Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138322e302f32332d3233203d3e203532393531.roa
File:                     3137372e31312e3138322e302f32332d3233203d3e203532393531.roa (raw, json)
Hash identifier:          SvTra5w4QxTcsIjOAaq8li8/5QMrBOud2CUJmZ9EiQ0=
Subject key identifier:   2B:B1:FE:D9:10:B0:43:C8:FA:C5:FD:88:D1:DA:9F:3B:F1:D7:55:4B
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       1FF1DC73E6C0FB6E6D8B23C99E16CF59F692CF7A
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138322e302f32332d3233203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:00 +0000
ROA not before:           Thu 28 Sep 2023 17:39:00 +0000
ROA not after:            Thu 26 Sep 2024 17:44:00 +0000
asID:                     52951
IP address blocks:        177.11.182.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f1:dc:73:e6:c0:fb:6e:6d:8b:23:c9:9e:16:cf:59:f6:92:cf:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:00 2023 GMT
            Not After : Sep 26 17:44:00 2024 GMT
        Subject: CN=2BB1FED910B043C8FAC5FD88D1DA9F3BF1D7554B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:6e:79:5b:a8:e6:ea:57:2a:9b:21:01:9a:
                    6b:9d:f9:26:9c:14:35:ae:31:5e:88:5b:65:df:ce:
                    42:01:33:e8:ff:93:f7:02:cb:1e:53:71:19:48:5f:
                    fa:68:3a:5e:ca:2f:5a:10:11:ac:ef:61:98:4e:64:
                    44:80:b9:86:e3:d8:6d:13:ea:db:4d:68:3f:98:d1:
                    93:f7:be:0f:df:26:5e:a6:56:5d:46:19:56:7e:12:
                    16:d1:c2:80:ee:79:ce:96:50:fa:c2:4d:d7:4a:4e:
                    73:5d:21:9f:e9:cd:bf:01:e3:1b:66:bb:a5:27:1d:
                    60:34:4e:06:47:17:0f:a0:ee:bf:b1:45:3a:f3:b4:
                    ec:1e:2c:60:84:62:d6:68:1b:2d:0b:be:f1:a5:ca:
                    12:f3:8e:a6:e8:50:8f:d7:91:29:07:fd:7e:29:6d:
                    17:d3:b0:50:0d:bd:2e:bf:90:94:a0:69:3b:bc:57:
                    ce:88:1f:1a:a5:e0:b8:7a:43:39:0b:0c:4a:83:8d:
                    a0:7a:8c:f6:41:25:be:da:12:cc:c2:b6:f9:32:04:
                    ae:6f:23:74:92:c7:d1:36:7a:b8:83:06:e9:8b:72:
                    cf:f5:18:6c:d6:29:0b:22:d8:4d:73:1a:aa:bb:e2:
                    d2:78:4a:35:0f:1b:63:11:bd:47:73:b9:cd:d5:06:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B1:FE:D9:10:B0:43:C8:FA:C5:FD:88:D1:DA:9F:3B:F1:D7:55:4B
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137372e31312e3138322e302f32332d3233203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:95:c4:11:26:c0:a8:9e:c7:7f:54:00:98:f5:03:60:20:42:
         de:e3:35:e1:24:d3:38:c1:ed:c8:9d:0e:3a:a3:f7:fe:a3:ad:
         57:8c:b4:23:36:7c:79:5a:20:90:5a:ee:44:1e:43:46:5c:d2:
         bb:15:00:7e:d2:ed:af:88:c6:e9:6c:19:df:2f:2d:04:44:1e:
         02:6c:59:19:83:e5:a5:80:f2:3e:52:d2:ae:7c:5d:ea:79:75:
         b5:f0:2c:0c:0b:13:bd:36:25:1d:95:ff:28:27:69:64:00:84:
         76:f2:28:bb:97:4f:41:88:8f:66:17:9c:af:12:fd:24:e3:40:
         b2:dd:f7:66:b3:be:75:2d:0b:8b:ca:c2:a7:6c:3b:19:26:96:
         3c:33:69:6c:06:dc:21:b5:a6:a4:36:d8:d6:18:c2:12:b1:b2:
         07:dc:78:ac:7e:44:64:0d:63:a1:ac:14:eb:3e:2d:04:fe:2c:
         56:13:34:fc:24:db:4e:b6:26:f3:ac:b0:ff:0d:b2:db:36:c0:
         60:cf:f3:9e:82:2d:9c:70:be:47:df:d4:7b:1d:b8:7d:ac:6d:
         03:f7:2c:05:5f:9d:1a:3c:df:ff:cb:c4:37:81:36:80:a7:85:
         19:e3:f2:84:62:18:33:5b:1e:6c:84:62:cd:47:9a:d0:1b:8b:
         1c:ad:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----