Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a3a2f33322d3332203d3e20323637353934.roa
File:                     323830343a343364383a3a2f33322d3332203d3e20323637353934.roa (raw, json)
Hash identifier:          9sYB8dv/CgJkyLNh27jSqNkDYDaBJ+ie7kTTbedakRk=
Subject key identifier:   C2:FB:A6:08:E7:F8:9F:C2:0C:E2:9C:59:AB:33:E0:F8:C2:0C:45:1B
Certificate issuer:       /CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
Certificate serial:       2A7A25CCC3620E90D2ADB831F27B0D6E7EDB90FB
Authority key identifier: 5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a3a2f33322d3332203d3e20323637353934.roa
Signing time:             Fri 24 Mar 2023 01:47:11 +0000
ROA not before:           Fri 24 Mar 2023 01:42:11 +0000
ROA not after:            Fri 22 Mar 2024 01:47:11 +0000
asID:                     267594
IP address blocks:        2804:43d8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 21:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7a:25:cc:c3:62:0e:90:d2:ad:b8:31:f2:7b:0d:6e:7e:db:90:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF0E2598B718F5793DF38CEF3A68EE38E017C06
        Validity
            Not Before: Mar 24 01:42:11 2023 GMT
            Not After : Mar 22 01:47:11 2024 GMT
        Subject: CN=C2FBA608E7F89FC20CE29C59AB33E0F8C20C451B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:44:2f:5a:df:6f:ab:99:77:65:43:21:f1:
                    7b:a6:5b:c0:57:42:83:e7:db:ac:f7:b1:1a:2d:ce:
                    39:06:c2:80:61:57:d4:dc:e2:92:2d:13:3e:74:e9:
                    71:90:7f:9c:5e:0d:37:de:b3:6a:ba:8d:65:84:9a:
                    4f:c3:c2:37:b1:6e:f5:ce:08:b1:2a:ab:80:5f:07:
                    9c:b7:46:ad:a7:85:fe:fb:10:0a:80:a8:c3:ba:3d:
                    08:7d:32:18:61:cc:5c:6d:10:df:73:e9:d7:f9:37:
                    c2:d9:9e:3d:ce:7e:c0:0a:05:b0:13:61:a1:57:87:
                    13:30:31:f7:69:b7:e2:2b:4f:18:23:59:80:69:9d:
                    8f:6c:3a:f1:25:7c:cf:bc:46:8e:f2:04:0d:4c:3b:
                    72:32:ba:1e:04:e4:bb:01:4e:51:a8:e7:a2:76:cd:
                    de:7a:fa:ca:1b:44:2d:df:c5:27:4d:08:f2:a8:d4:
                    51:d2:64:0f:cf:f7:63:65:d9:05:46:af:f9:c8:3b:
                    b1:f5:33:41:86:9a:21:17:58:c3:80:39:8e:ee:6f:
                    11:76:b8:59:5a:e2:ff:0e:73:d9:e0:2f:ca:9a:c0:
                    a9:f6:c5:56:18:cf:c5:2a:c2:b4:68:3e:d7:cb:b4:
                    1e:49:6c:42:3c:1c:d6:dc:74:70:23:f1:44:49:2b:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:A6:08:E7:F8:9F:C2:0C:E2:9C:59:AB:33:E0:F8:C2:0C:45:1B
            X509v3 Authority Key Identifier:
                keyid:5E:F0:E2:59:8B:71:8F:57:93:DF:38:CE:F3:A6:8E:E3:8E:01:7C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EF0E2598B718F5793DF38CEF3A68EE38E017C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a3a2f33322d3332203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:af:fd:5a:ab:24:9e:99:59:63:ca:ba:10:3a:52:58:d2:c5:
         64:45:e5:2f:ab:d2:f3:a2:d6:40:18:cb:35:10:92:4f:c8:93:
         3d:39:55:9e:83:3e:93:44:1f:f9:34:b3:e8:8f:30:71:d4:e1:
         f8:1e:78:70:f2:19:c9:0b:e8:ea:46:e0:63:51:1f:1b:51:17:
         98:1d:52:b7:bc:0c:79:b9:e6:d7:5c:8c:43:33:b3:f8:6c:75:
         f4:6b:4a:b9:fe:38:38:c4:ae:d5:b9:99:66:08:25:87:09:2a:
         ec:0a:6c:aa:aa:74:0d:2c:80:a8:8a:ed:93:47:ff:48:41:bd:
         6a:19:2d:eb:34:5f:9e:98:6e:91:f2:f1:59:73:56:66:e6:be:
         80:6e:a9:5b:66:f6:ea:0e:d4:ec:33:be:cb:87:97:d7:fd:58:
         24:da:9f:fa:e3:32:2c:9c:c6:98:1a:0c:6f:8d:a3:ae:75:14:
         44:64:c2:8d:4c:73:4c:59:0d:fd:a8:af:f6:d6:2b:76:05:65:
         86:45:f1:78:06:33:11:54:12:a2:a3:07:6a:a1:3c:76:fd:3e:
         f2:de:91:d1:6f:7b:ac:ae:86:6b:74:68:a1:00:08:7d:e3:fa:
         8c:11:80:d5:f9:3c:78:cd:f5:46:e6:78:45:96:97:a2:cf:d7:
         d7:3d:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----