Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33322d3332203d3e20323638303333.roa
File:                     323830343a353666303a3a2f33322d3332203d3e20323638303333.roa (raw, json)
Hash identifier:          OXdTuTpZPax+irYX2EQkI1TZcv7rwYr32BtjjPIp05s=
Subject key identifier:   6F:5C:AA:2F:3E:FC:62:70:42:9E:76:5C:B8:9B:01:DC:B1:4B:08:F3
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       0D957CAB618DC81CC2E0FE4F345998F4D3F233E8
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33322d3332203d3e20323638303333.roa
Signing time:             Thu 10 Apr 2025 12:16:52 +0000
ROA not before:           Thu 10 Apr 2025 12:11:52 +0000
ROA not after:            Thu 09 Apr 2026 12:16:52 +0000
asID:                     268033
IP address blocks:        2804:56f0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 12:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:7c:ab:61:8d:c8:1c:c2:e0:fe:4f:34:59:98:f4:d3:f2:33:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Apr 10 12:11:52 2025 GMT
            Not After : Apr  9 12:16:52 2026 GMT
        Subject: CN=6F5CAA2F3EFC6270429E765CB89B01DCB14B08F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:d1:4f:05:70:3f:f3:e4:47:f2:d5:33:68:
                    2e:0e:17:39:6e:cc:e2:d5:6a:4e:d3:3a:2d:35:78:
                    52:8a:e3:e7:c5:25:4f:3d:a4:ea:e4:9e:0a:7f:5b:
                    a5:c9:8f:66:31:67:7e:57:b0:bc:11:40:55:c3:81:
                    9c:b6:ca:3e:b5:17:73:17:31:5c:b0:2d:64:dc:3c:
                    da:ba:ee:03:99:73:d1:c3:5e:bc:cc:69:06:a6:df:
                    77:b4:fd:cf:52:ea:8e:ba:3a:01:8b:a3:fa:ac:4a:
                    ac:dd:3d:77:fb:e7:78:e3:83:d5:b6:21:1f:88:ba:
                    7b:e9:c9:f7:0d:f6:40:ff:b3:29:13:7f:93:56:fa:
                    cb:18:cb:42:13:f1:26:b9:02:95:ed:49:41:fc:eb:
                    20:b7:70:22:52:72:96:be:d3:b1:dc:51:0c:77:45:
                    84:cd:87:7c:07:4c:9b:8b:49:a3:9a:ab:3f:4f:e9:
                    fe:48:b7:eb:f0:e1:22:d0:68:52:07:e0:4f:5d:24:
                    29:1f:00:96:c7:ac:b7:28:25:e6:c3:b4:94:af:a7:
                    b8:df:4e:1b:41:7b:23:5b:c0:dd:a0:40:30:9c:c7:
                    a0:17:a4:2d:40:1f:46:93:6e:81:0a:ee:b0:18:28:
                    24:f1:1f:33:c9:e6:f8:df:76:cb:5c:a3:d0:b9:74:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5C:AA:2F:3E:FC:62:70:42:9E:76:5C:B8:9B:01:DC:B1:4B:08:F3
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a3a2f33322d3332203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:66:38:6a:5b:dc:c3:c3:49:e8:46:3a:e0:0f:9c:af:27:
         73:be:01:90:6a:df:f7:77:bf:95:f1:f8:5b:9e:1a:bb:6c:a6:
         c3:06:fe:d7:8b:6a:44:8a:b0:09:10:dc:55:25:66:61:6c:ac:
         4d:0e:db:95:82:58:81:f3:ce:d6:c7:23:34:8e:89:67:48:ad:
         01:5a:38:08:66:f1:1a:48:a1:f5:91:14:8b:bf:6e:58:3a:87:
         a7:92:14:cc:1f:f8:59:b9:8e:d5:68:55:54:60:f4:53:83:36:
         77:9f:89:43:90:b2:d7:af:fe:98:a3:25:3f:c1:de:6f:65:f0:
         88:4f:8b:52:69:3f:59:e1:91:6f:25:3b:21:52:b3:c4:52:a0:
         49:99:ac:a6:bc:d2:ad:da:ee:f7:7c:ff:a4:72:78:4e:dd:80:
         1d:11:b1:fa:19:56:0c:4a:85:29:9c:78:06:3b:69:27:08:f4:
         a9:fd:52:1e:97:9a:f0:5b:52:dd:b2:15:1f:60:86:b3:fd:12:
         a1:4d:6d:4e:e2:b4:5d:99:1e:39:a6:25:77:82:15:8a:25:c7:
         21:b3:13:62:c9:bf:56:d9:1e:e2:65:13:b4:90:c8:9c:02:30:
         1e:00:bf:b4:84:24:52:96:99:73:e4:4a:f0:c9:15:8f:0f:a3:
         7a:e6:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----