Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          oPdnDNR/63h4z8jR9xLGqzRMcmTfoLtM4oxE/4hFQWA=
Subject key identifier:   CB:2B:D9:81:4F:52:28:CA:DD:45:6B:68:8B:69:3F:FD:FF:14:58:43
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       14078EC977FF98B1E03485861EFBF0648CBCB4CB
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:39 +0000
ROA not before:           Sat 29 Jul 2023 16:21:39 +0000
ROA not after:            Sat 27 Jul 2024 16:26:39 +0000
asID:                     269194
IP address blocks:        2804:60d4:700b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:8e:c9:77:ff:98:b1:e0:34:85:86:1e:fb:f0:64:8c:bc:b4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:39 2023 GMT
            Not After : Jul 27 16:26:39 2024 GMT
        Subject: CN=CB2BD9814F5228CADD456B688B693FFDFF145843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:dd:d1:80:3d:16:ab:88:7a:58:cc:1a:28:
                    ce:7a:47:2b:5e:cd:2b:f4:5b:9c:e8:84:15:e3:68:
                    eb:ac:65:26:98:45:13:75:54:e4:0e:72:77:88:c1:
                    2c:31:41:8e:80:c5:e7:d5:cf:ee:80:c1:65:27:ab:
                    b8:a0:b4:62:9d:1c:09:39:c7:82:81:76:8d:a9:58:
                    79:4b:ed:3a:cf:11:a4:70:ec:39:b2:30:23:17:b1:
                    b3:e4:0f:3a:51:25:7f:76:1b:60:2d:d0:79:57:fa:
                    ee:26:90:7d:98:66:51:fd:00:12:b2:a8:b3:ae:6d:
                    88:63:91:db:d4:66:29:cd:e9:51:51:65:44:cb:fb:
                    f3:a0:6d:ae:21:36:52:a9:7d:9a:c3:78:33:f5:76:
                    d4:75:b7:0d:3d:ed:50:6c:96:0e:a0:11:dd:2a:6a:
                    c8:99:a8:d2:7b:f4:1f:d4:3a:88:bf:74:3e:27:e9:
                    8e:3f:78:58:57:4c:4d:2a:a2:45:75:81:b4:c6:0c:
                    fe:fc:ea:c4:f8:73:bb:5b:53:7d:03:a5:93:21:4c:
                    80:55:26:96:d4:58:18:8b:d3:1c:ae:c2:56:c5:a4:
                    94:1b:53:aa:0a:e1:82:b1:d8:e0:f8:1d:2b:66:7f:
                    12:b3:99:40:f2:7c:71:9d:fc:4a:64:1c:b8:e0:b0:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2B:D9:81:4F:52:28:CA:DD:45:6B:68:8B:69:3F:FD:FF:14:58:43
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:700b::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:94:f5:c4:50:0b:40:50:d8:4b:fe:b5:fa:a9:5a:41:56:
         07:fc:b4:40:f3:d6:03:a7:6f:87:63:bc:c3:29:4b:d0:93:21:
         64:d2:05:fa:49:25:86:4a:22:1f:fa:31:15:2c:92:d9:19:0b:
         a4:96:e1:80:f1:10:08:90:46:2b:c2:4d:b5:34:e8:30:45:be:
         e4:8e:e8:a8:ad:36:79:9b:47:f4:f1:7a:4c:c9:25:6b:a2:aa:
         ac:b2:ba:15:ad:56:f4:a3:4d:a4:ae:73:d4:87:e0:92:a3:4c:
         e2:8d:de:30:46:db:c0:8f:60:e7:b2:c3:aa:af:74:27:33:1e:
         40:10:37:c4:a4:2a:55:5d:10:d6:be:36:75:2d:06:47:da:96:
         f4:e2:7c:bf:95:13:18:37:94:82:15:a6:e1:b3:c1:54:63:67:
         8f:d0:04:4c:95:c1:25:10:85:c8:b8:08:f4:21:8d:89:70:54:
         9b:55:bc:fe:d0:12:7b:e4:19:4a:1c:c4:c9:63:cb:fb:6b:ce:
         0c:97:6a:34:94:4c:39:2f:d5:34:4e:66:d0:1f:3c:2a:e5:43:
         2e:4b:04:cf:f8:65:17:6a:d7:f7:6b:ed:41:9e:99:bc:d8:6e:
         63:59:61:de:75:37:c1:88:fc:ee:9c:74:2a:25:2c:d6:d1:27:
         d1:06:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----