Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (raw, json)
Hash identifier:          rqdtGv0EeNdgjFr/bkml5AbydRAV15SPuiCMpp4Aae4=
Subject key identifier:   A5:5F:90:16:9D:56:E4:50:42:D5:AB:2E:BE:DF:29:2A:32:15:BF:6F
Certificate issuer:       /CN=9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C
Certificate serial:       584A3F59F1C1F6F217F6E7316DC2D6A3E4B3FD4A
Authority key identifier: 9E:E0:AC:7E:38:B4:1D:5C:04:DC:A9:BF:B3:63:39:C2:72:9C:65:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
Signing time:             Mon 04 Sep 2023 15:43:29 +0000
ROA not before:           Mon 04 Sep 2023 15:38:29 +0000
ROA not after:            Mon 02 Sep 2024 15:43:29 +0000
asID:                     272581
IP address blocks:        2804:8578::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4a:3f:59:f1:c1:f6:f2:17:f6:e7:31:6d:c2:d6:a3:e4:b3:fd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C
        Validity
            Not Before: Sep  4 15:38:29 2023 GMT
            Not After : Sep  2 15:43:29 2024 GMT
        Subject: CN=A55F90169D56E45042D5AB2EBEDF292A3215BF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:5f:c0:9c:8c:74:37:cb:c5:b4:7c:37:e4:
                    3e:99:6d:62:5b:d9:f3:9e:2f:75:fc:62:9c:7b:af:
                    fe:fa:93:1b:a9:ba:4f:8f:a9:12:83:fd:c8:f2:f7:
                    54:9f:48:af:ec:15:d1:4e:bf:d6:65:91:23:5b:46:
                    fa:67:a2:26:6c:c1:60:65:d0:98:24:14:a9:b0:44:
                    59:24:db:6d:d9:f0:38:b4:7c:7a:7b:85:69:93:95:
                    67:ad:00:d3:aa:5b:a2:32:58:41:1e:1c:d0:11:e8:
                    ed:4f:07:71:3a:7a:ad:c5:64:29:65:23:96:a0:9e:
                    74:20:c6:35:13:d1:1b:72:59:59:cb:e2:89:fa:af:
                    b5:2c:54:26:03:82:9d:42:c7:d1:34:f8:43:69:c1:
                    21:c3:a5:33:90:3c:18:52:0c:15:cf:0f:c0:06:c9:
                    91:6a:7d:57:af:0c:82:94:6c:1f:24:81:b2:8e:0c:
                    dc:86:7d:1b:95:35:72:a7:38:f4:36:32:0a:3e:d1:
                    23:6f:21:13:67:20:d2:7b:f2:5f:e8:5a:af:bc:a3:
                    2b:7e:0f:34:e6:43:a9:94:df:2f:34:a0:e9:74:8a:
                    d0:76:35:04:82:b7:80:1e:a1:4a:c4:66:8c:8e:a4:
                    9f:9d:82:51:8b:f8:4f:0a:a6:ff:83:21:47:74:aa:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:90:16:9D:56:E4:50:42:D5:AB:2E:BE:DF:29:2A:32:15:BF:6F
            X509v3 Authority Key Identifier:
                keyid:9E:E0:AC:7E:38:B4:1D:5C:04:DC:A9:BF:B3:63:39:C2:72:9C:65:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:b8:a1:38:c1:d6:5f:23:e2:05:1c:d9:9f:1f:82:00:32:58:
         e5:3b:fb:84:ad:78:cd:a5:ce:b3:ef:6e:76:52:d0:33:7e:a4:
         d8:80:3e:a3:0a:cb:45:62:b2:e6:14:89:13:7e:99:bd:f0:82:
         a2:66:b0:8a:48:26:81:63:34:8b:1c:be:85:a8:20:7e:4c:7b:
         cb:7f:c6:5a:7f:5b:b6:bb:a5:af:86:7f:30:cd:13:73:1b:17:
         60:9c:ef:e5:a8:da:bd:33:65:d3:f5:33:ec:16:15:18:d8:1a:
         b6:23:a8:3f:af:05:b6:df:20:cf:40:c7:fe:c1:39:b7:8d:a7:
         e2:aa:95:4b:75:9d:ee:79:0f:0a:4c:2d:de:50:dd:1b:87:e0:
         ea:fe:bb:a6:4c:e8:6d:b4:47:52:f2:7a:2a:c3:25:24:d3:5b:
         5b:53:3a:7e:75:64:95:f3:cb:f9:a6:ac:73:b4:44:88:78:cb:
         08:66:25:34:b4:1d:fb:bf:22:a2:f5:43:e1:2f:b4:17:91:e7:
         27:6b:a8:60:9a:a4:f5:0c:44:10:49:cc:36:1c:bb:5c:31:06:
         40:6f:c2:cd:54:cd:e7:c0:d9:71:8d:bf:6e:26:05:c7:4f:25:
         ef:f5:62:a0:3c:df:1f:16:c2:9d:3f:39:56:c4:3a:61:d9:49:
         d3:b5:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----