Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3530303a3a2f34302d313238203d3e20323733373237.roa
File:                     323830343a386235383a3530303a3a2f34302d313238203d3e20323733373237.roa (raw, json)
Hash identifier:          8gUz2PPsApdE2NrW4OKIoW+0CNRIc0jYYxaNpGbe37Q=
Subject key identifier:   7C:60:01:99:6E:F2:8D:F5:7A:9E:65:D6:03:75:E6:F3:0E:0A:42:B3
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       76F78FE28A2BF4DC4F2153D20C2D569EE359191B
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3530303a3a2f34302d313238203d3e20323733373237.roa
Signing time:             Tue 16 May 2023 14:59:36 +0000
ROA not before:           Tue 16 May 2023 14:54:36 +0000
ROA not after:            Tue 14 May 2024 14:59:36 +0000
asID:                     273727
IP address blocks:        2804:8b58:500::/40 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f7:8f:e2:8a:2b:f4:dc:4f:21:53:d2:0c:2d:56:9e:e3:59:19:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 16 14:54:36 2023 GMT
            Not After : May 14 14:59:36 2024 GMT
        Subject: CN=7C6001996EF28DF57A9E65D60375E6F30E0A42B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:8a:7f:7c:18:87:0f:9c:f1:da:2b:d8:d9:
                    6c:b4:22:37:eb:e1:9d:41:a6:40:34:11:93:f2:52:
                    9d:f2:e9:d8:1a:2d:ac:78:89:95:30:d1:fa:34:fb:
                    b0:2a:0e:af:ce:15:8b:ca:2e:47:81:6d:ea:4f:3f:
                    1c:58:ee:a3:db:a4:5c:8a:94:96:4d:9a:60:f9:b3:
                    b5:ea:9b:d1:04:c3:d8:38:5c:e6:48:83:06:01:02:
                    10:2f:43:66:dd:6a:39:df:78:ed:1a:18:a8:c8:5d:
                    a1:cf:d9:e2:0d:cf:ef:46:4d:b9:d9:b1:60:6f:af:
                    a6:40:a2:0f:c3:cf:31:a8:96:97:0e:56:e5:dc:f5:
                    4a:3c:a2:5b:14:c6:c0:fa:c3:e2:80:e4:75:68:f8:
                    3a:63:82:c2:3a:e1:e1:1f:e1:a9:71:42:74:d8:e4:
                    d8:5c:5f:70:d7:b5:de:fc:ac:e6:e8:bf:1d:9d:22:
                    38:55:59:da:02:58:b9:b9:ed:48:78:70:be:2f:c9:
                    92:de:b5:d6:d3:4e:fb:67:ab:24:bc:a9:8b:ef:cc:
                    fa:e5:41:5f:6d:d5:89:40:cf:30:a6:5d:46:49:89:
                    fa:69:f1:f3:27:dc:27:75:9e:6d:11:30:90:08:c2:
                    80:53:32:fb:8a:2a:c1:b6:88:2e:b0:7f:b0:bb:52:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:01:99:6E:F2:8D:F5:7A:9E:65:D6:03:75:E6:F3:0E:0A:42:B3
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3530303a3a2f34302d313238203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:40:8e:f1:09:6f:b7:6a:e2:69:da:05:ba:e8:3e:a5:15:
