Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134342e302f32332d3233203d3e20323638353130.roa
File:                     34352e3136312e3134342e302f32332d3233203d3e20323638353130.roa (raw, json)
Hash identifier:          4NJlT9UyJetdgr3krpTbPHh92ZYyCRX21KE2w3z/q+c=
Subject key identifier:   B9:26:C0:FE:1B:AF:41:BF:95:4F:B3:69:98:72:B9:8F:CA:78:7F:C6
Certificate issuer:       /CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
Certificate serial:       6C4CF99F9558E0BC6E32A765F2E90895057777B1
Authority key identifier: 7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134342e302f32332d3233203d3e20323638353130.roa
Signing time:             Fri 24 Mar 2023 01:47:11 +0000
ROA not before:           Fri 24 Mar 2023 01:42:11 +0000
ROA not after:            Fri 22 Mar 2024 01:47:11 +0000
asID:                     268510
IP address blocks:        45.161.144.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4c:f9:9f:95:58:e0:bc:6e:32:a7:65:f2:e9:08:95:05:77:77:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
        Validity
            Not Before: Mar 24 01:42:11 2023 GMT
            Not After : Mar 22 01:47:11 2024 GMT
        Subject: CN=B926C0FE1BAF41BF954FB3699872B98FCA787FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:c5:dc:63:30:0c:12:de:ba:64:95:f7:61:
                    c5:42:42:da:f0:9a:1d:08:01:00:16:a3:fb:cd:ca:
                    4b:a8:d3:1d:20:35:7a:b5:24:34:c4:5b:08:d5:7e:
                    4e:8b:7d:cb:4e:ee:38:4e:bc:3c:08:b5:4b:41:5d:
                    7d:4e:3a:99:ff:6f:e3:01:0f:a2:34:a6:ef:bf:ee:
                    de:54:07:df:16:a3:6a:90:5e:e1:92:96:d3:cc:53:
                    75:29:48:35:c8:13:07:c6:63:6e:7f:0d:c4:06:07:
                    0c:4a:f4:e7:af:a1:14:7c:81:af:4c:fe:6a:98:73:
                    64:ea:2f:bf:9d:d1:6a:d8:88:8d:4d:1d:76:27:9d:
                    a3:68:19:7b:37:ef:02:16:fe:a3:8a:17:b6:0f:8b:
                    f5:6f:ea:25:4e:89:33:e5:55:7d:97:9d:38:4f:31:
                    a0:68:d1:57:e3:5f:7a:e6:32:8a:0e:a4:fc:8d:9f:
                    8a:66:1f:2a:18:0a:92:c0:92:b2:d6:18:6a:30:e2:
                    a9:1b:69:d6:c4:0c:92:52:38:fb:66:4d:68:c1:57:
                    5d:41:8e:e2:27:d8:f7:fe:1e:0e:15:30:6e:95:f7:
                    b8:30:c3:46:38:be:ae:65:4d:76:b8:6e:32:53:7e:
                    ee:52:bf:a6:a2:7a:29:95:a5:51:38:ab:4b:56:62:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:26:C0:FE:1B:AF:41:BF:95:4F:B3:69:98:72:B9:8F:CA:78:7F:C6
            X509v3 Authority Key Identifier:
                keyid:7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134342e302f32332d3233203d3e20323638353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:a1:e1:2d:bd:9d:41:76:46:8c:56:73:ec:63:65:08:6d:
