Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3230203d3e203533313837.roa
File:                     3137372e382e39362e302f32302d3230203d3e203533313837.roa (raw, json)
Hash identifier:          +zSgqqrac6SI0MmxNtfplxvalvIsK2PuaLQYXJ+Eras=
Subject key identifier:   3D:31:14:79:77:68:0A:45:CA:43:5E:BF:3A:9C:41:D8:54:34:5F:18
Certificate issuer:       /CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
Certificate serial:       035AA8E3F92AC22AC001D499C7F48E49E54C201B
Authority key identifier: CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3230203d3e203533313837.roa
Signing time:             Mon 27 Nov 2023 19:40:05 +0000
ROA not before:           Mon 27 Nov 2023 19:35:05 +0000
ROA not after:            Mon 25 Nov 2024 19:40:05 +0000
asID:                     53187
IP address blocks:        177.8.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5a:a8:e3:f9:2a:c2:2a:c0:01:d4:99:c7:f4:8e:49:e5:4c:20:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
        Validity
            Not Before: Nov 27 19:35:05 2023 GMT
            Not After : Nov 25 19:40:05 2024 GMT
        Subject: CN=3D31147977680A45CA435EBF3A9C41D854345F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:cc:ca:20:7f:fb:86:6a:f9:70:b7:f8:0c:
                    a0:70:95:6c:dd:96:f7:6b:a7:95:8e:74:90:c1:39:
                    c7:5b:4a:72:22:c5:d4:68:fb:a0:c1:2b:0e:d4:96:
                    80:0a:e4:f5:74:d3:78:41:71:55:af:51:7e:f7:9a:
                    c2:d2:73:55:f8:78:41:16:fb:47:08:7e:ab:0d:c9:
                    74:61:21:c2:fd:98:c2:71:17:c2:92:00:6c:c2:d1:
                    5d:fb:f9:8c:45:a7:2b:73:08:39:a9:97:c3:88:39:
                    ea:4a:6f:fb:54:6f:6e:c5:f6:04:f6:da:d9:55:32:
                    0b:91:78:46:b1:18:cf:5f:fe:ef:5f:43:2f:b2:4e:
                    b7:ab:99:9f:9e:ac:b6:b9:ad:89:72:f2:78:00:03:
                    18:9a:40:e4:72:96:1f:86:ef:88:e2:67:35:02:b8:
                    3c:90:b2:4a:7c:15:b7:64:a7:f4:6e:e7:6a:6f:36:
                    4b:b0:08:41:57:e8:84:bf:b3:95:da:88:b4:4e:f9:
                    01:17:34:f3:0a:09:90:70:50:48:cf:65:b5:82:61:
                    28:fe:60:89:8d:8a:80:3f:7b:49:74:32:64:0f:d4:
                    61:3e:0e:66:8c:af:96:7a:25:dd:85:a1:0a:0a:53:
                    12:26:55:54:39:da:51:aa:2a:7f:68:9a:b3:be:cd:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:31:14:79:77:68:0A:45:CA:43:5E:BF:3A:9C:41:D8:54:34:5F:18
            X509v3 Authority Key Identifier:
                keyid:CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3230203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:b3:00:b2:e4:77:02:56:a7:c0:cc:3e:e7:fe:90:c1:5e:34:
