Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f33332d3333203d3e20323634333539.roa
File:                     323830343a316434633a383030303a3a2f33332d3333203d3e20323634333539.roa (raw, json)
Hash identifier:          uX28cjrsmOi+DRUKWQNzn8HZsVmZN+JFscqkjOTfWpA=
Subject key identifier:   A4:7A:DC:DA:4D:81:63:00:19:FA:13:4E:A3:14:D0:7B:3D:95:8A:5A
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       33D0E5018525AFDE8BFCB4BF184280F0F9C56283
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f33332d3333203d3e20323634333539.roa
Signing time:             Tue 27 Aug 2024 17:56:52 +0000
ROA not before:           Tue 27 Aug 2024 17:51:52 +0000
ROA not after:            Tue 26 Aug 2025 17:56:52 +0000
asID:                     264359
IP address blocks:        2804:1d4c:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d0:e5:01:85:25:af:de:8b:fc:b4:bf:18:42:80:f0:f9:c5:62:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 27 17:51:52 2024 GMT
            Not After : Aug 26 17:56:52 2025 GMT
        Subject: CN=A47ADCDA4D81630019FA134EA314D07B3D958A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:3f:d4:f9:24:96:bd:25:b9:bc:4c:5b:a4:
                    16:03:11:1c:66:63:12:e6:75:62:72:c7:70:8d:16:
                    c1:58:7e:f3:50:ad:74:7d:87:70:a3:02:98:16:22:
                    40:a5:47:cc:fc:da:61:15:ae:13:4d:2e:f4:22:83:
                    8c:54:ba:3f:68:50:1c:a0:40:38:3c:b2:b2:66:f1:
                    52:60:fa:24:77:f5:59:63:25:b8:aa:16:26:e9:b7:
                    40:cf:ad:0f:fb:57:e6:02:91:64:88:e2:3f:6f:e6:
                    0b:a0:a2:65:38:c1:d9:b9:40:d2:d7:63:19:29:3b:
                    c5:ab:f2:86:74:37:de:0c:b9:36:71:b9:c9:e0:1a:
                    dc:4c:ff:8d:13:e3:e5:c7:b0:05:cf:29:3d:bb:6c:
                    5e:d0:e7:fe:67:4b:03:49:0a:23:de:39:12:fc:26:
                    fc:c3:d5:f5:fc:bc:62:e0:78:c9:20:5a:cb:ca:07:
                    b8:d8:ab:bb:21:e4:9c:85:3e:a6:c6:0d:5f:97:74:
                    3a:2d:8b:1a:22:a7:20:3c:7c:49:52:d0:3e:53:63:
                    d2:b2:d5:43:93:61:18:16:c4:94:da:ee:ab:fc:7e:
                    ec:bc:c6:dc:78:3d:ff:5e:0e:ff:71:a2:26:e7:de:
                    04:f5:f3:c2:f6:89:48:2e:76:88:3c:72:3d:36:cd:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7A:DC:DA:4D:81:63:00:19:FA:13:4E:A3:14:D0:7B:3D:95:8A:5A
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f33332d3333203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:5e:91:bc:29:9f:8c:27:c1:17:c9:f3:41:ed:b0:df:e6:70:
         6a:93:65:59:a8:af:17:39:ff:20:0d:1b:b3:0a:b6:80:22:1c:
         e2:40:ac:67:27:7c:8f:34:9c:e8:61:e5:0e:66:8b:2b:1f:03:
         e1:63:1c:8c:cf:d6:ed:77:dc:ee:2b:31:b2:8e:c0:08:b3:d7:
         4e:a3:01:3b:d8:3f:7d:19:45:04:58:d9:96:2d:5b:78:45:5a:
         85:8d:78:7a:53:6b:52:50:37:d5:7e:14:6d:c1:8c:2b:1c:c3:
         4b:f8:f9:f5:04:ea:7d:4d:6a:bc:3c:5b:4a:52:89:11:ee:03:
         39:04:6e:4b:ba:60:81:9c:25:fb:59:7d:c0:d7:1b:53:3b:c3:
         45:aa:77:ab:a9:42:76:b0:7b:02:25:32:28:73:a4:8e:ed:16:
         92:21:f2:37:b5:dd:12:01:25:ac:1f:6d:7f:85:92:c6:53:ea:
         0d:b8:fa:7c:69:40:5f:b7:1e:84:bd:2e:2b:c0:73:c7:3f:7e:
         91:83:50:ce:02:cc:c6:a0:eb:e8:54:bb:67:47:0c:24:28:fc:
         d5:ec:b0:6b:83:47:99:72:c5:40:b2:f1:e3:b6:9b:45:6e:fd:
         e8:d9:c7:df:2a:f1:96:b7:2a:a9:ca:65:74:3d:ad:1c:ca:8f:
         d8:6f:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----