Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a31373a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a31373a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          6hDzvYWkfgfACRrOfo6AnU5FEG1ELOpUO/aUDYjrySE=
Subject key identifier:   A3:C3:D1:16:A6:B2:54:A4:F4:A4:CB:84:61:A5:C6:15:BF:D8:CA:DB
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       4CBE12C6F579B5EE40775D3B6A2B162FBFC209D4
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a31373a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:38 +0000
ROA not before:           Sat 29 Jul 2023 16:21:38 +0000
ROA not after:            Sat 27 Jul 2024 16:26:38 +0000
asID:                     269194
IP address blocks:        2804:60d4:17::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:be:12:c6:f5:79:b5:ee:40:77:5d:3b:6a:2b:16:2f:bf:c2:09:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:38 2023 GMT
            Not After : Jul 27 16:26:38 2024 GMT
        Subject: CN=A3C3D116A6B254A4F4A4CB8461A5C615BFD8CADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:d9:8e:a5:73:08:b4:5e:f1:56:45:70:fb:
                    33:b7:e9:ac:b2:14:fd:b8:e0:77:61:fd:90:52:45:
                    ec:cd:77:f7:be:38:98:b9:71:19:5a:36:e4:8f:de:
                    92:0f:4e:f0:cd:33:30:3a:f1:78:df:90:21:b5:62:
                    57:5e:f7:30:f4:c7:39:fe:30:3f:e6:43:56:9e:fb:
                    e4:4f:1e:9f:6a:73:a2:91:d6:bc:4d:b8:c1:da:8b:
                    2a:28:51:84:0f:82:68:96:a2:6a:48:a1:bf:db:df:
                    10:3f:ce:d7:29:f6:fb:a4:01:70:21:7c:31:37:4b:
                    1e:5d:dd:dd:1a:14:7e:52:c9:46:9b:4a:82:97:6b:
                    6e:fa:01:38:32:d1:3e:83:f2:f4:ef:30:c6:8b:b6:
                    04:49:ac:0c:a4:45:6d:95:d9:a5:53:e6:88:75:5e:
                    89:e7:cc:57:e0:0d:2a:b2:c4:f7:07:fe:1e:96:ec:
                    cb:b0:33:66:91:54:e8:99:7f:4c:11:4e:23:69:52:
                    39:3d:28:b0:66:9c:5a:9b:9c:61:a8:8d:a8:dd:fc:
                    55:f5:bc:da:e2:c2:a9:95:cf:fc:a7:c3:c5:d7:3c:
                    09:91:67:64:cb:44:47:fd:55:7a:06:96:11:31:98:
                    95:4a:47:71:4d:3e:f1:30:cb:a3:64:7a:7d:56:7a:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:D1:16:A6:B2:54:A4:F4:A4:CB:84:61:A5:C6:15:BF:D8:CA:DB
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a31373a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:1a:44:64:1d:91:53:4b:98:f3:b5:28:84:f4:6e:ff:b9:32:
         46:2b:c4:9d:0b:16:47:ff:1d:94:2b:e2:67:0a:03:51:d8:c6:
         c0:cc:d5:b4:fc:8a:96:86:03:7a:58:6f:6c:19:73:2b:39:63:
         1b:3e:3d:2f:59:e8:10:ce:a2:1c:26:f3:38:53:ba:f3:ae:94:
         45:70:4d:a6:78:94:78:4e:d2:bc:95:68:f3:1c:1b:4b:1c:5a:
         72:f4:03:27:83:96:e4:70:40:d1:9c:9b:c5:4a:6f:57:08:18:
         29:b3:46:ae:8d:66:52:66:eb:70:5e:10:74:e8:d7:9f:3f:fe:
         ce:e0:45:a7:da:3e:96:0f:cb:c3:55:0b:a2:b0:ed:4e:33:56:
         e8:0e:07:04:4f:a3:f1:60:77:87:ea:f9:24:40:4a:60:a0:e8:
         5b:c6:38:bb:d7:f2:fa:1e:71:8b:96:70:ac:e8:17:14:6f:70:
         b7:68:10:44:67:7f:20:8e:8d:5f:18:b5:ac:ca:0d:99:17:17:
         f3:d8:b5:33:2c:81:12:51:32:8d:95:16:a2:52:db:e9:e4:27:
         27:96:e4:2e:c9:96:e6:8f:b5:39:cb:4a:8d:d2:2f:b7:dc:f0:
         a3:99:2d:a2:b1:94:d8:e3:0d:2d:8c:5e:26:09:5e:6f:72:b4:
         74:b3:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----