Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32312d3231203d3e20323632353138.roa
File:                     3137372e36372e3132302e302f32312d3231203d3e20323632353138.roa (raw, json)
Hash identifier:          HGgkpLZtSpzTKpMvVjBZ3TbEYDW1eF0gaqcc72xTjIo=
Subject key identifier:   70:49:3F:E5:CB:E2:6A:70:2B:A4:C7:E2:19:76:BC:81:25:0A:96:43
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       1AE345FFFC2784694B4C27D802FAE3B9B3121D17
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32312d3231203d3e20323632353138.roa
Signing time:             Tue 09 Aug 2022 11:05:11 +0000
ROA not before:           Tue 09 Aug 2022 11:00:11 +0000
ROA not after:            Tue 08 Aug 2023 11:05:11 +0000
asID:                     262518
IP address blocks:        177.67.120.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e3:45:ff:fc:27:84:69:4b:4c:27:d8:02:fa:e3:b9:b3:12:1d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Aug  9 11:00:11 2022 GMT
            Not After : Aug  8 11:05:11 2023 GMT
        Subject: CN=70493FE5CBE26A702BA4C7E21976BC81250A9643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:22:55:a3:20:42:0e:a9:a2:af:35:02:99:
                    46:53:92:5d:1d:d2:69:b2:a5:d4:70:30:95:54:81:
                    d8:16:30:a5:10:1d:17:1a:46:4b:53:db:b8:9f:d1:
                    88:ce:cd:5b:cc:b8:03:70:0c:8a:0c:eb:05:ee:0f:
                    90:2b:02:c6:fa:5d:06:00:38:0a:b7:95:b3:6d:7d:
                    e2:19:b9:d2:37:6f:d7:f4:ef:96:53:32:c3:af:c4:
                    f4:12:aa:2b:5f:cb:4f:ba:83:ea:84:df:83:04:da:
                    df:9a:60:f3:54:75:50:3a:ff:c9:05:08:a7:ab:5c:
                    43:73:51:94:28:a8:df:1a:7c:ba:a3:26:d5:26:ae:
                    58:d9:a9:7f:86:85:d4:34:6c:d7:97:4b:8b:ab:bf:
                    db:16:a7:76:14:2c:7c:0e:a0:70:00:08:ea:ab:55:
                    84:1c:fe:0d:d0:08:d9:4a:b5:55:1e:7c:c0:c3:93:
                    65:80:17:0f:dd:79:e7:fa:3f:81:51:da:35:4d:bb:
                    6b:43:09:2b:c4:9c:30:47:d7:76:c9:57:f5:69:fb:
                    97:78:aa:fb:0d:fe:84:c0:a1:6e:d3:2a:45:63:98:
                    e8:5b:17:13:97:14:2b:d0:d4:90:52:08:26:eb:3e:
                    7f:bf:7b:65:89:3e:c3:93:36:e8:05:6c:01:cf:c8:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:49:3F:E5:CB:E2:6A:70:2B:A4:C7:E2:19:76:BC:81:25:0A:96:43
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3137372e36372e3132302e302f32312d3231203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:da:4c:ee:41:bf:4d:3a:88:b5:d8:a2:c9:41:ce:67:62:
         5d:56:86:b3:ba:ce:4c:94:e4:53:7b:02:61:e5:6d:a6:30:9b:
         c0:d2:ec:5b:bb:30:59:79:a4:2d:b6:47:1d:5c:17:e7:8e:5a:
         eb:bb:86:8d:09:05:4e:87:2b:0e:a3:86:6d:75:5d:4d:82:56:
         2b:e0:27:4d:87:05:28:10:08:f1:2b:04:c4:6e:65:b6:25:ac:
         cc:8c:56:0c:ae:69:cd:ee:c3:3c:c2:bb:58:73:41:8f:1c:8e:
         98:bb:e6:16:7d:6c:7e:2e:90:c0:d4:4d:62:d1:05:7d:aa:03:
         a3:0c:26:6f:4b:93:bd:89:2a:de:ac:23:a5:b8:df:67:76:ff:
         07:dd:6c:72:c8:d3:8f:3d:03:ca:ef:e3:4b:e3:24:d1:9f:40:
         d5:33:35:61:1c:39:39:92:9b:32:ab:90:b6:94:95:13:2e:98:
         18:8f:ba:28:27:a7:45:4a:62:80:48:e4:21:ae:22:97:b3:5c:
         9e:0f:43:0d:76:3a:78:63:8e:36:8f:84:76:71:c0:59:49:05:
         38:52:5e:35:f9:b7:4d:23:38:d7:ff:fa:36:e7:c4:2e:a2:dc:
         7b:3c:a7:98:17:a9:aa:38:4e:de:dd:f7:02:1f:79:c7:aa:02:
         bf:d4:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----