Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa (raw, json)
Hash identifier:          /7ekOTNtyYACU5wksNvVyTZP367LJc6gdI6HfHYstT8=
Subject key identifier:   4A:C2:55:17:2A:52:F1:1C:41:F1:2F:2D:6C:21:56:42:3A:6D:D9:D8
Certificate issuer:       /CN=B139021633E78ADF542F9ECA67CAD78E1B463ED2
Certificate serial:       161E4D1C32FA8E73423C918E7E8C4E1C18A0620C
Authority key identifier: B1:39:02:16:33:E7:8A:DF:54:2F:9E:CA:67:CA:D7:8E:1B:46:3E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa
Signing time:             Tue 09 May 2023 16:36:54 +0000
ROA not before:           Tue 09 May 2023 16:31:54 +0000
ROA not after:            Tue 07 May 2024 16:36:54 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1e:4d:1c:32:fa:8e:73:42:3c:91:8e:7e:8c:4e:1c:18:a0:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B139021633E78ADF542F9ECA67CAD78E1B463ED2
        Validity
            Not Before: May  9 16:31:54 2023 GMT
            Not After : May  7 16:36:54 2024 GMT
        Subject: CN=4AC255172A52F11C41F12F2D6C2156423A6DD9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:09:0d:6c:38:24:a4:54:0f:b8:d5:c6:82:
                    e0:1a:92:ef:c9:a3:f2:3c:d9:92:5a:18:cc:14:be:
                    31:c3:d2:12:31:fa:33:e0:2b:33:4a:05:d4:70:79:
                    96:dd:2a:0f:2b:79:35:8d:02:a4:43:75:50:df:55:
                    07:5e:28:8f:20:fe:34:53:73:2b:12:bb:e4:d3:c8:
                    6e:ec:d2:7d:f6:ef:5e:22:41:c1:ca:6e:19:56:1e:
                    0a:af:1f:dc:57:77:d5:9f:da:31:14:f1:b7:80:e3:
                    41:5b:a8:46:25:c5:ef:3f:c1:d5:e1:5f:01:cc:65:
                    86:ec:e8:10:0a:1d:f0:10:92:73:30:5d:15:69:80:
                    5a:6b:24:30:f9:11:17:a7:60:fd:d2:14:3a:9a:51:
                    4d:c7:ca:ea:5b:b3:6b:32:86:15:3d:fa:22:fb:63:
                    36:7e:a0:92:6f:1a:ac:35:2f:28:35:5e:6b:55:ff:
                    ac:a1:a2:66:07:94:62:93:dc:13:12:48:9e:8c:d5:
                    62:6f:71:bd:93:d3:b3:84:ba:fc:72:7d:f7:91:aa:
                    cd:90:f4:5c:52:b7:8e:58:91:55:77:13:20:8f:35:
                    1b:ec:62:a2:db:ba:35:ce:68:a7:24:fb:47:ea:97:
                    b5:74:a2:cd:24:79:3c:c8:80:7e:55:4b:8a:1d:e3:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C2:55:17:2A:52:F1:1C:41:F1:2F:2D:6C:21:56:42:3A:6D:D9:D8
            X509v3 Authority Key Identifier:
                keyid:B1:39:02:16:33:E7:8A:DF:54:2F:9E:CA:67:CA:D7:8E:1B:46:3E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B139021633E78ADF542F9ECA67CAD78E1B463ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34302d3430203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:67:2c:8f:6d:93:17:a4:89:dc:42:77:e1:6f:96:dd:55:87:
         85:0a:bb:ce:25:39:ca:4a:0b:0b:8c:84:c2:c9:78:c6:58:f3:
         03:71:07:fa:df:e6:ca:b1:16:c6:a3:73:4d:43:f3:7e:db:a0:
         35:e0:22:b8:93:3c:8f:ee:70:3e:26:ba:9e:f0:c4:43:c6:f4:
         8b:81:19:5e:de:40:7a:7a:29:3e:8a:f9:92:e5:49:5c:03:ea:
         c2:fc:27:82:22:80:dd:82:01:a5:8b:4e:a5:15:4d:d1:81:ca:
         50:44:c3:97:e1:04:5b:ce:5a:6b:80:a2:21:b4:cf:67:b0:0f:
         b5:8b:cc:ea:65:6b:b5:0f:af:2a:20:31:4f:c0:0b:78:a8:a5:
         dc:40:52:de:5d:72:77:1f:a2:c9:29:23:b3:81:7d:6e:7a:f3:
         52:af:86:b8:e3:46:f6:e6:1a:ec:fc:31:4d:ca:31:60:8c:18:
         a9:cb:9e:dc:7f:a1:96:52:69:d5:99:7f:8a:1c:97:fc:3c:75:
         b8:65:58:85:86:db:17:7b:7b:65:08:6f:77:4a:43:d9:aa:31:
         57:a1:3b:7f:83:24:e3:f4:41:a0:c9:a9:8c:85:58:cf:41:10:
         5c:17:0e:f5:d4:bc:17:0d:b5:a5:dd:19:e9:38:2c:db:dc:2c:
         c2:d5:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----