Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a6666663a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a323166343a6666663a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          FM3ewEnbLB8+5Wsq4LrxjdhWABmfzmgg8c7ulRJN7V4=
Subject key identifier:   F3:AE:0E:69:74:8A:C7:2E:A6:E1:8E:E4:DD:F6:77:EE:6D:37:99:A9
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       1B63A053C6B5BB4E3A9960CD922F5262AB2BE0E8
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a6666663a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:26 +0000
ROA not before:           Wed 14 Aug 2024 12:03:26 +0000
ROA not after:            Wed 13 Aug 2025 12:08:26 +0000
asID:                     262773
IP address blocks:        2804:21f4:fff::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:63:a0:53:c6:b5:bb:4e:3a:99:60:cd:92:2f:52:62:ab:2b:e0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:26 2024 GMT
            Not After : Aug 13 12:08:26 2025 GMT
        Subject: CN=F3AE0E69748AC72EA6E18EE4DDF677EE6D3799A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:22:ce:90:bc:00:6f:04:ac:84:5e:4d:f0:
                    9c:e7:07:6d:6e:b7:db:37:2c:1f:6a:6e:a9:3e:d2:
                    74:b7:13:13:98:9e:e5:6b:3c:ca:27:b4:da:fe:3f:
                    12:78:a7:55:5a:a8:4e:b2:73:5d:4c:e3:c7:b6:12:
                    73:e4:c1:50:ee:57:c6:2a:d4:d2:5c:a9:dd:39:e6:
                    93:e1:32:4f:7d:82:30:d4:fb:02:72:09:68:65:10:
                    81:d7:20:d5:73:53:f8:0a:3b:1a:da:73:81:f1:9d:
                    03:e0:c2:ad:8f:7c:f6:97:ef:52:13:4f:dd:eb:c3:
                    94:17:66:d2:b7:1a:6f:71:5b:c1:fa:db:6b:7c:80:
                    c3:f9:e9:96:b2:a0:54:dd:48:9f:e3:0d:91:2e:bb:
                    10:fd:6e:57:84:87:41:2f:8c:17:d7:ce:5f:7e:17:
                    80:0b:df:61:a8:64:ee:59:e2:41:73:30:cb:17:2c:
                    0d:5d:a5:85:4f:7f:d7:87:bd:48:54:01:63:19:66:
                    25:44:c3:3c:7d:70:d6:7e:e6:0e:31:cb:6d:2d:5e:
                    6a:71:19:26:1c:b8:31:a6:95:ac:c5:7c:a5:50:75:
                    2f:52:d9:7b:71:eb:01:a9:40:1a:60:67:a0:86:cc:
                    e1:a4:86:44:79:0a:2a:9e:45:c5:12:7a:da:a8:6d:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AE:0E:69:74:8A:C7:2E:A6:E1:8E:E4:DD:F6:77:EE:6D:37:99:A9
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a323166343a6666663a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f4:fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:16:a7:c9:4c:c5:aa:59:78:a0:db:d6:f0:54:91:42:88:ad:
         b4:2b:29:c0:d3:fa:fe:93:d5:03:ba:cc:4b:a8:40:2b:56:00:
         2c:ae:6c:47:03:a5:5a:b1:1a:95:4d:7b:db:0b:f8:cc:00:10:
         8b:5d:1f:eb:22:c2:fa:87:01:07:9d:44:bb:41:b2:51:2d:a9:
         2c:85:09:6a:02:db:a6:ba:fb:ad:2c:07:21:b6:af:3c:d6:39:
         fe:87:4a:f7:eb:4d:b1:ae:b8:92:e3:f8:e8:46:a2:7e:2b:90:
         96:ff:93:3e:2a:94:55:a8:c4:9a:56:dd:d2:0f:58:cf:f9:43:
         6b:69:2d:4b:11:47:f9:a1:07:fe:a1:c1:6d:79:3a:40:3a:59:
         9e:0d:dd:c8:c3:0f:9a:8a:56:a1:04:f9:7f:93:2b:f8:44:55:
         ab:59:04:4c:54:54:83:e0:67:92:e8:3d:22:3d:d9:41:3e:32:
         4b:28:72:00:9d:89:aa:3f:9c:c0:d7:6d:a4:c5:74:db:97:8b:
         ae:bb:85:1f:21:c6:1e:69:b6:7e:46:42:c3:98:23:a4:bb:c3:
         62:17:5d:62:19:97:dc:10:9b:ec:45:f8:77:2d:a6:55:09:11:
         59:6f:49:12:57:69:d4:0e:ab:d5:de:5d:97:25:0f:9d:6e:1c:
         6a:75:a0:7f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUG2OgU8a1u046mWDNki9SYqsr4OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA4MTQxMjAzMjZaFw0yNTA4MTMxMjA4MjZaMDMxMTAvBgNV
BAMTKEYzQUUwRTY5NzQ4QUM3MkVBNkUxOEVFNERERjY3N0VFNkQzNzk5QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiOCLOkLwAbwSshF5N8JznB21u
t9s3LB9qbqk+0nS3ExOYnuVrPMontNr+PxJ4p1VaqE6yc11M48e2EnPkwVDuV8Yq
1NJcqd055pPhMk99gjDU+wJyCWhlEIHXINVzU/gKOxrac4HxnQPgwq2PfPaX71IT
T93rw5QXZtK3Gm9xW8H622t8gMP56ZayoFTdSJ/jDZEuuxD9bleEh0EvjBfXzl9+
F4AL32GoZO5Z4kFzMMsXLA1dpYVPf9eHvUhUAWMZZiVEwzx9cNZ+5g4xy20tXmpx
GSYcuDGmlazFfKVQdS9S2Xtx6wGpQBpgZ6CGzOGkhkR5CiqeRcUSetqobfr9AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU864OaXSKxy6m4Y7k3fZ37m03makwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzIzODMwMzQzYTMyMzE2NjM0M2E2NjY2NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCH0D/8wDQYJKoZIhvcNAQELBQAD
ggEBAIgWp8lMxapZeKDb1vBUkUKIrbQrKcDT+v6T1QO6zEuoQCtWACyubEcDpVqx
GpVNe9sL+MwAEItdH+siwvqHAQedRLtBslEtqSyFCWoC26a6+60sByG2rzzWOf6H
SvfrTbGuuJLj+OhGon4rkJb/kz4qlFWoxJpW3dIPWM/5Q2tpLUsRR/mhB/6hwW15
OkA6WZ4N3cjDD5qKVqEE+X+TK/hEVatZBExUVIPgZ5LoPSI92UE+MksocgCdiao/
nMDXbaTFdNuXi667hR8hxh5ptn5GQsOYI6S7w2IXXWIZl9wQm+xF+HctplUJEVlv
SRJXadQOq9XeXZclD51uHGp1oH8=
-----END CERTIFICATE-----