Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3332203d3e203631363231.roa
File:                     323830343a346433633a3a2f33322d3332203d3e203631363231.roa (raw, json)
Hash identifier:          /9iuXe4FjgUgib668/ec49WHa6F5asWklKzb4sSYA9Y=
Subject key identifier:   BE:65:F3:86:BA:03:AE:F4:CB:2E:C2:09:00:4B:E9:7D:3E:AB:C9:FE
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       4ED6F1315A5FEDDC916337B0C903E521BD310B62
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3332203d3e203631363231.roa
Signing time:             Tue 19 Nov 2024 21:21:36 +0000
ROA not before:           Tue 19 Nov 2024 21:16:36 +0000
ROA not after:            Tue 18 Nov 2025 21:21:36 +0000
asID:                     61621
IP address blocks:        2804:4d3c::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 13:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d6:f1:31:5a:5f:ed:dc:91:63:37:b0:c9:03:e5:21:bd:31:0b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 19 21:16:36 2024 GMT
            Not After : Nov 18 21:21:36 2025 GMT
        Subject: CN=BE65F386BA03AEF4CB2EC209004BE97D3EABC9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:e4:51:77:7f:4a:30:06:e8:54:d1:d8:82:
                    de:eb:36:31:73:6c:7a:bb:df:be:03:32:63:90:84:
                    bb:71:be:a4:65:95:c3:16:70:28:37:77:9d:d4:66:
                    08:9a:c4:a1:8d:7c:9a:33:9f:f8:f5:97:93:88:73:
                    f4:b3:7a:25:ab:0d:e5:24:94:c6:50:a2:c5:d7:8b:
                    62:e1:e3:57:0b:42:53:d4:ca:e1:38:8f:80:3e:62:
                    4b:8a:90:85:ae:8d:5c:37:86:5a:70:de:70:70:aa:
                    e8:6a:51:e2:42:ff:98:16:6f:c5:9d:bc:04:b2:6c:
                    78:02:ea:fe:3f:4c:3a:68:62:d9:35:39:15:4b:13:
                    49:d5:07:f7:f1:62:58:78:6a:52:05:86:69:13:65:
                    92:f8:44:b6:08:fa:16:c8:08:f5:1b:7a:b0:26:dc:
                    d5:e5:82:3c:5c:9c:8e:ce:5a:6a:6d:bb:ad:fc:11:
                    67:7a:3f:0d:a6:14:75:58:e2:9d:7d:92:46:45:72:
                    56:6f:c9:7f:9c:21:30:d4:bc:34:3f:81:c1:b5:2d:
                    bf:a9:38:da:dd:0a:1e:69:84:e4:a7:77:a5:93:65:
                    04:99:de:08:1a:e5:d7:45:80:0d:43:13:1f:f9:ba:
                    45:7a:f0:04:47:46:1f:c4:6d:ab:bd:a3:ad:1e:ee:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:F3:86:BA:03:AE:F4:CB:2E:C2:09:00:4B:E9:7D:3E:AB:C9:FE
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3332203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:a7:da:c1:50:12:38:21:41:07:be:74:e5:25:94:fe:fa:
         e1:b3:6f:83:67:8f:cb:c2:e9:14:5a:ca:51:d8:3b:a8:25:1e:
         a6:a4:69:39:8c:1c:82:f9:a3:80:b4:0a:04:d5:c9:47:ee:b8:
         bd:8e:7c:aa:23:88:5c:74:1b:aa:de:ef:c5:5c:01:3a:50:34:
         5d:68:28:b2:fb:c5:d4:e6:43:37:a5:fc:8d:44:47:89:29:d5:
         01:aa:d6:d6:60:cb:49:68:12:91:ff:fe:75:45:66:60:90:73:
         3b:2a:fb:22:7f:fc:24:73:91:68:5f:e8:dc:fb:20:fa:ee:71:
         84:e6:f2:e3:c3:db:15:61:16:95:cd:27:81:2a:d5:88:9d:9f:
         e8:6f:2b:f2:df:38:40:19:d9:0b:68:55:f3:92:46:b2:ef:a5:
         be:c6:0b:67:49:09:61:5d:95:7c:cc:8d:62:78:73:17:e1:18:
         ce:ea:2a:0a:3c:8d:b3:b6:b3:80:e7:03:a1:d3:fd:a1:de:20:
         79:2c:ec:5a:00:07:78:6c:7f:c1:c8:73:85:53:59:03:5d:73:
         02:d5:f9:23:3a:d5:48:d7:74:ad:d1:42:3d:c6:25:17:5c:29:
         ee:b2:37:e5:19:34:de:12:5d:e5:3a:f6:bb:e5:f0:16:d8:7c:
         c9:63:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----