Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a323230303a3a2f34302d3430203d3e20323637303230.roa
File:                     323830343a343665633a323230303a3a2f34302d3430203d3e20323637303230.roa (raw, json)
Hash identifier:          sU2BNNT/8wJquJRsDDKAPCg/xOT7xMI8Hkuv2F/SEeI=
Subject key identifier:   CB:DA:83:03:C1:CE:BC:D1:D3:DE:1F:E5:5A:45:D9:AC:48:73:83:FC
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       710AA7C8920A17B7117F022D71DDB83A2BB44766
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a323230303a3a2f34302d3430203d3e20323637303230.roa
Signing time:             Thu 08 Sep 2022 19:50:35 +0000
ROA not before:           Thu 08 Sep 2022 19:45:35 +0000
ROA not after:            Thu 07 Sep 2023 19:50:35 +0000
asID:                     267020
IP address blocks:        2804:46ec:2200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0a:a7:c8:92:0a:17:b7:11:7f:02:2d:71:dd:b8:3a:2b:b4:47:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Sep  8 19:45:35 2022 GMT
            Not After : Sep  7 19:50:35 2023 GMT
        Subject: CN=CBDA8303C1CEBCD1D3DE1FE55A45D9AC487383FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:de:ec:23:0b:d8:a7:ae:0a:67:e8:e1:79:
                    b7:9e:95:b3:5e:2b:90:fb:66:02:58:37:17:5f:d0:
                    c4:d1:e4:52:6a:e8:da:6c:af:66:9f:c6:f5:55:a8:
                    46:c4:d2:e9:f5:fa:a2:63:22:78:39:7f:1f:e8:96:
                    7b:bb:a9:70:96:2d:67:55:14:07:59:e9:ad:46:7c:
                    4c:37:ac:9c:94:5d:6b:9d:95:33:70:50:b3:44:2f:
                    69:de:5c:2a:54:4c:45:d0:32:6f:2c:81:66:85:30:
                    4c:91:d8:9b:5a:5b:ae:cb:52:63:85:49:41:1d:81:
                    c2:f1:7c:fa:3a:90:5e:6f:6c:11:2d:c7:f0:e2:05:
                    cb:15:a1:41:6f:9b:b9:28:e6:f3:0e:60:bf:9a:8f:
                    1f:fd:d6:57:d9:94:ac:dd:01:f0:29:9a:d9:4a:45:
                    b0:00:1f:db:50:3c:ba:8a:49:4a:4f:44:ae:b9:2b:
                    c7:30:6b:af:70:80:54:30:91:2e:f0:1a:0d:29:0d:
                    4b:b3:10:87:41:71:8f:2b:3b:d4:e7:32:ed:51:c2:
                    2e:48:a6:62:2c:57:79:c2:c9:12:f9:b8:17:af:0c:
                    86:97:ca:8f:68:6a:9c:14:18:23:e4:bb:fb:a0:ad:
                    94:19:56:62:b2:2e:44:8f:1f:86:56:0a:c1:dc:3e:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DA:83:03:C1:CE:BC:D1:D3:DE:1F:E5:5A:45:D9:AC:48:73:83:FC
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/323830343a343665633a323230303a3a2f34302d3430203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46ec:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:65:6a:82:a1:b1:fe:27:8e:e3:06:ff:2a:4d:c5:3b:85:2b:
