Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/323830343a323932383a3a2f33322d3332203d3e203532393531.roa
File:                     323830343a323932383a3a2f33322d3332203d3e203532393531.roa (raw, json)
Hash identifier:          ukS+7h5Z5RvLlfTP3uBGbZz9lbztsOlYyB6o+GSUyoM=
Subject key identifier:   F4:2E:AE:B4:88:1B:84:34:A8:1A:9A:6F:8F:89:0F:9F:EB:C4:F0:28
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       49F4DC1EB031F173185F79765D5775B23AF28719
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/323830343a323932383a3a2f33322d3332203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 17:44:00 +0000
ROA not before:           Thu 28 Sep 2023 17:39:00 +0000
ROA not after:            Thu 26 Sep 2024 17:44:00 +0000
asID:                     52951
IP address blocks:        2804:2928::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f4:dc:1e:b0:31:f1:73:18:5f:79:76:5d:57:75:b2:3a:f2:87:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:39:00 2023 GMT
            Not After : Sep 26 17:44:00 2024 GMT
        Subject: CN=F42EAEB4881B8434A81A9A6F8F890F9FEBC4F028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:2c:39:8a:55:82:26:18:d9:c8:fd:a0:37:
                    e8:10:a3:13:d1:99:f8:1f:58:89:92:fe:ff:b7:1c:
                    a8:f1:91:f2:31:e0:ad:29:72:28:af:4f:c0:db:24:
                    74:7a:e2:b9:e8:e4:22:c3:e2:f8:c2:52:e8:9a:27:
                    a6:b7:ad:7a:6c:62:99:74:b4:70:4c:f7:0e:e2:9b:
                    f9:52:72:cc:c8:c0:0d:64:f8:33:6f:9f:3d:91:e0:
                    4f:9e:6f:f1:63:c8:00:79:35:2d:c4:1d:75:dc:ff:
                    cc:48:fe:70:f8:33:87:71:cd:97:14:27:39:98:69:
                    cc:ca:84:76:30:c6:24:4f:b5:8b:7a:60:e8:09:b6:
                    c4:b0:8d:00:ce:52:c5:91:e5:45:c5:1f:5a:ca:be:
                    31:b7:39:a4:fc:cd:e5:11:e7:9d:b1:67:5a:a8:75:
                    8b:f4:c8:44:32:6a:86:58:0e:e8:1a:0f:c9:6c:b4:
                    66:4a:33:a9:2e:42:2e:f0:30:d7:fd:91:84:17:79:
                    52:7e:22:1d:fd:f7:ac:9c:fc:c2:a2:2f:18:f7:bc:
                    58:47:27:55:a4:35:02:1c:9b:f3:d3:bc:42:99:d9:
                    85:2e:ea:6a:a0:6e:8c:b2:c7:3c:cc:13:3f:af:fd:
                    91:34:7e:7e:98:ce:00:4a:0d:4b:f4:b7:58:9c:0c:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2E:AE:B4:88:1B:84:34:A8:1A:9A:6F:8F:89:0F:9F:EB:C4:F0:28
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/323830343a323932383a3a2f33322d3332203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2928::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:9c:8b:69:a6:5c:8d:48:f6:ce:1c:f7:02:45:a9:75:0b:b4:
         e7:23:09:56:cf:b5:d1:eb:73:9c:3b:e4:2c:b0:60:19:b4:1e:
         9e:ba:16:e9:a1:aa:f0:03:11:8d:f3:55:5c:e6:9f:b6:43:ce:
         07:97:5d:52:8f:b0:1d:f0:70:f8:c8:1a:cd:7a:69:7c:0d:da:
         61:76:91:86:7f:ad:de:e7:3d:a8:2a:55:c4:12:49:30:84:b1:
         1d:91:12:bd:1d:b9:35:fe:06:d6:15:61:68:42:c3:59:0f:f3:
         03:b0:de:e6:36:72:90:80:e1:60:07:f8:ea:6d:e4:20:33:37:
         6a:ce:de:87:8c:7f:b7:21:95:ba:71:1b:f4:76:72:eb:98:9e:
         75:ea:e1:01:9f:8a:36:e8:af:d6:2f:f1:c7:bb:d3:f2:0b:9d:
         90:2c:0a:81:92:c6:23:22:5c:3b:d5:a2:36:ad:8b:38:90:de:
         46:b2:08:db:76:0a:63:47:47:cd:74:d2:c0:95:4e:1a:c0:9d:
         8b:b5:24:fa:a0:04:51:69:bb:c7:79:c0:dc:be:bf:46:c5:cd:
         65:f9:5d:a0:32:60:09:a2:7f:98:37:8c:4f:e9:ce:67:bc:6b:
         bf:30:38:94:86:12:8b:0f:3b:24:7f:fd:4b:a9:c7:0c:d4:b9:
         c6:be:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----