Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a343030303a3a2f33342d3334203d3e20323634333539.roa
File:                     323830343a316434633a343030303a3a2f33342d3334203d3e20323634333539.roa (raw, json)
Hash identifier:          PWJFF3Jj8q4V7N1jdSyCCROEt8IVMYn955PA9/B1vEo=
Subject key identifier:   52:B9:D0:75:58:A0:3B:64:E2:AD:9E:6C:7A:0E:D6:1E:55:6A:A6:19
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       40477C348C1C1413AED14DE82C3CB3B22BDE8916
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a343030303a3a2f33342d3334203d3e20323634333539.roa
Signing time:             Tue 27 Aug 2024 17:57:11 +0000
ROA not before:           Tue 27 Aug 2024 17:52:11 +0000
ROA not after:            Tue 26 Aug 2025 17:57:11 +0000
asID:                     264359
IP address blocks:        2804:1d4c:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:47:7c:34:8c:1c:14:13:ae:d1:4d:e8:2c:3c:b3:b2:2b:de:89:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 27 17:52:11 2024 GMT
            Not After : Aug 26 17:57:11 2025 GMT
        Subject: CN=52B9D07558A03B64E2AD9E6C7A0ED61E556AA619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:f0:c2:e5:4f:3a:0e:14:df:20:eb:40:b2:
                    35:e5:2f:e6:a0:b6:7f:42:68:9b:11:38:90:b4:12:
                    b7:37:28:5d:5e:0a:a9:dd:ff:e8:0b:df:54:23:54:
                    df:87:8d:df:41:38:05:e3:db:0b:d8:5b:46:2b:ab:
                    f4:b1:81:e0:83:fb:3e:94:0c:82:4e:93:93:b9:bb:
                    ca:e4:12:6d:bd:df:2c:1b:c8:ff:36:4d:f4:da:89:
                    23:1a:91:20:4a:24:aa:da:49:9b:b4:01:41:6b:b4:
                    4d:72:83:b8:d0:26:64:fc:b4:9b:8c:8e:60:29:91:
                    9b:97:b0:2d:f6:79:a6:c8:5e:41:eb:3b:ec:32:21:
                    c3:8f:34:8c:a0:e7:66:98:b5:77:e7:ac:1c:ac:59:
                    01:c5:07:05:cd:2b:f5:1f:fc:c0:02:05:91:1b:aa:
                    5c:ad:24:41:2b:38:d0:5a:d0:ab:86:74:8e:63:fb:
                    d5:14:cb:21:61:10:fe:a4:5f:19:0f:07:18:7f:e2:
                    8f:b0:fa:1f:27:33:5c:b4:83:4b:62:4c:32:d1:e1:
                    78:44:84:e7:7f:05:7e:93:56:24:5b:c5:64:12:1f:
                    b9:4a:e6:c2:75:48:ac:a3:6a:de:82:70:19:bb:47:
                    ab:49:5d:58:af:80:bb:c5:e1:75:e4:e3:73:b0:3b:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B9:D0:75:58:A0:3B:64:E2:AD:9E:6C:7A:0E:D6:1E:55:6A:A6:19
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a343030303a3a2f33342d3334203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:e5:60:77:d3:f4:b1:e7:96:38:39:d4:41:e8:3d:b8:0b:38:
         4e:b0:3e:3f:2f:65:16:a1:5e:0b:9b:86:32:f0:20:a1:35:ab:
         b0:99:a5:19:14:52:96:86:7d:eb:e3:45:0e:07:68:97:c4:03:
         f1:a5:58:ac:07:e2:c9:62:9c:d9:52:17:7d:be:80:65:ba:73:
         bd:b7:b7:71:7b:43:3d:e1:a5:98:54:6b:ef:4a:f7:4e:0c:af:
         d3:6a:a5:cb:9e:f6:00:01:54:fc:ed:59:a7:6b:fb:8c:a6:d7:
         2f:3f:c0:e9:25:b5:c8:f6:50:18:d2:23:07:d2:d9:7a:d6:b0:
         68:6c:8b:f5:a5:70:21:df:23:f6:fe:b9:d4:55:6e:b9:57:41:
         47:32:d2:e6:8f:b6:b9:e6:51:90:57:38:09:ad:d0:af:c2:4e:
         f1:61:c1:70:48:e6:d0:f0:40:81:5f:08:9c:de:38:89:25:82:
         a6:b8:2f:92:ab:7b:74:8b:9c:1c:1a:08:7a:fb:c0:ec:94:7f:
         3d:a4:c2:a1:23:16:ad:48:7f:91:0c:0d:45:f9:dc:de:27:b1:
         72:24:a2:ab:8e:c0:f4:3b:39:09:bc:47:26:93:e6:db:5d:4f:
         b4:5d:16:8a:6e:a1:60:5a:ed:2c:54:b5:06:7c:0d:85:7e:39:
         cf:1e:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----