Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137382e302f32332d3233203d3e203532393531.roa
File:                     3137372e31312e3137382e302f32332d3233203d3e203532393531.roa (raw, json)
Hash identifier:          2Fgr/n7gE6iXwfvQ9VQU1oH4076ySM6S+J21F7h+2uc=
Subject key identifier:   8D:64:B4:33:BF:51:CD:62:03:43:0F:51:F5:68:EC:9A:86:C5:CA:93
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       7A3B34BD724A58EE8FEC163D3CE8E739F5870C3C
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137382e302f32332d3233203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:00 +0000
ROA not before:           Thu 28 Sep 2023 17:39:00 +0000
ROA not after:            Thu 26 Sep 2024 17:44:00 +0000
asID:                     52951
IP address blocks:        177.11.178.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3b:34:bd:72:4a:58:ee:8f:ec:16:3d:3c:e8:e7:39:f5:87:0c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:00 2023 GMT
            Not After : Sep 26 17:44:00 2024 GMT
        Subject: CN=8D64B433BF51CD6203430F51F568EC9A86C5CA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:dc:1c:87:ff:9c:7d:37:2d:4f:16:5b:a8:
                    9d:d1:62:66:d9:db:23:49:8c:1c:b8:dd:f7:13:98:
                    68:c5:6a:0a:85:b7:99:ea:aa:b2:4e:d7:6d:f3:5f:
                    16:a9:2f:25:33:5e:e4:30:62:38:e4:10:66:0d:61:
                    bb:c6:2e:17:a1:45:98:83:b0:2b:72:8f:fa:e6:c2:
                    62:6d:3e:1f:b0:40:7e:ac:3f:1c:0a:bb:7e:6a:76:
                    1d:c4:f5:ee:9a:21:83:e8:04:05:c0:70:c0:ce:8f:
                    ee:da:f0:19:ce:06:5b:34:08:5c:de:5e:1a:69:2e:
                    1c:b5:27:56:be:8c:e5:46:ee:ba:80:09:00:8e:57:
                    c3:49:21:23:5d:d6:8b:74:34:cd:74:43:fb:5a:d2:
                    2d:0e:60:5c:d8:76:46:b5:95:c7:26:f4:f5:6b:6e:
                    2b:2b:7a:ca:fa:2d:ea:ef:43:3c:ec:c1:f1:6e:6f:
                    4d:b3:8e:b6:26:16:07:73:80:30:43:b1:f8:eb:2d:
                    d8:1b:d1:53:71:38:2f:0a:a6:af:f1:aa:a8:9d:62:
                    dd:76:79:6e:2e:7e:c3:12:15:6c:8b:e0:9b:00:ed:
                    dd:89:ef:6d:da:6d:c4:74:50:2d:0d:83:2e:a1:c5:
                    71:78:61:69:1d:0e:65:1b:e9:ad:fd:fe:bf:15:5a:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:B4:33:BF:51:CD:62:03:43:0F:51:F5:68:EC:9A:86:C5:CA:93
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3137382e302f32332d3233203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:ae:3a:21:99:a8:bc:8b:63:4b:6a:26:45:fc:60:68:5c:ea:
         dd:3b:55:02:14:a1:7d:e8:04:d0:77:d5:df:06:89:94:c1:e7:
         af:e7:fa:75:29:ee:90:97:61:02:7a:c0:e8:3c:24:ea:64:b5:
         b5:5f:39:b6:bc:77:cb:31:e0:14:cd:e4:f5:02:5f:2a:7e:78:
         50:61:07:17:42:5d:be:aa:0c:a9:b9:67:5e:ef:34:42:cf:8c:
         fb:9b:cc:91:e0:05:c6:80:d6:4a:5f:e4:f4:fa:70:18:b1:9e:
         7d:df:0e:f3:74:4a:d9:2e:7b:71:ad:20:1c:6e:5f:0c:a2:b5:
         d8:31:9b:c5:4e:b5:19:c8:0a:69:77:c1:8c:f9:e7:cd:ce:d7:
         0c:e3:fb:30:f6:fa:50:f9:67:3e:88:1e:62:79:a5:b6:9a:da:
         f2:96:51:17:02:ba:24:78:a1:29:dc:de:a5:fe:6d:30:69:c5:
         8f:f3:7a:79:91:c9:40:a4:44:64:55:a7:6f:3f:36:7d:e4:2a:
         8b:6b:d6:c4:fc:88:70:45:0e:5d:3c:62:9e:11:90:f8:e9:79:
         ec:c6:ea:52:37:3c:1b:cf:ca:0b:a2:4c:bd:28:b7:3b:28:a5:
         65:8d:de:28:17:51:ba:a9:38:ab:bb:5f:2b:65:d7:54:32:6f:
         50:56:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----