Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32312d3231203d3e203532353237.roa
File:                     3137372e3135322e38302e302f32312d3231203d3e203532353237.roa (raw, json)
Hash identifier:          REf7Cc/DYSMrtOc12toi/xxz69arKPxAZeMyoVuykBA=
Subject key identifier:   E6:91:8D:9E:51:90:5B:62:7C:C4:72:AF:46:15:FB:CB:68:44:05:6E
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       4F6CE2E43CC1B90D0CFA058E9AE01042D0C30A98
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32312d3231203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 18:32:54 +0000
ROA not before:           Tue 23 Apr 2024 18:27:54 +0000
ROA not after:            Tue 22 Apr 2025 18:32:54 +0000
asID:                     52527
IP address blocks:        177.152.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6c:e2:e4:3c:c1:b9:0d:0c:fa:05:8e:9a:e0:10:42:d0:c3:0a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 18:27:54 2024 GMT
            Not After : Apr 22 18:32:54 2025 GMT
        Subject: CN=E6918D9E51905B627CC472AF4615FBCB6844056E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:27:b3:61:28:1e:61:a6:46:e2:ea:d6:d3:
                    48:4a:50:d5:7c:1b:48:2b:33:81:36:9d:e9:fb:47:
                    88:ac:21:63:62:8e:cd:24:2e:53:1d:82:ee:d7:2c:
                    a3:1c:40:6c:5f:97:8a:8a:e3:b2:9f:d8:6d:90:8a:
                    5e:14:97:b5:f8:be:f5:12:5c:d3:94:c6:23:51:fb:
                    09:8f:e4:96:1b:a7:91:94:b9:a5:f7:71:22:eb:56:
                    4c:5b:f5:a5:a4:26:10:b0:4b:9c:cd:f3:06:68:98:
                    26:f3:64:c5:d4:db:8d:cb:fc:d1:c1:34:14:ce:0e:
                    f2:de:3a:4f:90:f4:c5:90:10:24:e0:22:4c:39:c3:
                    91:d1:49:e1:88:9e:4e:50:ac:e0:f0:1b:bd:7b:ef:
                    fe:6c:fd:bd:c2:8f:b8:cb:37:a7:25:31:78:9d:e0:
                    40:c4:8e:43:b4:e8:ec:27:66:66:e0:a0:36:c6:53:
                    36:4a:d9:08:26:97:e8:49:40:c9:9a:f3:0a:86:56:
                    4e:4b:12:d7:d3:c8:44:bd:e3:7a:01:3b:29:31:be:
                    fa:b7:2e:37:02:83:09:5c:10:28:23:da:40:39:ee:
                    49:0b:4b:55:05:9b:36:d5:80:7e:2a:ca:94:f3:c3:
                    f4:98:74:0e:fd:a2:7f:de:32:2f:0a:5f:74:d9:3e:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:8D:9E:51:90:5B:62:7C:C4:72:AF:46:15:FB:CB:68:44:05:6E
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32312d3231203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:ef:9d:4c:85:45:27:bf:79:f8:bf:bf:fd:90:97:9e:d1:
         a3:00:1f:d2:4e:0a:de:26:f0:61:16:90:94:24:d4:d5:fe:89:
         6a:70:05:ec:de:09:bb:01:26:4a:0d:37:cf:00:fb:69:a4:37:
         3d:8e:c2:b5:c5:af:3e:3d:e5:72:bb:28:5f:7b:84:54:be:ec:
         ce:70:8a:ab:f5:40:02:4f:3e:0b:e3:5a:3e:a1:ae:5e:c8:98:
         98:08:c1:fd:7b:c9:7b:34:f2:0d:b3:a7:3d:67:84:0f:ef:f5:
         29:01:cc:d3:3d:ed:91:48:ac:38:d2:cf:b6:47:ac:8c:45:22:
         06:d4:8b:88:2f:b0:56:1c:c6:05:7b:76:e6:d9:9b:b8:26:12:
         02:80:7e:55:e5:5d:fe:68:8d:59:06:d6:38:e5:b1:7f:0a:83:
         6b:97:3d:bd:c1:a6:97:92:dd:65:b8:51:e9:e6:39:25:15:e4:
         bd:32:87:d6:ea:09:56:f7:02:ae:c5:54:62:6c:e3:dc:ad:db:
         7a:48:b8:1a:9c:79:fd:db:09:09:3c:50:12:53:11:68:2a:3a:
         a8:ec:84:8f:b4:04:2b:09:38:c4:7a:52:66:36:c8:29:38:30:
         98:70:72:82:e8:a9:4b:1b:0f:d5:3d:4e:a9:d0:32:55:7f:a0:
         31:36:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org