Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a383030303a3a2f33342d3334203d3e20323638363633.roa
File:                     323830343a353461383a383030303a3a2f33342d3334203d3e20323638363633.roa (raw, json)
Hash identifier:          T874Lj3qizlVokNwcwKWABLj6AxitQ/YuVPKqTBF2Z4=
Subject key identifier:   AD:05:46:B1:DE:FE:8E:F7:B7:F0:05:8A:A3:1F:8D:5C:0B:5C:A4:F7
Certificate issuer:       /CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Certificate serial:       1A631F2F4417AA220BDB1E9C6BE1C535A21D14B6
Authority key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a383030303a3a2f33342d3334203d3e20323638363633.roa
Signing time:             Mon 23 Sep 2024 13:32:39 +0000
ROA not before:           Mon 23 Sep 2024 13:27:39 +0000
ROA not after:            Mon 22 Sep 2025 13:32:39 +0000
asID:                     268663
IP address blocks:        2804:54a8:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 20:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:63:1f:2f:44:17:aa:22:0b:db:1e:9c:6b:e1:c5:35:a2:1d:14:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
        Validity
            Not Before: Sep 23 13:27:39 2024 GMT
            Not After : Sep 22 13:32:39 2025 GMT
        Subject: CN=AD0546B1DEFE8EF7B7F0058AA31F8D5C0B5CA4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:42:8a:bb:8a:4d:d1:bc:23:37:f7:41:2d:f5:
                    a7:9c:3e:a6:b4:88:76:73:a3:d0:1a:31:e5:15:47:
                    b4:b7:cd:79:e2:f9:b7:1f:24:b6:aa:1f:9a:8e:8a:
                    ce:b8:ff:6b:f5:46:e4:20:56:bb:f8:b7:17:a3:2e:
                    f4:ba:17:b1:7a:f5:5a:f4:f3:a6:d7:0a:b0:9d:22:
                    7a:a0:3d:d1:c8:96:c6:2b:65:46:9b:30:25:4a:83:
                    2c:17:5d:b8:e5:1d:32:d6:a3:47:da:26:06:aa:61:
                    ec:65:3c:21:93:e4:3e:47:3f:df:62:bd:55:e7:87:
                    1c:39:ef:af:5a:9f:03:13:14:7a:c4:63:ff:c5:1b:
                    92:7e:81:29:22:99:32:f3:13:68:5d:1d:5a:ee:47:
                    92:0b:a1:cb:ef:a4:ce:4d:05:0b:d5:5f:81:08:49:
                    f5:7d:46:68:25:6a:db:b0:b3:3f:a6:5a:35:0d:07:
                    31:1d:41:1c:2d:52:91:bb:89:ac:ee:eb:bb:d0:d3:
                    ee:73:07:56:48:8d:b3:b2:48:27:c1:21:a8:da:5b:
                    91:5d:a3:56:97:e2:97:bd:73:30:1c:7c:39:ec:04:
                    35:4e:49:85:59:4f:02:21:46:97:6c:8e:6c:69:c1:
                    3f:ab:d5:3b:9c:f0:c0:7b:be:84:d9:c8:72:61:56:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:46:B1:DE:FE:8E:F7:B7:F0:05:8A:A3:1F:8D:5C:0B:5C:A4:F7
            X509v3 Authority Key Identifier:
                keyid:8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/323830343a353461383a383030303a3a2f33342d3334203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:78:74:16:00:f9:5e:b6:1f:d7:2b:2c:cd:58:9c:05:68:
         c8:bc:73:73:74:f8:06:19:24:e6:b5:c7:a3:5d:cf:4a:72:11:
         e4:78:d1:60:5a:4f:19:0b:34:48:c0:57:25:4e:29:35:7c:b0:
         d2:1e:da:ed:92:53:6c:a6:24:50:10:e9:7d:43:32:a1:43:f3:
         d3:f6:93:0b:93:0b:7d:f2:cd:ff:14:59:ce:53:ea:28:3d:76:
         f5:52:f0:7c:49:bf:a2:eb:98:0c:09:d0:8e:7e:78:19:6f:d9:
         8c:4b:9a:cb:22:84:2a:9f:8d:12:5c:c5:e3:d8:67:7d:08:ae:
         98:26:59:ee:80:15:fa:81:68:2e:43:c2:59:3c:51:40:69:8a:
         05:67:c4:91:16:dd:bb:9f:2b:a3:41:41:f7:78:60:d5:a5:6e:
         15:89:58:ba:ce:0c:91:03:f9:7c:dd:b2:5e:fc:99:d1:f5:a1:
         a0:2f:6a:4f:e0:ff:bd:19:3e:ee:d9:84:1c:59:4b:8d:a6:22:
         f2:e1:f5:c6:1c:2d:4f:e7:71:f2:0d:55:14:25:4b:ee:3d:8c:
         90:b9:23:f2:64:ac:fb:44:59:d1:98:14:47:21:9b:88:ec:69:
         18:21:e9:82:5b:76:ba:db:12:fb:a8:36:60:79:5f:48:18:2a:
         3d:26:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----