Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/323830313a38613a3a2f33322d3332203d3e203533313837.roa
File:                     323830313a38613a3a2f33322d3332203d3e203533313837.roa (raw, json)
Hash identifier:          nCmJ1UKQ9Fq84If09pAkxHyHtEtO7/66XHeTN5RyQv4=
Subject key identifier:   A9:1B:6A:69:A3:9B:67:EC:68:2A:21:DC:AC:C6:4F:3A:68:6C:78:03
Certificate issuer:       /CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
Certificate serial:       18DA8B843B201C13027388EFB9DC15D39310F501
Authority key identifier: CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/323830313a38613a3a2f33322d3332203d3e203533313837.roa
Signing time:             Mon 27 Nov 2023 19:40:05 +0000
ROA not before:           Mon 27 Nov 2023 19:35:05 +0000
ROA not after:            Mon 25 Nov 2024 19:40:05 +0000
asID:                     53187
IP address blocks:        2801:8a::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:8b:84:3b:20:1c:13:02:73:88:ef:b9:dc:15:d3:93:10:f5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349
        Validity
            Not Before: Nov 27 19:35:05 2023 GMT
            Not After : Nov 25 19:40:05 2024 GMT
        Subject: CN=A91B6A69A39B67EC682A21DCACC64F3A686C7803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:ff:9d:9e:fd:93:f2:5b:57:69:d6:c9:dc:
                    e0:e6:06:b2:9f:a3:1a:18:63:93:6b:81:6e:58:f9:
                    d2:01:54:79:f6:86:95:33:35:d0:c8:53:c6:04:fd:
                    94:93:37:71:42:1f:4a:fd:10:2c:53:9e:e6:b1:3e:
                    dc:45:de:70:a7:9a:1b:3a:88:d7:ab:11:6f:96:1a:
                    28:84:e4:35:45:85:3c:70:68:72:7e:1e:4f:6c:cf:
                    ee:4d:77:7e:fc:5d:8b:7e:f5:54:52:b4:c0:2d:aa:
                    7e:92:95:f0:43:ff:c1:29:ec:06:c7:cf:1d:4e:65:
                    9c:77:65:f4:9f:31:24:74:67:52:bc:ab:58:f5:e2:
                    d4:61:3f:63:ed:21:1c:5f:71:ab:95:af:bc:f2:d9:
                    5f:ac:c6:95:7b:d5:ef:f6:86:d0:9a:af:2d:9e:d6:
                    eb:a8:e9:25:59:59:f7:21:78:1f:49:5b:b8:9b:8b:
                    90:fc:3c:bf:8c:81:0b:61:0c:d8:3d:15:5f:22:bc:
                    3e:09:53:af:82:b8:e1:f8:1d:1c:ce:f3:e8:ee:04:
                    38:22:47:ab:0d:c1:e4:32:e2:24:5e:9a:ef:60:7b:
                    8e:70:1a:d0:45:e6:a4:c0:13:e4:4a:af:72:73:19:
                    c0:2a:18:42:fd:05:e0:53:af:4b:bc:f2:8d:a8:0e:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:6A:69:A3:9B:67:EC:68:2A:21:DC:AC:C6:4F:3A:68:6C:78:03
            X509v3 Authority Key Identifier:
                keyid:CE:1D:B6:F4:E2:65:06:C0:BB:AA:57:6E:EB:42:0D:AE:BF:AB:C3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE1DB6F4E26506C0BBAA576EEB420DAEBFABC349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/323830313a38613a3a2f33322d3332203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:8a::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:68:36:ba:fc:a8:c0:d5:db:ab:50:f8:60:65:fd:a5:37:46:
         96:81:f0:f0:3f:5d:80:a7:2e:2a:57:98:b5:b8:bc:06:65:c9:
         75:2b:d0:4b:73:2d:30:d6:05:d1:cc:cf:e2:31:6b:2a:e1:72:
         f3:a6:5e:a6:ad:3e:86:85:3b:2d:78:ae:47:e9:e4:6d:fa:10:
         aa:54:02:51:de:59:b6:43:7f:c0:5d:65:c7:f2:f6:b2:08:dc:
         e4:d0:e3:0a:07:3a:da:7b:27:ff:50:a0:d9:9d:d1:35:1b:02:
         b7:79:2e:27:61:19:d2:47:03:6a:96:fe:b0:6a:63:b5:4b:94:
         7b:a1:d4:58:66:4a:ac:f3:c9:f2:bc:35:2c:53:36:9a:8d:92:
         94:82:63:1b:7e:1d:6b:21:9e:d3:ff:d2:68:92:dd:df:54:de:
         72:7b:81:90:b4:2d:03:00:24:91:0a:14:85:e4:ad:bd:f9:7b:
         20:4e:c4:6e:25:35:7a:6b:dc:92:b5:1e:d2:9f:7c:7a:6a:05:
         6b:c3:fe:d9:aa:88:6c:40:58:1e:c1:82:d5:b6:87:9a:f5:bd:
         34:8f:ec:ee:b6:c3:33:0b:f7:9e:83:03:5b:da:e5:35:83:7c:
         1b:1e:02:f4:4a:63:c1:a5:7c:eb:3d:77:b3:4f:92:9f:ed:cb:
         9c:85:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----