Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32322d3232203d3e203532353237.roa
File:                     3137372e3135322e38302e302f32322d3232203d3e203532353237.roa (raw, json)
Hash identifier:          gmg8pd3rCroBzPtSawpJovxhwnKqDgQE9ioROCpJuuo=
Subject key identifier:   97:2F:A5:09:D6:DD:F8:43:D0:B6:C6:69:68:43:F8:21:CC:1F:D7:B3
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       6793882104B405FD504DC33ECC589029547A742A
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32322d3232203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:14 +0000
ROA not before:           Tue 23 Apr 2024 13:50:14 +0000
ROA not after:            Tue 22 Apr 2025 13:55:14 +0000
asID:                     52527
IP address blocks:        177.152.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:93:88:21:04:b4:05:fd:50:4d:c3:3e:cc:58:90:29:54:7a:74:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:14 2024 GMT
            Not After : Apr 22 13:55:14 2025 GMT
        Subject: CN=972FA509D6DDF843D0B6C6696843F821CC1FD7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:82:c8:70:0b:65:69:e4:03:eb:f2:55:b1:
                    77:14:ad:c2:42:f9:5e:1d:a3:97:c4:53:b5:2d:a1:
                    b2:58:ef:6d:90:53:01:c8:f1:16:27:20:d0:6f:53:
                    ff:2b:d6:de:dd:46:7e:15:2b:27:e7:1d:3f:a9:94:
                    db:aa:c1:86:8d:ce:7e:33:98:6b:09:ac:66:b9:b8:
                    e0:cc:8f:d4:a5:6a:45:51:e8:77:0e:63:02:f1:3f:
                    1f:fd:22:33:f6:33:aa:11:cc:1d:f7:14:33:87:19:
                    93:fe:48:e6:c7:f8:f7:51:08:92:43:b2:c5:c2:11:
                    f9:dc:7e:15:4b:ab:62:29:65:da:4f:e4:d6:46:ac:
                    46:7a:6e:cb:1e:c8:05:59:77:2a:48:9f:d6:95:11:
                    65:f4:a4:3e:f9:60:c5:23:b0:10:65:f9:04:6f:23:
                    9c:9b:11:56:b7:72:1c:b8:0b:93:af:ee:6a:0f:f4:
                    85:42:cf:15:16:f7:01:cc:6f:71:1e:d6:45:1d:d4:
                    f4:24:9b:68:a6:1a:23:ee:24:91:ec:ae:c2:94:b9:
                    c8:bd:5a:24:91:43:6c:7b:66:68:46:de:5a:45:c4:
                    36:a8:81:01:b3:3f:6e:4c:83:71:c8:31:09:38:af:
                    7a:0b:2f:88:78:13:66:88:f9:a0:d2:b6:bd:d9:fd:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2F:A5:09:D6:DD:F8:43:D0:B6:C6:69:68:43:F8:21:CC:1F:D7:B3
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32322d3232203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:85:c2:00:41:d2:86:9f:85:6e:d8:4b:8f:89:0a:03:8a:03:
         4a:0f:f5:93:85:21:85:7c:b8:0e:28:cb:d5:2e:09:69:ed:b8:
         f4:56:04:ad:63:2b:ec:42:99:ad:98:20:a9:22:de:cb:f2:38:
         48:e6:e9:d1:f3:40:d5:47:c7:56:4c:8e:3f:4e:58:97:37:16:
         90:f6:5e:1c:ba:02:74:68:24:67:cb:84:e2:9c:22:ce:36:b0:
         85:8d:65:62:59:05:96:35:b7:ab:23:5d:75:d6:e3:5e:a5:65:
         69:9a:c0:70:81:1a:b7:af:2c:66:fc:1f:5d:da:95:40:73:65:
         18:3d:46:bf:25:60:18:55:ba:f5:b4:89:6c:f9:0f:a9:df:b5:
         4b:dc:2b:61:91:e2:24:e5:15:7d:cb:b5:bd:ed:a8:3c:76:c6:
         25:37:e3:1f:e1:1d:46:e9:d7:87:4e:1b:4d:ef:55:e6:14:ca:
         89:e2:3e:8a:d3:ab:ab:b9:89:94:50:38:9d:90:75:12:b2:0d:
         02:ea:31:5b:3f:f6:c5:89:3a:69:45:9e:b6:ae:b6:51:1b:90:
         ec:f6:71:18:44:c2:0c:71:51:e8:46:a2:1b:f5:bd:f8:13:74:
         1d:b4:e0:d1:87:9b:09:09:fd:c7:cd:93:b4:fa:fc:7b:0d:87:
         e7:c4:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org