Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3530303a3a2f34302d3430203d3e20323733373237.roa
File:                     323830343a386235383a3530303a3a2f34302d3430203d3e20323733373237.roa (raw, json)
Hash identifier:          GOTHRPUJH/SHfkBW3GOpk2irdJpM1cy5JrkaV5P2EAc=
Subject key identifier:   67:C1:D4:66:38:CE:3C:B6:1F:FE:D1:2D:D0:CA:1F:A3:8C:49:54:86
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       37F21C7EE2E2531661D3B86ECDAD236F01FE5634
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3530303a3a2f34302d3430203d3e20323733373237.roa
Signing time:             Thu 18 May 2023 18:58:02 +0000
ROA not before:           Thu 18 May 2023 18:53:02 +0000
ROA not after:            Thu 16 May 2024 18:58:02 +0000
asID:                     273727
IP address blocks:        2804:8b58:500::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f2:1c:7e:e2:e2:53:16:61:d3:b8:6e:cd:ad:23:6f:01:fe:56:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 18 18:53:02 2023 GMT
            Not After : May 16 18:58:02 2024 GMT
        Subject: CN=67C1D46638CE3CB61FFED12DD0CA1FA38C495486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:8d:61:5c:40:90:b8:65:a5:a8:8f:28:96:
                    81:67:72:37:1c:36:0c:59:04:3b:bf:4a:74:20:5f:
                    b6:c0:01:2e:d0:78:b6:d1:75:d8:4c:57:ee:25:ec:
                    09:6b:dc:62:2a:30:99:d1:71:9b:74:bf:44:03:ee:
                    f8:79:98:e2:c8:9d:76:83:95:17:16:04:60:1a:24:
                    15:a0:5a:19:59:02:c0:8d:09:5e:60:8e:fa:39:67:
                    44:1c:6d:57:99:aa:d2:56:e6:75:79:13:ea:5b:f5:
                    5f:51:0f:31:07:57:40:fb:60:61:ff:4e:d8:06:a3:
                    c2:62:48:04:65:75:3a:b9:dc:17:0e:ef:c8:80:dd:
                    0c:b1:ef:62:80:cd:98:ab:13:c2:54:30:24:0e:9b:
                    fa:91:d5:8d:71:c0:5c:65:a5:88:52:8f:91:dd:34:
                    8f:32:f0:42:7b:13:55:b4:b5:58:a2:e1:62:d2:b1:
                    c5:79:a2:30:c1:ea:cc:67:e2:98:7a:46:7e:d2:29:
                    9a:b8:0b:5c:73:b1:1a:5b:9c:1b:49:88:5b:f9:0d:
                    fa:b6:ef:2f:49:4b:9f:0c:07:bf:1c:55:60:13:a4:
                    c9:f8:86:96:96:1f:5e:f3:1c:72:ee:29:f5:63:64:
                    fc:1d:12:ec:a7:b4:5c:df:ef:69:4f:31:cf:eb:a6:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:D4:66:38:CE:3C:B6:1F:FE:D1:2D:D0:CA:1F:A3:8C:49:54:86
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3530303a3a2f34302d3430203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:69:af:79:0c:ea:74:63:8e:fa:56:91:f5:7f:e5:8c:97:c2:
         81:4b:cb:fd:93:8e:7d:47:de:99:4d:42:a0:37:43:87:fb:80:
         1c:af:82:33:e3:dc:d7:dc:6b:00:9d:d1:94:cf:62:19:e0:dd:
         58:e8:32:a4:0e:d6:9b:9d:bb:30:30:8c:ee:cd:d8:60:a3:67:
         6f:00:ce:d5:f6:b1:8c:d9:71:15:bd:a9:80:13:2e:a1:38:c6:
         a0:db:d1:dc:7a:bb:71:a9:3c:6c:7e:fd:83:60:4d:51:56:65:
         f0:e5:3f:21:c8:ed:ca:d6:5b:ee:fc:39:41:4a:63:ad:e5:d3:
         6b:34:72:54:bd:ae:a0:dc:e1:ff:66:4a:54:96:d8:ab:21:3d:
         c5:82:37:21:f4:80:d7:5b:89:58:f9:f4:ab:b7:6e:43:11:6e:
         45:e7:01:72:32:60:86:69:12:05:88:29:02:4f:09:db:45:58:
         f8:1c:2e:0c:a6:15:d3:ab:9d:e5:b8:ee:fb:8f:8c:4d:20:41:
         c1:ee:40:f0:a7:88:48:ff:4f:54:29:c8:f0:20:a4:81:65:d6:
         e4:43:03:d0:c8:85:9b:da:fe:37:df:39:fb:17:75:43:f2:5c:
         7b:d1:70:da:98:a8:16:76:0a:d2:cb:af:0a:ab:c0:f7:da:ef:
         b2:31:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----