         09:2c:74:fd:19:e5:4c:65:60:81:9f:1f:9f:b7:41:9b:40:d4:
         61:a4:66:2c:72:c9:32:1b:a1:7d:ba:bd:79:20:05:d0:ee:d6:
         3f:d4:66:0a:4f:46:2e:57:46:fb:03:2d:df:3e:e4:0a:54:48:
         9e:09:c5:4c:69:e5:77:ae:1b:44:bd:60:f0:7c:c4:a3:e3:79:
         65:bf:ad:46:f9:65:d4:6a:ca:21:ab:14:4d:9b:dc:9a:0b:15:
         5f:0c:e7:95:5b:99:9a:c1:bd:d4:86:09:27:8c:a8:95:ca:54:
         ee:bf:a0:7d:75:d4:8d:9a:e1:a8:3a:66:c7:ab:f2:6b:63:05:
         2c:a5:36:cd:93:75:f2:85:26:42:89:05:ac:9c:fc:9f:c1:52:
         37:44:e8:36:82:e4:8e:f1:23:f2:4d:a3:95:da:5d:38:e3:eb:
         a8:8e:f7:19:6c:2a:7e:a6:10:fc:7b:a9:73:eb:2e:b2:3f:81:
         1f:02:6c:95:7d:c4:d7:f7:4f:74:c4:df:6d:5f:ac:a7:a6:d4:
         6d:f6:8d:4a:10:32:d9:13:eb:ca:d2:98:5d:82:b6:06:d5:62:
         75:5f:86:10:f0:28:4a:67:44:66:18:54:3b:cc:d0:54:a3:a8:
         b9:bf:98:c4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcQqnyJIKF7cRfwItcd24Oiu0R2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2NzIwRTA5NkUyQjNCNTg3NURFRjFGNjVGNkQ5N0ZC
QjU2NTYyMzAeFw0yMjA5MDgxOTQ1MzVaFw0yMzA5MDcxOTUwMzVaMDMxMTAvBgNV
BAMTKENCREE4MzAzQzFDRUJDRDFEM0RFMUZFNTVBNDVEOUFDNDg3MzgzRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLd7sIwvYp64KZ+jhebeelbNe
K5D7ZgJYNxdf0MTR5FJq6Npsr2afxvVVqEbE0un1+qJjIng5fx/olnu7qXCWLWdV
FAdZ6a1GfEw3rJyUXWudlTNwULNEL2neXCpUTEXQMm8sgWaFMEyR2JtaW67LUmOF
SUEdgcLxfPo6kF5vbBEtx/DiBcsVoUFvm7ko5vMOYL+ajx/91lfZlKzdAfApmtlK
RbAAH9tQPLqKSUpPRK65K8cwa69wgFQwkS7wGg0pDUuzEIdBcY8rO9TnMu1Rwi5I
pmIsV3nCyRL5uBevDIaXyo9oapwUGCPku/ugrZQZVmKyLkSPH4ZWCsHcPh1BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUy9qDA8HOvNHT3h/lWkXZrEhzg/wwHwYDVR0j
BBgwFoAUzWcg4Jbis7WHXe8fZfbZf7tWViMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzlt
OEgvMC9DRDY3MjBFMDk2RTJCM0I1ODc1REVGMUY2NUY2RDk3RkJCNTY1NjIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENjcyMEUwOTZFMkIzQjU4
NzVERUYxRjY1RjZEOTdGQkI1NjU2MjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMTEttVnRKeWFNSFo2b0FTUEI5VWsybW9TNUdtaldha1J2djVEcUM5bThILzAv
MzIzODMwMzQzYTM0MzY2NTYzM2EzMjMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgERuwiMA0GCSqGSIb3DQEBCwUA
A4IBAQCqZWqCobH+J47jBv8qTcU7hSsJLHT9GeVMZWCBnx+ft0GbQNRhpGYscsky
G6F9ur15IAXQ7tY/1GYKT0YuV0b7Ay3fPuQKVEieCcVMaeV3rhtEvWDwfMSj43ll
v61G+WXUasohqxRNm9yaCxVfDOeVW5mawb3UhgknjKiVylTuv6B9ddSNmuGoOmbH
q/JrYwUspTbNk3XyhSZCiQWsnPyfwVI3ROg2guSO8SPyTaOV2l044+uojvcZbCp+
phD8e6lz6y6yP4EfAmyVfcTX9090xN9tX6ynptRt9o1KEDLZE+vK0phdgrYG1WJ1
X4YQ8ChKZ0RmGFQ7zNBUo6i5v5jE
-----END CERTIFICATE-----