Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235322e302f32342d3332203d3e203532353237.roa
File:                     3230302e3135302e3235322e302f32342d3332203d3e203532353237.roa (raw, json)
Hash identifier:          tdHKgf9q6MQ/6sEa5+HCPdDQjOoAMgQcxN1pt4OIwpA=
Subject key identifier:   0B:CF:0F:B7:FB:99:77:5C:2B:95:6B:B2:6E:A8:52:77:06:A6:EB:52
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       66A8AC8A4EF0200B249650FA814CFD55F0972D22
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235322e302f32342d3332203d3e203532353237.roa
Signing time:             Mon 10 Feb 2025 12:49:01 +0000
ROA not before:           Mon 10 Feb 2025 12:44:01 +0000
ROA not after:            Mon 09 Feb 2026 12:49:01 +0000
asID:                     52527
IP address blocks:        200.150.252.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 16:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a8:ac:8a:4e:f0:20:0b:24:96:50:fa:81:4c:fd:55:f0:97:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb 10 12:44:01 2025 GMT
            Not After : Feb  9 12:49:01 2026 GMT
        Subject: CN=0BCF0FB7FB99775C2B956BB26EA8527706A6EB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d2:b8:58:60:b8:d8:5e:04:53:6f:00:c7:40:
                    e7:a8:c9:8b:36:01:3e:69:20:a1:c6:d0:08:9f:c5:
                    ac:6f:64:c1:3f:22:e5:66:99:59:92:43:4a:47:ed:
                    34:43:ab:0e:63:be:e6:d2:f4:ac:ae:18:c3:76:ed:
                    f5:f8:fd:87:73:04:5d:5c:97:86:9b:45:e4:b8:c5:
                    b2:9d:71:3e:36:b7:1e:76:88:5b:8e:05:1b:34:77:
                    fa:8c:16:1f:15:51:63:81:ec:9c:3c:a5:e9:e3:1b:
                    75:8c:2b:fd:86:5c:bd:4d:5f:3b:72:64:04:c1:60:
                    ff:6a:8a:8f:0f:8b:4a:9a:06:2b:7e:5e:53:af:a6:
                    bd:2c:bf:a9:42:72:b2:60:82:32:0e:d5:8d:54:00:
                    66:58:c0:8f:31:e2:04:46:44:59:c0:fa:60:ed:d3:
                    89:08:21:c0:68:81:81:d8:4b:68:29:1a:93:b2:0a:
                    f6:96:09:2b:2e:8c:b5:4d:56:c6:68:9f:81:15:39:
                    63:5a:8b:e8:09:d2:36:47:c8:2b:1d:47:f9:47:61:
                    7b:2a:53:a4:d2:9c:54:fb:22:c5:6f:17:62:2f:71:
                    56:33:ba:0c:60:da:32:88:49:8d:6c:14:3d:16:56:
                    e9:6b:08:b1:9d:59:12:7d:1d:5f:37:98:46:a4:2c:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CF:0F:B7:FB:99:77:5C:2B:95:6B:B2:6E:A8:52:77:06:A6:EB:52
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235322e302f32342d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:11:f2:20:25:d7:16:d7:ad:f0:5b:85:3c:53:36:f1:b3:9a:
         59:a6:5b:5d:4b:f8:6d:45:b3:16:1a:2d:10:aa:43:8a:18:6b:
         89:cb:9d:6b:ec:f0:5e:53:f5:4a:b6:b2:8a:7b:69:f2:96:48:
         ce:48:5b:60:19:3d:f9:14:67:93:dd:d8:20:23:84:e6:08:63:
         7d:23:ea:6b:ce:07:28:c5:2b:ea:55:ef:4f:3f:3f:f5:9f:55:
         f5:5c:c7:23:92:a1:c9:1f:23:49:7a:dd:07:2d:8b:0f:1e:6b:
         2d:4f:59:48:59:9b:c4:83:7a:e1:c5:e0:74:be:06:0d:40:8c:
         96:eb:01:b3:c4:62:09:6f:10:1f:aa:5c:02:2b:d3:2c:e1:5e:
         a8:75:ea:7d:c2:c3:39:2e:f0:a4:bf:cf:80:0b:4f:75:c0:b0:
         12:60:de:ed:6f:a5:cc:35:59:7f:91:f6:ad:dd:95:2a:e4:6f:
         8f:8e:73:f5:7f:a1:b2:d5:d9:4f:a8:71:66:db:37:15:7c:1e:
         01:72:e2:f9:e0:f2:84:ba:f8:5d:ce:6e:0a:0c:ee:5d:63:82:
         a1:32:e4:ad:f4:b7:02:78:b2:d2:46:0a:58:81:30:a5:86:0f:
         43:b3:9a:ed:90:b2:49:81:97:eb:f5:59:71:95:64:e7:68:5a:
         5e:ec:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:52:59 2025 by rpki-client