Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/323830343a373166633a3a2f33322d3438203d3e20323730383234.roa
File:                     323830343a373166633a3a2f33322d3438203d3e20323730383234.roa (raw, json)
Hash identifier:          BWH5uXszTtNbF22KmpJgINXqWGysZVH1VV+DPXpzmsk=
Subject key identifier:   28:D9:1F:E0:40:6D:C2:C7:1C:E7:45:12:96:E6:8C:AE:C5:6F:56:3E
Certificate issuer:       /CN=D46D9B53AD78E55F078DA7D69B411BF181E1973D
Certificate serial:       295E57BAF133DBBE8690C283D8CB7C9492D1A18D
Authority key identifier: D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/323830343a373166633a3a2f33322d3438203d3e20323730383234.roa
Signing time:             Sat 05 Nov 2022 08:44:00 +0000
ROA not before:           Sat 05 Nov 2022 08:39:00 +0000
ROA not after:            Sat 04 Nov 2023 08:44:00 +0000
asID:                     270824
IP address blocks:        2804:71fc::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5e:57:ba:f1:33:db:be:86:90:c2:83:d8:cb:7c:94:92:d1:a1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D46D9B53AD78E55F078DA7D69B411BF181E1973D
        Validity
            Not Before: Nov  5 08:39:00 2022 GMT
            Not After : Nov  4 08:44:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:f2:9c:01:1f:92:0f:43:05:79:77:12:4f:
                    00:1a:9d:97:15:3a:14:b5:3c:e2:cb:0f:80:82:71:
                    82:3d:f7:5e:ff:bf:e5:e9:92:c0:dc:8f:96:a5:3c:
                    3e:27:91:f3:02:b5:e0:fd:6c:b9:54:1b:64:a9:a8:
                    12:bb:bb:9e:d2:4d:f5:87:d5:d7:82:3f:58:48:6c:
                    ce:35:87:fc:d7:d0:8a:47:80:9e:f8:09:a3:f0:91:
                    6f:41:b8:d5:f6:bc:d3:6b:d5:c9:ac:50:b2:5b:40:
                    01:3b:26:3a:7d:3a:24:bc:dc:3c:93:c7:d3:7e:1d:
                    3d:f1:7f:f4:fd:45:fa:15:32:d8:4e:54:22:42:bb:
                    80:12:fa:37:24:26:6c:02:e9:b9:09:31:31:c8:2e:
                    d8:9a:1b:28:4f:f4:b2:9a:2b:09:5e:e8:58:af:13:
                    ea:1a:53:3a:fd:54:da:06:92:fe:ac:97:96:2a:d8:
                    98:e0:70:25:20:05:55:9e:62:2e:33:c6:93:fb:49:
                    2a:6e:74:b0:59:f9:37:89:54:af:19:c0:03:70:ac:
                    7e:41:15:0d:a2:2f:ff:5f:be:47:88:96:fb:95:a2:
                    af:1f:40:e9:ef:50:82:df:04:72:e4:1c:9d:05:66:
                    ea:a8:4f:e3:2c:1d:30:01:f5:54:2a:42:ee:b5:2b:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D9:1F:E0:40:6D:C2:C7:1C:E7:45:12:96:E6:8C:AE:C5:6F:56:3E
            X509v3 Authority Key Identifier:
                keyid:D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/323830343a373166633a3a2f33322d3438203d3e20323730383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:90:6a:db:5e:d2:41:54:28:b2:72:03:40:a9:4c:0f:a9:
         ce:21:e7:a7:18:de:7c:9d:37:c2:7e:61:f2:81:69:a2:b0:27:
         8d:4b:e7:a0:2e:7b:2b:5c:36:52:45:61:b3:0a:0f:be:a2:8d:
         7c:4d:60:c8:b8:74:ea:2c:65:d7:0e:4d:ad:e6:fb:01:75:fc:
         73:1f:9b:74:a0:5d:ca:8a:73:18:19:e0:c0:91:5c:4e:26:cd:
         72:37:cb:4e:78:1e:99:a2:83:b6:46:aa:aa:e8:ea:08:10:82:
         63:2c:44:19:a3:9a:53:60:5d:ca:4b:4d:5d:db:0d:9a:47:33:
         40:16:6b:60:5a:26:14:dc:d7:6e:64:b6:4f:48:3c:70:5f:87:
         14:d4:5c:29:21:7b:96:23:ea:54:1f:96:ac:f7:07:68:a6:df:
         1e:1d:55:78:09:d2:a4:1e:83:d8:51:40:14:39:7e:2c:82:c4:
         b1:ed:3f:74:98:53:2d:65:0e:a4:fa:f6:7d:0b:a4:1e:91:2a:
         b6:6f:2e:73:f5:e6:76:e4:d0:d7:4a:d4:0e:8a:f7:f0:e2:7f:
         dd:da:fa:d3:8d:d0:ba:83:76:7b:97:0c:f2:39:ed:5c:b4:c9:
         e5:e7:56:99:f3:8d:f2:0c:78:b2:fb:9f:77:73:66:53:87:cf:
         03:64:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----