Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3438203d3e203532373036.roa
File:                     323830343a6337303a323030303a3a2f33362d3438203d3e203532373036.roa (raw, json)
Hash identifier:          HJlEl7JkxDgyzVq6zDLcc8uW3dkxaegfQF695iupZ4A=
Subject key identifier:   3D:9A:EE:1D:5E:6D:0C:89:D2:19:E5:2D:55:06:8D:54:27:39:47:81
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       62583068502770944C135C0BAF737518F6311A70
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:28:49 +0000
ROA not before:           Thu 20 Jul 2023 14:23:49 +0000
ROA not after:            Thu 18 Jul 2024 14:28:49 +0000
asID:                     52706
IP address blocks:        2804:c70:2000::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:58:30:68:50:27:70:94:4c:13:5c:0b:af:73:75:18:f6:31:1a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:23:49 2023 GMT
            Not After : Jul 18 14:28:49 2024 GMT
        Subject: CN=3D9AEE1D5E6D0C89D219E52D55068D5427394781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:9c:05:2d:8e:36:87:62:d2:b9:bd:cc:2e:
                    ee:d2:3d:d9:fd:3f:35:95:7f:cf:51:ee:6e:18:89:
                    bb:3f:23:ce:6a:d6:a7:7a:b1:ff:36:5d:98:87:f9:
                    8e:2d:23:f2:ea:81:12:6a:fc:24:4c:1c:ea:cd:d4:
                    2e:66:03:8f:87:dd:7e:e3:f4:5c:7d:df:5a:09:cc:
                    08:3b:6b:70:d3:ff:a9:0c:ff:fb:b0:84:50:86:fe:
                    41:10:3c:ea:11:5d:95:05:43:3e:e2:a2:ce:14:7e:
                    4e:e4:f4:e7:7a:9e:a6:ab:63:41:d6:3e:2e:0c:ac:
                    89:77:1b:36:4b:90:b4:3d:3c:34:f7:cf:7b:df:30:
                    6c:03:8c:25:4c:f8:46:1c:a5:13:e3:f5:a2:df:dd:
                    71:cd:c8:96:3f:77:1e:df:e3:2f:75:e9:c0:21:58:
                    d1:80:ec:0c:3e:dd:57:e7:61:c7:20:ad:a9:13:b0:
                    0e:11:92:1c:0a:7b:6f:40:93:b3:85:8b:89:82:b5:
                    67:4e:e2:a1:88:b0:4e:6e:b3:9b:a4:a5:9f:45:03:
                    78:df:bb:f0:f1:93:8d:bc:92:44:21:f4:a3:8b:5e:
                    e8:fd:c3:5f:98:fb:0a:c6:b5:0c:92:01:90:f7:94:
                    cc:23:60:57:23:48:57:58:0f:b1:4e:9a:4b:40:49:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9A:EE:1D:5E:6D:0C:89:D2:19:E5:2D:55:06:8D:54:27:39:47:81
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:f4:9a:01:94:22:0b:a6:8d:0e:75:98:40:92:de:4b:c4:
         e7:f6:eb:4b:78:b7:76:62:d9:a2:db:77:a9:e1:74:c1:3f:57:
         1d:f4:1d:37:ed:cc:21:2e:2d:34:64:10:51:22:99:63:0b:b2:
         1e:0c:84:11:62:96:de:28:a1:8e:60:2c:44:97:c0:99:20:b3:
         af:73:d8:d9:2b:fd:03:87:91:cd:3e:14:cb:25:08:a4:a9:bc:
         40:87:e6:6b:b1:c7:fe:91:96:7c:a4:59:bb:7a:fd:70:de:4e:
         75:9d:83:d5:19:61:17:57:30:24:7e:28:37:d6:7c:39:5d:27:
         ba:ba:56:c2:fd:1e:4d:c2:76:40:0f:d9:36:19:d9:c1:b1:25:
         8b:7e:36:ee:47:14:d1:30:15:4e:04:a9:5a:b8:3f:e3:89:42:
         ae:f0:9b:ac:9a:cf:96:a2:c8:ee:40:c8:32:b2:30:7b:11:ef:
         fb:62:5d:6b:4a:85:01:11:a1:0d:af:bd:78:f7:e6:f7:95:17:
         29:18:6f:3f:66:8c:af:0c:84:c8:57:25:c8:9d:7e:bf:dc:a0:
         64:0a:a7:e2:bc:ba:6a:12:91:97:cd:47:b0:ae:e8:8d:65:65:
         b4:c5:ac:92:ff:90:77:0e:c4:52:5b:4e:3b:24:ef:f9:ac:f7:
         24:42:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----