         01:5d:d8:35:ab:e7:6d:d1:79:81:4b:c3:10:1f:77:29:c4:1a:
         40:a0:08:b1:83:6c:b4:68:3f:f7:a4:d8:5e:31:4d:78:2b:8f:
         8d:3b:0e:4a:02:87:01:9b:03:1c:5a:7d:21:93:08:df:09:b9:
         4b:2f:9b:b8:f5:6c:3c:a8:0a:7d:46:5c:e8:90:27:86:7b:aa:
         56:3a:02:f3:d8:ff:04:71:08:19:5a:19:58:a4:46:20:04:9e:
         66:23:e4:65:39:a0:a0:52:1c:1a:6d:cc:24:9d:47:6d:7a:0c:
         4d:74:c4:1a:b1:40:09:36:84:b6:24:a2:9b:fb:78:e5:9b:c4:
         68:78:00:71:e5:f5:3d:d0:13:bb:86:be:cb:51:83:a8:d9:ef:
         be:7e:84:7d:47:d9:16:4c:09:76:9d:fc:86:5e:c8:a6:8b:da:
         ca:22:b7:db:ae:e5:46:b0:ab:d4:28:b4:64:51:d3:49:77:40:
         d9:4d:1b:b5:a9:46:38:a5:ed:c1:5f:59:e1:4c:9c:5d:32:84:
         36:2b:f0:59:61:71:fa:2e:76:6a:46:68:bd:6d:6a:77:1e:02:
         98:e4:86:ca:e6:5f:f9:4a:b0:03:08:45:d2:56:af:71:1f:ab:
         39:48:51:9b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdveP4oor9NxPIVPSDC1WnuNZGRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGMEY5Q0U4QUYwMkMyRjc4NjJDN0E1OTRDRUZEM0U0
NEFBQjcwRjAeFw0yMzA1MTYxNDU0MzZaFw0yNDA1MTQxNDU5MzZaMDMxMTAvBgNV
BAMTKDdDNjAwMTk5NkVGMjhERjU3QTlFNjVENjAzNzVFNkYzMEUwQTQyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GIp/fBiHD5zx2ivY2Wy0Ijfr
4Z1BpkA0EZPyUp3y6dgaLax4iZUw0fo0+7AqDq/OFYvKLkeBbepPPxxY7qPbpFyK
lJZNmmD5s7Xqm9EEw9g4XOZIgwYBAhAvQ2bdajnfeO0aGKjIXaHP2eINz+9GTbnZ
sWBvr6ZAog/DzzGolpcOVuXc9Uo8olsUxsD6w+KA5HVo+DpjgsI64eEf4alxQnTY
5NhcX3DXtd78rObovx2dIjhVWdoCWLm57Uh4cL4vyZLetdbTTvtnqyS8qYvvzPrl
QV9t1YlAzzCmXUZJifpp8fMn3Cd1nm0RMJAIwoBTMvuKKsG2iC6wf7C7Uv4PAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUfGABmW7yjfV6nmXWA3Xm8w4KQrMwHwYDVR0j
BBgwFoAUDPD5zorwLC94YsellM79PkSqtw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhzNjlYejFXQktqSlNGYWVneDlwb29HUFkzd2N3anNWUG9Eem1ZSjk2
ek0vMC8wQ0YwRjlDRThBRjAyQzJGNzg2MkM3QTU5NENFRkQzRTQ0QUFCNzBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDRjBGOUNFOEFGMDJDMkY3
ODYyQzdBNTk0Q0VGRDNFNDRBQUI3MEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYczY5WHoxV0JLakpTRmFlZ3g5cG9vR1BZM3djd2pzVlBvRHptWUo5NnpNLzAv
MzIzODMwMzQzYTM4NjIzNTM4M2EzNTMwMzAzYTNhMmYzNDMwMmQzMTMyMzgyMDNk
M2UyMDMyMzczMzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEi1gFMA0GCSqGSIb3DQEBCwUA
A4IBAQASDkCO8Qlvt2riadoFuug+pRUBXdg1q+dt0XmBS8MQH3cpxBpAoAixg2y0
aD/3pNheMU14K4+NOw5KAocBmwMcWn0hkwjfCblLL5u49Ww8qAp9RlzokCeGe6pW
OgLz2P8EcQgZWhlYpEYgBJ5mI+RlOaCgUhwabcwknUdtegxNdMQasUAJNoS2JKKb
+3jlm8RoeABx5fU90BO7hr7LUYOo2e++foR9R9kWTAl2nfyGXsimi9rKIrfbruVG
sKvUKLRkUdNJd0DZTRu1qUY4pe3BX1nhTJxdMoQ2K/BZYXH6LnZqRmi9bWp3HgKY
5IbK5l/5SrADCEXSVq9xH6s5SFGb
-----END CERTIFICATE-----