Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          +CuCfewFFnnKFBG2OwABunCTV+kmOtPT40pJ9jkuQvA=
Subject key identifier:   9E:31:89:9D:9C:40:C0:4D:92:46:87:99:00:5B:73:10:E1:C0:54:C9
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       40E8A1AADDC361C315BEF9873383516748280D08
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:40 +0000
ROA not before:           Sat 29 Jul 2023 16:21:40 +0000
ROA not after:            Sat 27 Jul 2024 16:26:40 +0000
asID:                     269194
IP address blocks:        2804:60d4:701f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 00:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e8:a1:aa:dd:c3:61:c3:15:be:f9:87:33:83:51:67:48:28:0d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:40 2023 GMT
            Not After : Jul 27 16:26:40 2024 GMT
        Subject: CN=9E31899D9C40C04D92468799005B7310E1C054C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:24:5e:26:65:39:87:a8:21:56:61:82:15:
                    48:80:52:d5:e4:65:03:96:4d:5e:eb:71:99:92:f3:
                    01:f4:37:ea:d1:fd:92:e7:7b:76:60:93:22:0b:a1:
                    43:c2:15:34:c2:f4:f3:66:94:27:6f:c0:8b:d5:97:
                    d5:39:68:a9:b9:55:f2:8e:5b:1f:8a:d7:45:3b:7f:
                    b6:f1:f1:2b:63:91:d2:6a:80:76:b1:b5:97:c7:80:
                    3f:8e:7e:a6:50:83:67:3b:e2:9f:8f:2a:9d:3d:ce:
                    c6:b1:75:13:73:81:b9:9d:48:1f:59:e9:00:4d:6e:
                    e8:0d:e2:ea:d5:66:f1:65:49:cd:cd:64:01:7a:4a:
                    39:f4:26:c3:1f:f5:7a:5c:63:58:2e:f0:30:f6:cf:
                    59:9b:f5:e8:c7:34:64:8e:c4:2b:9f:f2:37:8c:54:
                    a1:8e:9b:af:b5:61:c7:89:63:46:66:ff:56:5b:cc:
                    ce:62:94:fe:7e:ce:bc:e0:ba:c2:ad:93:4d:7b:9b:
                    3d:8a:8e:a7:58:3e:4f:ab:de:12:d3:11:72:b1:16:
                    ea:ca:06:ac:22:c3:e5:41:11:a5:7a:ae:7b:e2:01:
                    6c:16:77:e3:85:f7:7f:37:3f:2c:4d:ef:13:db:11:
                    d6:aa:d3:d9:97:83:1e:27:81:13:96:94:1b:d3:57:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:89:9D:9C:40:C0:4D:92:46:87:99:00:5B:73:10:E1:C0:54:C9
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:701f::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:46:e6:72:f6:9b:61:31:77:39:33:22:54:9b:7e:e5:b9:
         83:11:81:9b:7f:fd:a3:6a:f1:65:01:96:fe:53:1d:de:29:8d:
         ca:52:3a:c5:e3:f5:d2:21:a7:c8:ce:0f:35:53:ea:42:85:35:
         e1:c6:37:50:6b:c5:e0:83:06:85:35:13:0a:43:15:d0:6f:60:
         82:11:41:ba:74:a0:f3:c9:97:e1:e7:74:d3:51:63:b3:b2:2c:
         07:ac:7d:bd:f3:d5:6f:f8:95:61:fc:1d:56:90:0e:86:5b:d5:
         12:bc:b8:19:9c:07:5a:5e:c6:b3:6a:ca:47:d3:d8:10:db:29:
         36:c9:52:c8:04:52:8f:ae:16:0e:52:2d:84:dd:11:82:62:5a:
         88:9e:26:98:0b:8e:a9:a3:92:08:c9:75:8d:3d:1a:6c:1b:a2:
         aa:5e:0e:10:75:00:cc:06:4d:74:a3:fb:90:5e:d8:fd:9f:2d:
         17:03:c9:12:b9:14:b1:9a:18:48:57:0d:de:6e:ea:6c:70:7e:
         79:35:43:cb:d6:a6:0c:4d:51:c2:a7:32:12:5f:9e:04:f3:e6:
         16:d0:de:14:08:b1:d2:65:a4:94:b6:12:6a:de:f9:34:a1:8f:
         6d:99:12:bb:cd:d2:86:80:82:1e:fa:4d:5a:11:1d:7f:7f:3a:
         bf:08:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----