Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3332203d3e20323732323830.roa
File:                     323830343a383463343a3a2f33322d3332203d3e20323732323830.roa (raw, json)
Hash identifier:          TkAndgwgtC873o3z3bcnwfLLTRiagvdYDmphPsEZqNw=
Subject key identifier:   A1:B6:F5:1E:58:B6:28:D0:C3:C5:BE:EE:63:AA:F6:F8:44:3D:F4:0E
Certificate issuer:       /CN=72B246961AE39F1657B95A43A3A8C381ED03EC7C
Certificate serial:       1C9D706824BDFED1F0BB7E02FDA05E51EB525000
Authority key identifier: 72:B2:46:96:1A:E3:9F:16:57:B9:5A:43:A3:A8:C3:81:ED:03:EC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72B246961AE39F1657B95A43A3A8C381ED03EC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3332203d3e20323732323830.roa
Signing time:             Mon 20 Jan 2025 14:06:38 +0000
ROA not before:           Mon 20 Jan 2025 14:01:38 +0000
ROA not after:            Mon 19 Jan 2026 14:06:38 +0000
asID:                     272280
IP address blocks:        2804:84c4::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 20 Jan 2025 16:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9d:70:68:24:bd:fe:d1:f0:bb:7e:02:fd:a0:5e:51:eb:52:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B246961AE39F1657B95A43A3A8C381ED03EC7C
        Validity
            Not Before: Jan 20 14:01:38 2025 GMT
            Not After : Jan 19 14:06:38 2026 GMT
        Subject: CN=A1B6F51E58B628D0C3C5BEEE63AAF6F8443DF40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:6c:fe:f7:d3:34:12:cf:27:b8:29:72:fa:
                    a9:ae:38:b5:a5:2b:dd:f4:51:a9:0b:b7:ef:d7:1c:
                    d9:cd:c1:ba:fc:4f:86:1a:74:b4:54:52:14:fd:c2:
                    22:b7:e1:c5:c4:42:f8:f3:88:8d:70:2f:85:2d:d2:
                    d0:c7:bc:64:a7:44:0b:27:53:1a:cd:09:3d:92:bb:
                    5a:e3:b3:85:46:fe:55:2a:9f:27:58:ce:80:b3:0e:
                    d5:db:6b:ce:91:2f:e5:68:ed:5c:ec:4a:25:bf:c8:
                    db:cd:d3:96:9d:2a:bd:54:3e:27:c7:cb:23:1f:ab:
                    99:18:4d:1d:98:14:25:4b:f0:9f:50:23:00:47:e3:
                    09:10:d0:c0:30:32:88:5a:92:70:c8:82:6e:21:5d:
                    30:53:f4:ea:2a:4e:22:e6:c0:79:7b:6b:fc:36:ff:
                    72:2d:87:cf:ae:53:28:e2:ec:1c:1b:e0:61:70:df:
                    28:65:51:1d:1c:97:6e:ed:3e:cd:ca:8e:ee:84:d9:
                    ef:7a:b6:59:c5:8b:14:dd:c3:76:f7:04:f1:31:0b:
                    57:83:f6:20:04:a4:19:5b:d5:4b:c2:c1:78:ae:db:
                    da:91:5e:c9:5b:96:fd:4b:71:da:bc:94:9a:86:e9:
                    48:dd:63:c0:79:10:38:da:e8:c3:e8:24:92:41:32:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:F5:1E:58:B6:28:D0:C3:C5:BE:EE:63:AA:F6:F8:44:3D:F4:0E
            X509v3 Authority Key Identifier:
