Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f33322d3334203d3e20323632373733.roa
File:                     323830343a3966383a3a2f33322d3334203d3e20323632373733.roa (raw, json)
Hash identifier:          zXtnQAWM52qV97IYzDydMZKYmRnPnxYuYahudcQywko=
Subject key identifier:   0C:F7:2A:33:A7:D5:97:F0:44:17:78:D3:CB:B2:B8:0A:60:6F:8A:E5
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       36DD5CC3341C9EC259958AC54B5EBBDDFC842C3E
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f33322d3334203d3e20323632373733.roa
Signing time:             Wed 14 Aug 2024 12:08:25 +0000
ROA not before:           Wed 14 Aug 2024 12:03:25 +0000
ROA not after:            Wed 13 Aug 2025 12:08:25 +0000
asID:                     262773
IP address blocks:        2804:9f8::/32 maxlen: 34

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:dd:5c:c3:34:1c:9e:c2:59:95:8a:c5:4b:5e:bb:dd:fc:84:2c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 14 12:03:25 2024 GMT
            Not After : Aug 13 12:08:25 2025 GMT
        Subject: CN=0CF72A33A7D597F0441778D3CBB2B80A606F8AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:dc:c7:9f:b3:ef:c0:25:b6:23:b2:53:c0:
                    55:ea:eb:79:bc:dd:33:bf:f0:70:8c:bc:ba:78:5e:
                    0d:ef:59:c3:c3:53:a3:ec:ea:a7:66:15:d9:6a:0f:
                    84:bd:3f:fc:3c:df:ef:81:c0:dd:a1:99:45:06:0e:
                    02:81:91:f2:bd:0e:7a:d2:87:38:ec:f4:6e:8e:47:
                    20:c9:15:de:33:63:16:3b:7f:8b:19:b5:7a:64:af:
                    2b:85:b3:08:05:d7:75:7a:e7:f7:b8:b9:a4:82:00:
                    67:9f:22:d3:4e:e5:4c:77:97:7f:4f:8d:57:3f:e8:
                    b9:b3:0e:14:f3:bf:a2:86:1c:f4:5d:e2:a6:85:20:
                    fb:37:74:29:65:56:bf:2b:8b:6c:7d:47:fb:8b:85:
                    67:e8:30:d3:a9:01:af:e1:c8:cb:cf:8f:fb:d0:e7:
                    21:e7:e4:ac:10:4c:dd:b4:bd:2c:72:18:8b:02:58:
                    77:4a:5b:05:db:63:fb:1a:d5:e3:03:c0:c6:a4:b3:
                    5d:7e:24:98:f8:4f:c9:35:a4:71:51:25:0b:b9:e4:
                    25:de:46:8f:26:a2:1c:22:b8:79:de:c3:ca:e4:1d:
                    9d:e6:f8:84:36:cb:c6:08:39:a1:45:e1:1e:9c:5c:
                    3a:05:81:6a:6c:92:3f:d1:27:1a:24:f3:55:8f:50:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:2A:33:A7:D5:97:F0:44:17:78:D3:CB:B2:B8:0A:60:6F:8A:E5
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/323830343a3966383a3a2f33322d3334203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:ba:55:55:02:c7:ef:b1:90:47:1c:1f:fa:34:ff:61:77:34:
         9c:30:57:c4:6b:46:b6:fd:fe:20:f6:e8:94:e4:c5:fc:2f:21:
         46:16:08:b6:5f:20:ec:2a:1b:31:6a:b2:ed:14:a4:83:7f:64:
         df:4c:e3:f8:c9:28:fa:e0:a6:fe:86:4e:61:94:8f:50:d9:3e:
         d2:bc:ba:92:39:65:d5:ce:fa:36:35:be:25:2f:7c:6c:50:2a:
         17:7f:65:99:d8:f2:f7:85:14:8e:fb:2e:3b:2c:14:2e:d2:71:
         8d:a8:97:1b:7d:39:99:a2:2c:3c:fd:b8:35:66:2b:a2:ea:c2:
         d3:fe:65:57:26:94:41:75:d9:4c:0b:ff:9d:2d:9d:66:b8:82:
         67:9c:d8:08:15:00:f1:25:fd:a3:b0:b7:55:c6:9a:3d:26:a7:
         5c:23:78:2a:0e:99:07:eb:f8:13:89:c3:e7:69:bf:54:93:3e:
         d1:01:ac:ae:9c:75:2a:61:3c:19:5a:20:da:e1:e5:09:8b:7f:
         71:d2:2c:51:a2:28:ae:8f:e9:e8:c6:e2:7d:35:43:e6:fb:28:
         05:70:7b:f8:4d:49:13:8e:ba:14:4b:85:6b:b0:77:5f:f1:13:
         38:6e:59:a8:dc:59:f7:2e:a5:5d:25:94:cc:98:0c:e8:6c:e7:
         ba:a3:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----