Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3330303a3a2f34342d3434203d3e20323639303834.roa
File:                     323830343a356633383a3330303a3a2f34342d3434203d3e20323639303834.roa (raw, json)
Hash identifier:          JjjUylE2VCM8nADv2RemLTANLMsFQ3HGwzZ9cmiMyeU=
Subject key identifier:   83:2D:5C:A4:90:A5:FF:E4:6E:E7:F9:B0:3F:86:0C:13:11:F9:C6:94
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       54AD5625065F9480A9FECC9707F433E8A9A407E6
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3330303a3a2f34342d3434203d3e20323639303834.roa
Signing time:             Mon 29 May 2023 17:29:28 +0000
ROA not before:           Mon 29 May 2023 17:24:28 +0000
ROA not after:            Mon 27 May 2024 17:29:28 +0000
asID:                     269084
IP address blocks:        2804:5f38:300::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ad:56:25:06:5f:94:80:a9:fe:cc:97:07:f4:33:e8:a9:a4:07:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: May 29 17:24:28 2023 GMT
            Not After : May 27 17:29:28 2024 GMT
        Subject: CN=832D5CA490A5FFE46EE7F9B03F860C1311F9C694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:e4:d2:f5:54:c6:85:5e:18:f5:c2:61:4c:
                    e6:89:52:45:4e:99:b5:61:b3:83:9d:7f:bf:77:73:
                    a2:29:98:a6:fb:64:cf:93:69:ac:79:19:28:b2:a3:
                    de:9f:da:15:97:f8:d0:93:bf:af:42:a1:29:01:54:
                    e3:cf:12:19:a5:5f:0a:4d:97:2e:c0:3b:d7:8b:04:
                    2b:b1:4c:97:77:a4:31:d9:89:26:fc:5a:1c:1c:a4:
                    87:bb:02:1b:12:63:2d:0b:c3:07:29:59:72:2e:cf:
                    44:3e:64:6f:26:fe:4a:3a:67:81:50:e0:dd:15:a0:
                    80:8a:23:1a:c2:4b:fc:3c:4d:59:44:9d:1f:34:ff:
                    20:49:dd:e5:4e:18:9d:66:49:61:da:34:53:0b:e4:
                    41:7a:0e:15:43:d3:c7:d6:66:cd:a9:b5:69:f0:03:
                    a6:22:28:ca:e1:6d:84:2a:08:ab:88:2e:6a:05:c3:
                    11:91:d9:37:34:9c:95:87:99:27:b0:5d:7a:9e:75:
                    5a:88:e9:78:54:dd:82:50:e6:c7:04:69:f2:2e:e6:
                    59:e2:b5:2f:d2:3e:10:ab:1b:94:2a:c4:10:3d:f1:
                    42:85:3a:72:f3:81:66:3b:9d:e0:eb:a5:81:91:c7:
                    7d:dc:ee:18:1a:c8:ed:75:3c:05:7f:52:f2:01:ec:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2D:5C:A4:90:A5:FF:E4:6E:E7:F9:B0:3F:86:0C:13:11:F9:C6:94
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/323830343a356633383a3330303a3a2f34342d3434203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f38:300::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:75:ae:7d:9e:b6:b6:f0:dc:63:70:13:0f:31:9d:fa:c5:d2:
         c6:72:79:96:43:7c:b0:2c:42:bf:76:86:e5:89:d5:05:de:71:
         ad:24:bd:4f:c7:dc:07:27:f2:db:3e:b8:36:1d:cc:02:eb:67:
         17:fb:e7:33:69:e4:a2:6e:0b:b7:10:67:3d:7d:35:79:6b:80:
         a6:2e:d5:b6:10:07:06:fa:32:07:87:88:6c:69:31:dd:85:a2:
         1e:11:4f:64:ce:ca:96:95:a0:b3:4d:9e:01:7b:b6:17:78:40:
         a6:da:97:76:ee:b5:eb:1d:fc:97:f0:c4:28:47:d7:d2:60:d9:
         28:66:90:fa:23:0c:12:0c:6b:91:84:11:d2:14:61:91:57:71:
         42:2b:19:32:e1:0d:a1:70:45:38:8d:5d:bd:db:e7:53:56:b9:
         91:a2:20:1e:76:53:f5:a2:c8:04:a3:7d:af:a7:86:dc:dc:12:
         ea:ce:1c:fc:33:be:19:69:f1:98:29:be:af:41:3e:52:10:4c:
         88:22:c5:02:19:22:d4:8b:8e:23:a6:c9:75:0c:cc:3d:45:e5:
         66:99:17:a0:ce:40:2a:95:22:27:68:00:93:a9:b8:85:01:fc:
         d1:4d:39:ef:7f:a9:6f:86:a5:46:72:60:94:e4:c4:6f:d6:16:
         45:e7:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----