Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a3a2f33322d3332203d3e20323632373733.roa
File:                     323830343a323166343a3a2f33322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          nAHNPWv4M9wlMfMuZKBllY/ypA5ClXbz3ME6MK4qlDM=
Subject key identifier:   7C:28:FB:E1:B6:10:49:A8:B2:6E:DE:8F:BF:E3:27:CD:60:30:0F:14
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5E00DFBDA3FF89E6FB345ED3F6B4A469026C6131
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a3a2f33322d3332203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        2804:21f4::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:00:df:bd:a3:ff:89:e6:fb:34:5e:d3:f6:b4:a4:69:02:6c:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=7C28FBE1B61049A8B26EDE8FBFE327CD60300F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:52:a6:c4:72:df:f3:70:b2:9d:f9:a2:2e:
                    d4:5e:1a:e8:64:ee:79:9d:58:aa:6a:22:80:31:3f:
                    0c:48:06:9a:ae:b9:d6:37:83:39:60:d1:45:99:46:
                    7f:35:ce:0d:f9:f7:2b:bf:e3:d7:f2:4b:c7:c0:81:
                    7b:88:b4:14:6f:fb:5c:77:72:0c:5f:46:28:14:b4:
                    e8:a3:87:ed:21:bd:3e:cd:fc:d0:fe:a4:e0:a7:44:
                    88:78:86:da:07:4c:8a:92:10:dc:f4:80:0f:4d:13:
                    98:10:f9:fc:72:8d:69:ce:ec:f5:02:b1:79:91:df:
                    41:c4:89:70:70:eb:c4:ee:c4:fe:a3:71:6c:54:9b:
                    86:d3:60:56:4d:61:bc:e4:73:f2:d1:70:5b:1b:ba:
                    2a:40:e7:d9:56:f2:95:e1:11:b9:0a:1f:15:8f:74:
                    75:01:22:ce:16:d4:d3:ee:73:2f:ec:8f:60:09:a4:
                    e5:ca:ed:2d:c1:fb:3a:06:bb:02:31:04:f0:be:87:
                    9c:10:55:82:5b:0c:1b:37:f4:90:6b:bb:42:c8:8a:
                    96:4d:a2:76:18:46:b5:4b:09:cd:93:93:e6:14:91:
                    65:b9:dd:db:d3:35:87:02:e4:31:2b:be:ec:43:2f:
                    b4:2c:39:8c:f6:b7:e8:94:d6:67:e7:61:c8:b3:42:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:28:FB:E1:B6:10:49:A8:B2:6E:DE:8F:BF:E3:27:CD:60:30:0F:14
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a3a2f33322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f5:5c:1a:8b:a8:ff:5c:f6:25:98:af:0b:54:72:70:06:4b:
         da:2c:e1:9b:0f:e2:10:26:d8:9d:2f:37:66:d5:22:db:4b:d4:
         8f:23:3f:9c:90:6b:e7:af:e1:2c:c6:7d:b5:e5:ea:56:c2:84:
         c8:77:8d:c5:25:af:c7:60:64:30:80:be:18:4a:af:94:79:6c:
         7c:3b:29:fd:be:a1:45:ff:5c:56:7a:06:37:5b:c9:c9:04:62:
         03:e0:1c:6b:bd:f7:26:c5:ee:b5:77:78:52:06:ad:15:ae:0b:
         ef:57:a8:02:90:58:81:bf:a9:77:03:2d:86:da:84:52:19:d6:
         44:ae:50:9a:6d:f2:2b:df:0e:b8:52:64:73:60:e9:cc:43:f8:
         8c:07:93:51:f9:ec:f3:cf:bc:f4:07:6e:6e:37:44:3c:c2:ad:
         21:11:32:93:6a:62:29:33:ff:88:e2:96:5c:28:75:b7:76:43:
         1a:af:08:93:71:0b:5a:8a:7b:f4:ca:c0:6b:27:31:c0:f8:6d:
         1e:34:31:09:fe:27:66:c7:d9:a6:ff:d7:93:47:43:e5:d8:47:
         be:b6:2c:7a:63:16:38:c2:9c:49:c4:87:d6:ad:9b:eb:a2:ef:
         5e:b8:15:36:3f:06:3a:d1:68:16:3c:43:18:9b:1f:51:ed:8c:
         da:e9:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----