:2c:8e:14:3f:7b:50:58:17:0a:7d:10:a2:9c:f5:91:
         66:da:e3:a3:4e:b9:a5:4b:c5:b5:a7:30:6b:fd:59:9e:1a:f5:
         dd:52:97:e1:f1:92:d2:a2:e6:63:50:34:8a:24:88:f6:2c:d9:
         96:14:e9:cb:a8:a3:45:96:ae:10:d1:95:3d:22:be:7e:d7:49:
         97:ad:ed:3e:2e:37:71:c0:91:c1:d9:f8:5f:d7:88:09:1d:d2:
         e5:69:8e:a4:06:0f:75:f3:ec:0f:37:b4:c8:2a:56:f4:ac:c7:
         58:6a:a6:72:b1:2f:c8:ac:53:47:dd:08:92:45:ef:e9:c7:f5:
         1d:f0:6b:34:47:f4:77:a3:7f:70:7f:fe:78:6c:67:47:44:a5:
         54:66:f8:5c:71:80:5d:f3:76:a4:8e:63:d7:1d:f1:b9:3c:fa:
         64:dd:38:82:5c:cb:5e:0d:0d:b4:49:ae:88:46:96:ed:b9:5f:
         ef:18:90:24:1a:8e:89:40:e8:9a:7b:9e:a0:24:79:b5:19:2d:
         a2:26:d2:0c:e2:35:00:be:0c:21:98:c8:11:c6:6f:da:b2:b9:
         80:0b:12:c3:72:be:2b:64:be:ea:7c:be:26:f4:0a:c3:aa:d4:
         73:e2:aa:fd:63:3a:cc:1b:d3:a4:94:35:26:a6:ac:b9:04:74:
         fa:81:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----