                keyid:72:B2:46:96:1A:E3:9F:16:57:B9:5A:43:A3:A8:C3:81:ED:03:EC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/72B246961AE39F1657B95A43A3A8C381ED03EC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72B246961AE39F1657B95A43A3A8C381ED03EC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/323830343a383463343a3a2f33322d3332203d3e20323732323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:66:45:fd:c8:5c:08:2d:0d:96:5d:8d:3c:93:5f:75:e9:
         a1:70:c6:f2:b7:03:e6:b4:d0:e1:30:6f:ba:58:b9:c6:4f:9a:
         8d:fc:4e:67:77:81:32:7e:ac:12:0a:bc:cf:89:c0:c1:c3:2d:
         98:13:fd:ab:35:a2:a6:74:5c:b7:27:77:20:20:53:7c:fb:c7:
         86:39:f4:3e:3a:52:6e:49:84:2e:47:fb:32:65:31:2f:00:10:
         f3:2f:47:8d:e6:e2:02:5f:38:19:03:e2:0b:2d:a2:16:01:d4:
         fc:7d:96:4f:90:10:a7:a0:2a:89:58:1a:d1:88:f7:cf:86:41:
         7b:92:9b:04:a6:63:30:90:05:d0:65:91:2f:22:9e:58:c4:a0:
         9a:2b:90:a8:8b:f0:13:64:fe:18:6b:44:81:72:ea:89:06:23:
         c9:c3:88:1e:54:a2:89:36:5c:f4:9c:44:45:6d:c8:a5:c1:c4:
         3a:53:71:0d:fc:3d:b3:01:e0:22:d0:9c:57:dc:b2:6e:fa:f3:
         8e:93:93:93:74:0b:44:cd:f9:a1:33:f6:e1:cb:f2:ee:91:bf:
         57:9c:d8:80:e1:23:d7:46:4b:74:d7:8b:f7:5a:34:aa:7b:68:
         92:b8:b0:92:2e:41:7f:f4:0e:f7:5c:8d:4e:3a:01:4f:b7:02:
         c1:06:a4:62
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHJ1waCS9/tHwu34C/aBeUetSUAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCMjQ2OTYxQUUzOUYxNjU3Qjk1QTQzQTNBOEMzODFF
RDAzRUM3QzAeFw0yNTAxMjAxNDAxMzhaFw0yNjAxMTkxNDA2MzhaMDMxMTAvBgNV
BAMTKEExQjZGNTFFNThCNjI4RDBDM0M1QkVFRTYzQUFGNkY4NDQzREY0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvm2z+99M0Es8nuCly+qmuOLWl
K930UakLt+/XHNnNwbr8T4YadLRUUhT9wiK34cXEQvjziI1wL4Ut0tDHvGSnRAsn
UxrNCT2Su1rjs4VG/lUqnydYzoCzDtXba86RL+Vo7VzsSiW/yNvN05adKr1UPifH
yyMfq5kYTR2YFCVL8J9QIwBH4wkQ0MAwMohaknDIgm4hXTBT9OoqTiLmwHl7a/w2
/3Ith8+uUyji7Bwb4GFw3yhlUR0cl27tPs3Kju6E2e96tlnFixTdw3b3BPExC1eD
9iAEpBlb1UvCwXiu29qRXslblv1Lcdq8lJqG6UjdY8B5EDja6MPoJJJBMrgjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUobb1Hli2KNDDxb7uY6r2+EQ99A4wHwYDVR0j
BBgwFoAUcrJGlhrjnxZXuVpDo6jDge0D7HwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjZnWEpRa2o1SnlvelNuVlZ2eHBIcHFTNGJOQVZXQlNjVFlmQTFBUzJ2
Y1IvMC83MkIyNDY5NjFBRTM5RjE2NTdCOTVBNDNBM0E4QzM4MUVEMDNFQzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyQjI0Njk2MUFFMzlGMTY1
N0I5NUE0M0EzQThDMzgxRUQwM0VDN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o2Z1hKUWtqNUp5b3pTblZWdnhwSHBxUzRiTkFWV0JTY1RZZkExQVMydmNSLzAv
MzIzODMwMzQzYTM4MzQ2MzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzIzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASExDANBgkqhkiG9w0BAQsFAAOCAQEANMVmRf3I
XAgtDZZdjTyTX3XpoXDG8rcD5rTQ4TBvuli5xk+ajfxOZ3eBMn6sEgq8z4nAwcMt
mBP9qzWipnRctyd3ICBTfPvHhjn0PjpSbkmELkf7MmUxLwAQ8y9HjebiAl84GQPi
Cy2iFgHU/H2WT5AQp6AqiVga0Yj3z4ZBe5KbBKZjMJAF0GWRLyKeWMSgmiuQqIvw
E2T+GGtEgXLqiQYjycOIHlSiiTZc9JxERW3IpcHEOlNxDfw9swHgItCcV9yybvrz
jpOTk3QLRM35oTP24cvy7pG/V5zYgOEj10ZLdNeL91o0qntokriwki5Bf/QO91yN
TjoBT7cCwQakYg==
-----END CERTIFICATE-----