         48:60:3b:55:ec:91:66:f1:12:0f:50:c2:ac:da:96:e3:0b:7b:
         fe:bf:10:40:65:74:f3:4f:ac:8b:9b:58:a1:6b:c7:8b:10:93:
         fe:d6:99:ee:17:9d:b2:d6:11:fd:25:1b:2e:be:46:6e:85:f6:
         b3:d2:d9:3b:36:ba:d2:f8:67:5b:82:c0:f4:10:a6:fe:af:f1:
         78:69:f5:d4:67:87:c8:4e:e8:1f:d0:44:31:a2:14:f1:da:e6:
         c5:6c:23:5f:d0:47:8e:29:3a:70:d5:ce:65:2f:0c:4a:c7:6a:
         1e:d1:95:f2:df:d5:89:69:c4:50:c3:fe:60:ff:f9:05:2e:c4:
         e7:72:45:09:69:95:d4:60:b6:94:c5:82:00:a8:6b:86:fe:3a:
         30:79:df:bf:b3:ce:37:07:aa:44:7e:94:d7:6c:cc:0a:f0:7c:
         9b:c3:51:19:05:75:3c:d2:93:f1:0a:55:95:0b:28:2c:60:1d:
         fb:97:26:46:a1:9d:e3:a5:2e:7d:d9:95:1a:63:a6:c5:2d:60:
         a7:71:9f:a4:89:0e:ec:84:dd:00:4f:e4:9d:d0:88:27:f0:e9:
         91:10:f2:f3:27:8c:ac:5f:c3:ef:3e:4a:89:37:e8:90:ff:62:
         72:ae:17:12
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUA1qo4/kqwirAAdSZx/SOSeVMIBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxREI2RjRFMjY1MDZDMEJCQUE1NzZFRUI0MjBEQUVC
RkFCQzM0OTAeFw0yMzExMjcxOTM1MDVaFw0yNDExMjUxOTQwMDVaMDMxMTAvBgNV
BAMTKDNEMzExNDc5Nzc2ODBBNDVDQTQzNUVCRjNBOUM0MUQ4NTQzNDVGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddczKIH/7hmr5cLf4DKBwlWzd
lvdrp5WOdJDBOcdbSnIixdRo+6DBKw7UloAK5PV003hBcVWvUX73msLSc1X4eEEW
+0cIfqsNyXRhIcL9mMJxF8KSAGzC0V37+YxFpytzCDmpl8OIOepKb/tUb27F9gT2
2tlVMguReEaxGM9f/u9fQy+yTrermZ+erLa5rYly8ngAAxiaQORylh+G74jiZzUC
uDyQskp8Fbdkp/Ru52pvNkuwCEFX6IS/s5XaiLRO+QEXNPMKCZBwUEjPZbWCYSj+
YImNioA/e0l0MmQP1GE+DmaMr5Z6Jd2FoQoKUxImVVQ52lGqKn9omrO+zVgnAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUPTEUeXdoCkXKQ16/OpxB2FQ0XxgwHwYDVR0j
BBgwFoAUzh229OJlBsC7qldu60INrr+rw0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5KWWladVFWQTZCNnlUaExWOExtazVZMnZjZGh6bWROUHhHcDk2Ulox
N0svMC9DRTFEQjZGNEUyNjUwNkMwQkJBQTU3NkVFQjQyMERBRUJGQUJDMzQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFMURCNkY0RTI2NTA2QzBC
QkFBNTc2RUVCNDIwREFFQkZBQkMzNDkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOSllpWnVRVkE2QjZ5VGhMVjhMbWs1WTJ2Y2Roem1kTlB4R3A5NlJaMTdLLzAv
MzEzNzM3MmUzODJlMzkzNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDM1MzMzMTM4
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASxCGAwDQYJKoZIhvcNAQELBQADggEBAC6zALLkdwJWp8DM
Puf+kMFeNEhgO1XskWbxEg9QwqzaluMLe/6/EEBldPNPrIubWKFrx4sQk/7Wme4X
nbLWEf0lGy6+Rm6F9rPS2Ts2utL4Z1uCwPQQpv6v8Xhp9dRnh8hO6B/QRDGiFPHa
5sVsI1/QR44pOnDVzmUvDErHah7RlfLf1YlpxFDD/mD/+QUuxOdyRQlpldRgtpTF
ggCoa4b+OjB537+zzjcHqkR+lNdszArwfJvDURkFdTzSk/EKVZULKCxgHfuXJkah
neOlLn3ZlRpjpsUtYKdxn6SJDuyE3QBP5J3QiCfw6ZEQ8vMnjKxfw+8+Sok36JD/
YnKuFxI=
-----END CERTIFICATE-----