Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3130303a3a2f34302d3430203d3e20323633393030.roa
File:                     323830343a323736633a3130303a3a2f34302d3430203d3e20323633393030.roa (raw, json)
Hash identifier:          tm7cPQCZy1y1i5QCLysBQ/Fh8OpjrIUuKQwRreJtK50=
Subject key identifier:   63:77:6A:C2:82:07:61:1C:02:7F:7C:6D:AB:D5:83:91:02:10:D0:41
Certificate issuer:       /CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
Certificate serial:       35A91CDC09D2BC30C6C8FC82895C7FF68C984076
Authority key identifier: 5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3130303a3a2f34302d3430203d3e20323633393030.roa
Signing time:             Fri 18 Aug 2023 13:27:41 +0000
ROA not before:           Fri 18 Aug 2023 13:22:41 +0000
ROA not after:            Fri 16 Aug 2024 13:27:41 +0000
asID:                     263900
IP address blocks:        2804:276c:100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a9:1c:dc:09:d2:bc:30:c6:c8:fc:82:89:5c:7f:f6:8c:98:40:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
        Validity
            Not Before: Aug 18 13:22:41 2023 GMT
            Not After : Aug 16 13:27:41 2024 GMT
        Subject: CN=63776AC28207611C027F7C6DABD583910210D041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:a9:18:5b:cc:dc:85:fa:67:ff:bf:f0:1c:
                    03:2a:04:fb:e0:38:ad:c6:cc:e4:30:08:28:ac:e6:
                    99:7c:a9:7b:03:d7:04:16:67:44:21:6a:96:86:23:
                    f6:69:a9:75:d9:9a:41:27:a7:b3:7d:69:9e:6c:dd:
                    f6:11:b2:60:a9:79:70:99:08:51:52:62:e9:b3:a5:
                    77:5f:a4:c2:06:60:6e:0d:21:45:d7:b8:d7:3f:9c:
                    21:c1:7a:d6:e9:8f:a9:26:09:d0:b0:62:42:9c:ff:
                    07:94:18:be:1c:aa:19:ae:b3:b3:92:71:f0:95:4a:
                    00:e0:a9:8e:d1:87:49:9c:a4:00:38:5c:8b:1d:d5:
                    dd:66:16:98:0d:42:f1:b6:f3:cb:c0:d8:4c:8c:43:
                    5f:d7:30:9d:70:e3:25:dc:d6:0f:0a:41:75:28:83:
                    a0:1b:85:47:1a:e7:30:a8:37:bd:70:b7:39:72:d4:
                    4d:a5:48:61:9a:ab:93:ab:47:f0:b8:ec:77:58:b5:
                    ed:c9:7c:50:af:18:63:26:02:a4:e1:e5:1e:03:0f:
                    fc:8b:b1:0d:79:17:15:9e:09:08:e0:80:0d:cb:00:
                    7e:f3:0e:f1:fe:a2:91:05:4c:a6:84:75:30:61:23:
                    83:fc:2e:10:cb:df:38:68:1e:67:1f:9d:38:29:bd:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:77:6A:C2:82:07:61:1C:02:7F:7C:6D:AB:D5:83:91:02:10:D0:41
            X509v3 Authority Key Identifier:
                keyid:5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/323830343a323736633a3130303a3a2f34302d3430203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:d9:15:7d:32:54:6e:8c:00:dc:4d:04:6e:5c:14:c7:e7:
         3e:4d:e6:d8:b5:68:23:03:65:43:9e:5a:5f:8f:85:6b:33:05:
         80:04:4c:92:e8:fa:8e:cc:3a:6e:30:6a:69:97:f6:50:c8:52:
         0b:ef:db:2e:53:86:d6:b1:b6:d1:f9:24:65:7e:03:c7:c0:ae:
         cd:4d:95:4e:2e:ba:dc:6d:6d:36:15:6c:73:3e:85:a9:2d:42:
         10:df:a3:f7:ad:63:72:a0:2d:47:a2:ba:f4:0d:5b:2e:67:8b:
         f2:6d:f9:38:e8:db:22:cf:15:7d:36:e9:f5:0a:92:c5:e4:d7:
         f9:90:a1:98:0a:a0:e6:1d:27:1d:e7:32:11:d4:fc:56:7a:54:
         4c:d7:d0:26:f1:41:e9:a3:7c:4d:dd:73:1e:d4:34:a0:54:39:
         48:6b:73:e6:c9:fc:70:6c:fd:f5:b3:b9:b3:91:d5:0f:5c:d0:
         d2:b3:d8:f0:0a:a7:44:58:78:1e:f7:2d:a3:a6:70:7a:88:1c:
         e6:47:f0:47:9b:fa:50:57:11:c8:e9:8a:41:08:7c:a0:3f:a2:
         43:5f:22:62:f5:3b:5e:41:d0:72:22:d9:34:b8:06:a0:28:66:
         75:c3:67:42:d0:73:bc:cf:57:37:99:fd:a0:f5:ea:e2:e6:58:
         ca:a4:12:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----