Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136362e302f32332d3233203d3e203532393531.roa
File:                     3137302e37392e3136362e302f32332d3233203d3e203532393531.roa (raw, json)
Hash identifier:          5jl+DBJEPkBU4yqkIVtFG15VTmjDN1tmO9HrzzuoDsc=
Subject key identifier:   67:6E:47:05:89:94:DC:E4:53:1E:A0:0C:F3:E7:BB:97:C8:51:72:13
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       271B64C8299959952B2108E01D71D900921F03EA
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136362e302f32332d3233203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:43:59 +0000
ROA not before:           Thu 28 Sep 2023 17:38:59 +0000
ROA not after:            Thu 26 Sep 2024 17:43:59 +0000
asID:                     52951
IP address blocks:        170.79.166.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1b:64:c8:29:99:59:95:2b:21:08:e0:1d:71:d9:00:92:1f:03:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:38:59 2023 GMT
            Not After : Sep 26 17:43:59 2024 GMT
        Subject: CN=676E47058994DCE4531EA00CF3E7BB97C8517213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:b1:f0:6d:6d:b7:5a:16:56:cb:92:41:13:
                    44:e4:8e:79:7a:51:89:8e:07:1f:4a:cc:2e:c6:f8:
                    d9:2a:29:7e:df:af:d8:fa:a7:7a:4b:47:5e:fe:5b:
                    e0:98:61:53:81:fe:d3:06:e2:d0:8e:d6:71:1c:d4:
                    51:91:4a:b5:ab:12:51:04:f8:da:1a:90:16:d1:2a:
                    d9:71:8f:0a:9a:6e:da:31:4e:3b:33:2c:3e:97:49:
                    09:49:0e:37:e6:b7:93:6d:97:d1:93:81:d8:e4:da:
                    ff:65:29:1c:0d:8e:74:92:16:78:b8:a4:36:9b:79:
                    9b:66:9b:9e:9e:3b:25:03:07:11:0b:ef:f7:0f:82:
                    ec:5b:3f:b0:97:87:b1:eb:f8:2a:ae:11:7d:91:82:
                    cc:c9:4f:9d:0b:9a:01:6a:d9:48:d0:61:73:d0:31:
                    9d:c8:81:bd:14:44:97:98:57:dd:b8:b0:fa:79:22:
                    2c:0d:49:e5:19:60:54:f9:7c:38:fb:2a:db:6e:b0:
                    05:31:4f:7e:ee:9e:45:a0:06:29:fb:eb:c1:12:f3:
                    5a:21:f3:1a:4d:5b:50:83:4a:f6:51:75:8b:80:86:
                    77:32:68:ba:f4:f9:a9:3a:09:52:68:b0:c4:39:5e:
                    36:cb:49:89:da:da:60:cb:04:cd:50:fd:dc:08:bb:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:47:05:89:94:DC:E4:53:1E:A0:0C:F3:E7:BB:97:C8:51:72:13
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136362e302f32332d3233203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:29:a4:27:da:6f:e0:1d:a1:dc:7e:d7:69:82:88:8e:b0:15:
         ca:8a:ce:31:f2:34:a9:17:76:79:30:fb:d9:65:7d:de:b7:ab:
         dd:e3:6c:fb:b8:66:3c:b8:db:f6:01:6d:ec:fa:c0:73:4d:ca:
         21:e4:2f:b6:75:9b:21:ae:6b:57:92:31:6f:e6:17:c9:98:b7:
         06:37:14:17:cb:ca:ed:cf:f3:fd:40:ff:38:17:1d:38:d4:ef:
         a2:78:43:b3:7d:36:56:74:d9:af:d4:5a:03:08:e4:51:cc:e1:
         42:ab:6c:b3:23:45:21:dc:f8:35:f9:c5:37:e8:b2:8e:fe:e9:
         8b:35:dd:33:26:72:d2:0d:f1:3a:ca:b4:e6:ae:85:4f:12:97:
         3d:ac:33:41:98:9d:db:b5:9e:a2:6d:bf:c8:36:83:5e:24:fa:
         2e:19:01:e8:24:15:d2:cc:9d:d4:8f:da:aa:9f:c3:e8:bc:8e:
         47:da:e7:31:c7:98:a3:c1:03:65:58:60:81:5e:9f:b8:23:df:
         5d:3a:fe:98:0e:c5:f5:0c:4a:75:94:3b:66:c0:94:09:c1:3b:
         7e:6e:86:58:8d:4f:1f:9b:f1:c0:3e:f1:60:bd:aa:d0:6c:71:
         ba:57:79:62:f9:49:01:0e:09:3c:b7:4a:6f:db:b4:07:18:a9:
         da:1c:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----