Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/323830343a3139633a3a2f33322d3430203d3e20323632373535.roa
File:                     323830343a3139633a3a2f33322d3430203d3e20323632373535.roa (raw, json)
Hash identifier:          J2da9Iew3Whh76zAxcnj0Bkxw4aZqZP+JpJ/FHFoNg0=
Subject key identifier:   90:BB:0F:70:22:C4:77:68:B3:9B:B8:86:38:8B:3B:DA:C2:E1:95:76
Certificate issuer:       /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial:       4E7DE276D7399E404BD8E55C98EC02BFDB64CFDD
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/323830343a3139633a3a2f33322d3430203d3e20323632373535.roa
Signing time:             Wed 01 Mar 2023 18:00:00 +0000
ROA not before:           Wed 01 Mar 2023 17:55:00 +0000
ROA not after:            Wed 28 Feb 2024 18:00:00 +0000
asID:                     262755
IP address blocks:        2804:19c::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7d:e2:76:d7:39:9e:40:4b:d8:e5:5c:98:ec:02:bf:db:64:cf:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
        Validity
            Not Before: Mar  1 17:55:00 2023 GMT
            Not After : Feb 28 18:00:00 2024 GMT
        Subject: CN=90BB0F7022C47768B39BB886388B3BDAC2E19576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:0c:93:36:46:75:48:46:77:40:ce:ff:75:
                    69:4b:4e:d9:cb:f1:5b:c7:f2:32:5d:bd:50:c7:5b:
                    3f:21:6f:64:6a:65:56:78:25:82:98:1f:01:89:71:
                    1c:4f:b2:e9:1f:50:d7:92:ca:17:d3:8f:56:df:01:
                    7e:91:37:ea:c9:a7:af:56:b4:3c:59:cb:fd:89:c7:
                    89:11:d5:df:a8:a4:3c:a1:70:2e:4f:89:b2:48:6b:
                    00:7f:02:1b:56:cd:fb:05:59:6c:25:66:6c:92:5e:
                    4f:58:93:be:e7:36:ec:a9:0a:8f:73:c9:ea:ac:70:
                    c6:07:02:30:c3:f2:7d:53:ce:ff:e5:b4:17:62:e3:
                    af:57:7b:ff:3f:97:c3:23:ec:50:20:b8:3c:3b:95:
                    f9:f0:02:fc:1b:01:cf:25:62:02:a9:df:5f:af:b7:
                    5c:c0:ce:22:06:ec:a7:f4:e8:3d:8d:c5:ba:be:47:
                    65:c9:3f:2a:ca:f7:01:88:c7:5d:61:08:49:7e:19:
                    67:88:1d:73:88:6d:4f:fa:1b:1c:eb:88:fa:c7:00:
                    1f:1e:70:f2:52:3e:a7:fb:58:af:6d:57:56:e5:91:
                    51:96:d8:67:db:22:1b:eb:2a:fc:c8:aa:f3:2e:41:
                    66:34:f5:5b:48:99:fc:e9:09:ab:df:03:84:06:e1:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BB:0F:70:22:C4:77:68:B3:9B:B8:86:38:8B:3B:DA:C2:E1:95:76
            X509v3 Authority Key Identifier:
                keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/323830343a3139633a3a2f33322d3430203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:26:12:45:a4:a7:51:30:49:f8:07:00:e5:e8:d1:44:de:97:
         f1:12:18:d3:6f:e4:84:3c:ae:2d:03:68:97:45:69:e0:85:d0:
         f9:95:f1:1d:4f:d8:58:cb:e0:15:60:29:a7:f6:3e:da:9c:1d:
         2f:3f:d1:b1:b8:1e:81:e9:d1:69:fe:36:81:88:f5:61:32:72:
         61:d2:79:72:62:43:7e:5e:d2:3d:d9:14:b2:3e:ec:b4:7a:0b:
         2b:25:ee:15:cd:dc:84:5e:11:13:81:9a:17:b6:15:0c:20:a5:
         e6:ae:99:c0:c0:58:1b:da:e0:83:b7:bc:0c:89:90:3c:92:01:
         f2:5d:02:5b:6e:af:cd:8b:f0:81:c7:30:5c:7f:c9:21:54:4a:
         94:36:23:c7:87:42:26:80:25:c5:11:4a:92:52:d2:4a:f6:98:
         f9:60:0c:96:08:75:9c:b0:66:ab:7e:36:5f:c3:56:92:16:b3:
         04:f7:21:7b:70:ca:a0:37:f2:5b:27:d1:49:66:f5:56:89:a0:
         82:07:b3:31:f1:2b:4b:5a:c8:1d:9a:f2:3c:19:8a:4f:9e:ab:
         ec:cf:e2:7e:e8:8f:df:10:91:79:35:f0:b8:96:5b:26:ba:3e:
         46:ff:cc:80:59:38:8a:9f:ae:41:e2:2e:90:cd:50:90:60:0a:
         69:fa:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----