         95:19:5b:b1:39:de:f2:75:27:c7:f8:f9:b4:43:e3:68:fd:ae:
         d0:85:02:71:05:78:77:ae:88:28:49:f2:9f:8d:04:09:8a:4c:
         14:08:2d:50:3b:e1:f6:89:b8:63:ea:2f:c7:73:5f:8c:fe:69:
         36:0b:19:a7:ce:ab:27:0f:b7:6c:47:d9:7d:c5:d2:e7:2f:9c:
         b2:d2:12:15:0e:68:3a:b0:01:21:fb:fd:77:0c:65:cf:16:46:
         df:2a:c5:f2:0d:2e:cf:f8:97:4b:1e:56:8d:2c:6f:e2:03:9a:
         78:ad:95:2d:11:5e:ee:37:8a:51:0a:2d:d6:13:49:c4:ba:cf:
         17:73:55:a9:61:a9:3c:dc:72:f0:64:64:02:07:b8:7a:b8:3b:
         f4:49:87:d4:1e:c4:73:f8:7b:c7:f2:73:e9:a7:73:4b:20:14:
         85:fd:53:7f:46:54:c1:6f:71:e9:5a:e9:bd:7f:b6:49:0d:ef:
         10:bd:3a:c4:67:6e:cc:4c:75:4d:b9:d2:37:ab:8a:75:72:96:
         5d:bd:29:31:9c:3c:07:cf:e4:a2:68:82:f7:e4:87:d6:f9:96:
         9d:a3:92:d5:93:87:bc:52:2e:3a:c7:b9:7d:32:81:14:0b:63:
         dc:43:63:2f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbEz5n5VY4LxuMqdl8ukIlQV3d7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2MDQ1QUI3QTE1RjIwNzNBMkNDRTM0RUREN0M2QTZF
QjA0REM2ODAeFw0yMzAzMjQwMTQyMTFaFw0yNDAzMjIwMTQ3MTFaMDMxMTAvBgNV
BAMTKEI5MjZDMEZFMUJBRjQxQkY5NTRGQjM2OTk4NzJCOThGQ0E3ODdGQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwsXcYzAMEt66ZJX3YcVCQtrw
mh0IAQAWo/vNykuo0x0gNXq1JDTEWwjVfk6LfctO7jhOvDwItUtBXX1OOpn/b+MB
D6I0pu+/7t5UB98Wo2qQXuGSltPMU3UpSDXIEwfGY25/DcQGBwxK9OevoRR8ga9M
/mqYc2TqL7+d0WrYiI1NHXYnnaNoGXs37wIW/qOKF7YPi/Vv6iVOiTPlVX2XnThP
MaBo0VfjX3rmMooOpPyNn4pmHyoYCpLAkrLWGGow4qkbadbEDJJSOPtmTWjBV11B
juIn2Pf+Hg4VMG6V97gww0Y4vq5lTXa4bjJTfu5Sv6aieimVpVE4q0tWYqLtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuSbA/huvQb+VT7NpmHK5j8p4f8YwHwYDVR0j
BBgwFoAUfmBFq3oV8gc6LM407dfGpusE3GgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjVGbWo5RUdjYnJydDg4WkExZ0s5aE1lajNtenJYNWt0eEFqOUw0dXJl
V20vMC83RTYwNDVBQjdBMTVGMjA3M0EyQ0NFMzRFREQ3QzZBNkVCMDREQzY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFNjA0NUFCN0ExNUYyMDcz
QTJDQ0UzNEVERDdDNkE2RUIwNERDNjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1Rm1qOUVHY2JycnQ4OFpBMWdLOWhNZWozbXpyWDVrdHhBajlMNHVyZVdtLzAv
MzQzNTJlMzEzNjMxMmUzMTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNTMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtoZAwDQYJKoZIhvcNAQELBQADggEBADTroeEt
vZ1BdkaMVnPsY2UIbZUZW7E53vJ1J8f4+bRD42j9rtCFAnEFeHeuiChJ8p+NBAmK
TBQILVA74faJuGPqL8dzX4z+aTYLGafOqycPt2xH2X3F0ucvnLLSEhUOaDqwASH7
/XcMZc8WRt8qxfINLs/4l0seVo0sb+IDmnitlS0RXu43ilEKLdYTScS6zxdzValh
qTzccvBkZAIHuHq4O/RJh9QexHP4e8fyc+mnc0sgFIX9U39GVMFvcela6b1/tkkN
7xC9OsRnbsxMdU250jerinVyll29KTGcPAfP5KJogvfkh9b5lp2jktWTh7xSLjrH
uX0ygRQLY9xDYy8=
-----END CERTIFICATE-----