Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f34322d3432203d3e20323634333539.roa
File:                     323830343a316434633a383030303a3a2f34322d3432203d3e20323634333539.roa (raw, json)
Hash identifier:          bM1J5LwfCoRwqAG8C4CZY8+Xv/PI/hf7sADjgqTYa+8=
Subject key identifier:   C8:26:64:20:97:73:3F:A9:AF:21:72:AB:19:A4:28:6E:88:DC:5E:79
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       1678643EB7CF558BDF7C1A99695281922576EB3C
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f34322d3432203d3e20323634333539.roa
Signing time:             Wed 05 Jun 2024 14:56:28 +0000
ROA not before:           Wed 05 Jun 2024 14:51:28 +0000
ROA not after:            Wed 04 Jun 2025 14:56:28 +0000
asID:                     264359
IP address blocks:        2804:1d4c:8000::/42 maxlen: 42

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 18:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:78:64:3e:b7:cf:55:8b:df:7c:1a:99:69:52:81:92:25:76:eb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Jun  5 14:51:28 2024 GMT
            Not After : Jun  4 14:56:28 2025 GMT
        Subject: CN=C826642097733FA9AF2172AB19A4286E88DC5E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:84:a7:6e:b9:56:2f:aa:c0:9c:e2:1b:4d:
                    bf:93:c4:c7:ce:a4:eb:4b:99:d3:c9:50:2b:cd:9d:
                    d6:f9:5f:57:9e:ec:55:a3:b1:0f:37:5d:24:5c:0d:
                    0a:56:44:47:80:45:62:90:a9:e5:d0:fe:05:77:29:
                    bf:9a:d7:bc:fe:2b:d9:a8:9d:b2:ab:2f:7a:b2:cd:
                    05:b1:f1:9b:27:c3:02:ce:fd:b0:be:f0:4d:ab:f0:
                    4e:2d:53:e9:7b:19:be:5f:53:a9:18:1c:87:17:c4:
                    e4:d6:d0:49:aa:97:1e:e5:74:e6:9d:b7:a4:52:11:
                    51:4e:1b:b0:c2:ef:3e:b9:c5:ce:da:c8:27:0d:77:
                    85:9c:72:2d:56:f8:58:0f:4b:59:9d:81:3a:97:b2:
                    c6:e1:2c:7c:b2:93:5b:4c:34:0c:5d:4d:c9:b3:b8:
                    ba:1f:06:4a:54:17:10:56:8a:8e:f8:41:e2:07:96:
                    46:96:6a:ec:11:20:44:60:26:9c:60:df:f2:93:1f:
                    61:e9:0f:f1:98:b8:da:27:f8:0d:db:a0:5e:c6:c5:
                    19:28:08:71:8b:84:93:74:74:c3:d9:99:e4:cd:26:
                    0f:56:99:e1:85:d8:c3:1c:2a:36:54:3f:ef:2d:54:
                    4d:9d:f4:ef:dc:d9:f6:db:16:69:d9:f2:df:de:fb:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:64:20:97:73:3F:A9:AF:21:72:AB:19:A4:28:6E:88:DC:5E:79
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a383030303a3a2f34322d3432203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c:8000::/42

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:c2:6d:16:24:72:79:95:9e:9c:9c:9b:da:7a:32:b2:d5:
         6a:41:c2:75:24:a8:ee:36:fd:fb:c6:69:35:3a:bb:72:31:3c:
         ec:ff:b6:86:96:4e:09:69:0c:7a:3f:55:2d:da:57:df:55:52:
         4a:5e:78:c8:d1:b9:4a:e6:9c:59:c3:01:8c:01:47:de:49:3a:
         55:43:85:b1:f9:c2:82:ff:4e:69:66:f5:97:54:29:2a:ea:b0:
         bb:17:e6:c8:95:17:7d:cb:3a:22:9e:1b:80:b3:47:e4:a5:27:
         38:c7:12:e0:26:b0:b9:ff:ed:ad:0a:8f:01:a6:63:13:3c:f1:
         34:76:6a:0f:3f:bb:95:75:36:b1:59:6e:d0:36:23:65:bd:27:
         4e:2e:7c:13:20:c6:71:7b:4e:04:48:fe:44:10:9b:02:2e:34:
         ed:c8:da:dc:f9:94:74:05:55:f5:4f:5c:4e:43:ec:25:6d:4f:
         e3:b5:14:c0:b9:81:29:25:11:11:eb:46:fc:9f:4e:90:75:74:
         db:ee:2d:49:7d:b5:c8:ba:87:bb:61:4b:83:dd:39:1b:4f:56:
         7b:69:b4:ba:55:17:8f:33:5d:c6:3e:1a:a2:d3:7c:6b:cc:0b:
         d7:50:ef:86:d4:37:74:dc:85:50:26:c5:3d:a9:71:e1:6b:a5:
         92:36:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----