Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235352e302f32342d3332203d3e203532353237.roa
File:                     3230302e3135302e3235352e302f32342d3332203d3e203532353237.roa (raw, json)
Hash identifier:          dZIE3PKgCLGnsi0aZ5Sf0jVWuYI9fHTCY94cz8k3tVk=
Subject key identifier:   D0:7B:A2:47:71:73:98:90:CE:B3:03:BE:01:84:9D:38:A0:E5:A0:67
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       661C511C1B22927BA79ACB3F3818156C938002AB
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235352e302f32342d3332203d3e203532353237.roa
Signing time:             Mon 10 Feb 2025 12:49:20 +0000
ROA not before:           Mon 10 Feb 2025 12:44:20 +0000
ROA not after:            Mon 09 Feb 2026 12:49:20 +0000
asID:                     52527
IP address blocks:        200.150.255.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 16:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1c:51:1c:1b:22:92:7b:a7:9a:cb:3f:38:18:15:6c:93:80:02:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb 10 12:44:20 2025 GMT
            Not After : Feb  9 12:49:20 2026 GMT
        Subject: CN=D07BA24771739890CEB303BE01849D38A0E5A067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e2:db:c6:a2:b2:18:93:8e:ec:82:9a:bc:0a:
                    3e:8f:66:57:e9:14:9d:8d:4e:b0:a4:ea:62:24:28:
                    be:d6:05:f8:e0:44:d4:04:9c:b4:e8:06:ae:dc:f2:
                    35:21:3f:0e:66:a2:19:32:7d:e7:1e:33:45:64:bb:
                    e0:22:5e:82:d9:3a:4b:26:83:54:6b:cf:eb:6d:96:
                    64:0e:5e:56:e6:d2:04:cb:be:c6:f3:f4:21:27:2f:
                    14:61:53:4d:36:0d:f6:38:27:9e:96:bd:c5:2e:21:
                    06:77:bf:83:10:f1:e3:99:a5:48:a9:90:4a:90:88:
                    6d:df:a0:9f:8b:82:bf:97:d9:70:df:c8:ad:25:76:
                    48:29:6d:aa:69:ba:19:90:e6:8c:62:75:05:ca:98:
                    10:fa:38:52:5e:32:e3:71:ba:06:8c:f3:2f:89:89:
                    1f:24:ca:72:23:2c:69:96:2f:72:78:2f:fd:56:b3:
                    7d:3d:e7:a1:9d:61:8f:8c:07:9e:50:51:ef:2b:01:
                    23:a9:6d:6a:7b:74:42:c7:37:c1:a1:af:79:28:a3:
                    59:65:be:38:e4:a7:f7:a4:c0:ef:b0:17:b0:b7:fc:
                    75:22:d0:57:fb:87:01:87:74:7c:02:a3:4d:3f:ac:
                    e9:fa:20:7c:4b:1c:4a:3f:a3:62:75:11:0e:59:06:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:A2:47:71:73:98:90:CE:B3:03:BE:01:84:9D:38:A0:E5:A0:67
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235352e302f32342d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:a6:8e:8b:f0:1e:16:3d:b3:76:ef:0e:34:c7:83:9f:02:
         5e:ad:63:ae:48:97:c2:71:dc:45:40:ba:72:34:dc:d3:c3:df:
         90:e4:4f:87:fc:3c:67:ad:61:c0:2c:80:fa:65:9f:c3:a0:c0:
         01:a4:e3:5c:72:5a:0f:e2:00:08:89:5e:b1:92:7f:8f:39:f7:
         69:e4:1e:ee:41:98:2b:b4:79:95:e5:3c:a0:e2:46:31:2c:97:
         e6:a0:c6:c2:b4:cf:61:b3:3d:69:24:e0:7e:57:b4:cd:13:bc:
         a8:21:a7:e6:62:2b:85:4b:34:b4:a8:f6:9b:b3:f2:eb:3d:c2:
         2a:12:d9:62:63:87:2b:c9:78:da:87:7d:47:b8:5a:dc:53:b9:
         a1:f6:eb:1a:a6:a2:db:a0:39:21:c6:39:3e:07:1d:91:bf:32:
         7d:d4:9d:47:cf:88:5d:67:2c:39:e5:01:c9:be:ae:5d:3d:8d:
         a3:51:62:fe:33:a7:5e:90:90:06:d3:a1:bc:fb:b5:b7:ba:15:
         c0:4f:0e:18:d4:d8:ad:8b:31:bc:80:cd:81:4d:88:58:d2:81:
         36:72:0b:a2:a0:99:eb:bb:4f:8d:6f:a6:72:de:62:c5:9d:76:
         f7:3f:bf:af:24:96:78:04:e2:79:f8:ca:9b:39:95:d1:7e:d4:
         4d:70:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:52:56 2025 by rpki-client