Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38312e302f32342d3234203d3e203532353237.roa
File:                     3137372e3135322e38312e302f32342d3234203d3e203532353237.roa (raw, json)
Hash identifier:          w6Yq7Iw89OuVoCuJ+wRf4OecmFczZWk0cO4rUYadKg4=
Subject key identifier:   00:1A:52:EC:4E:E6:57:C7:2A:37:7D:53:54:94:E7:6D:5E:77:C9:86
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       63E3FBE712FD0CBE5482129E07C10B03C4389A3F
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38312e302f32342d3234203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:22 +0000
ROA not before:           Tue 23 Apr 2024 13:50:22 +0000
ROA not after:            Tue 22 Apr 2025 13:55:22 +0000
asID:                     52527
IP address blocks:        177.152.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e3:fb:e7:12:fd:0c:be:54:82:12:9e:07:c1:0b:03:c4:38:9a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:22 2024 GMT
            Not After : Apr 22 13:55:22 2025 GMT
        Subject: CN=001A52EC4EE657C72A377D535494E76D5E77C986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:55:ba:80:c2:f0:cc:01:15:69:c9:97:38:
                    a5:f3:80:7f:d1:3b:87:15:c1:eb:ed:11:e8:ae:3c:
                    e2:cf:5b:f1:b6:63:6c:01:0e:70:f7:de:e7:5b:e9:
                    bd:5b:4b:e9:8b:25:c3:f9:b8:bc:59:59:a7:b4:8f:
                    b0:ac:04:2d:02:45:cf:c5:b9:87:2c:51:46:4e:3f:
                    35:15:3f:53:d1:81:44:fd:c8:be:27:5c:8c:31:81:
                    ce:9e:58:3d:88:0d:f3:0b:86:d1:7c:9f:c2:62:05:
                    0b:03:08:7a:93:77:f4:9c:15:68:9d:88:cc:4d:7b:
                    72:41:25:e6:9f:c4:7c:94:6d:61:d7:8a:9a:5f:b4:
                    f5:23:15:49:fb:91:0b:f6:56:f7:52:63:46:99:fe:
                    f5:dc:b6:1b:c0:66:49:cf:20:c7:be:fc:53:9b:14:
                    39:a1:88:6a:dd:85:80:97:f5:51:8b:d9:c1:ff:29:
                    72:7c:92:ff:22:db:4e:ea:eb:6c:73:71:d6:f7:47:
                    1f:c5:8e:a9:95:13:ff:43:ab:61:aa:d8:ab:a6:29:
                    bc:f4:cb:51:0d:e9:27:44:a7:7c:72:fb:fa:43:b7:
                    71:b4:55:f7:c8:1c:06:7a:00:f8:83:24:19:ea:1b:
                    e8:1a:ba:e9:4d:b9:3f:86:ce:7d:0a:b3:a0:d3:42:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:52:EC:4E:E6:57:C7:2A:37:7D:53:54:94:E7:6D:5E:77:C9:86
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38312e302f32342d3234203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:59:ae:70:7e:f4:48:6b:e4:d3:93:12:92:b9:85:87:46:
         06:7d:8e:e4:6e:41:75:3b:7a:28:93:78:fa:d9:91:d5:04:3e:
         29:47:94:ee:94:28:19:b0:69:88:8d:cc:66:1a:f8:45:d6:d7:
         d0:cf:20:07:1f:21:fa:6a:cc:24:aa:e7:3a:09:e9:47:04:2c:
         8c:ad:fb:c5:bc:85:1d:8e:00:50:4e:e2:7b:72:09:8b:16:a6:
         78:a4:93:06:ee:2c:60:50:0c:d7:3b:a4:ed:40:f2:1c:1c:3b:
         ee:d9:49:f9:0f:73:7d:f2:0c:df:42:0c:0b:6d:f9:ed:39:a7:
         6e:c2:d0:fd:fe:5b:04:31:5f:bf:a4:4d:47:e5:db:02:e8:e3:
         cc:70:df:6d:cd:46:b0:4e:11:0e:16:ae:b9:4b:9b:ed:4d:be:
         a4:b8:55:f7:58:17:2d:73:38:c8:60:15:cb:17:f7:59:e5:51:
         e1:38:b7:36:ba:90:6f:73:4b:8e:b9:d0:01:24:29:f9:57:62:
         96:10:fe:e1:10:de:5b:90:78:ce:c9:11:ab:f1:20:70:a0:c1:
         73:37:2a:8a:4d:52:87:0a:70:4e:81:ba:3e:40:5a:22:55:be:
         0b:02:99:c2:60:cd:3a:bf:60:a9:18:f2:20:ce:12:3a:57:6f:
         4c:81:97:70
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY+P75xL9DL5UghKeB8ELA8Q4mj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FFQjk1OTE1MDQ1NkVDMTY3NEU5MUUwODRGMkM0RUY1
QjFBN0VCNDAeFw0yNDA0MjMxMzUwMjJaFw0yNTA0MjIxMzU1MjJaMDMxMTAvBgNV
BAMTKDAwMUE1MkVDNEVFNjU3QzcyQTM3N0Q1MzU0OTRFNzZENUU3N0M5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvVW6gMLwzAEVacmXOKXzgH/R
O4cVwevtEeiuPOLPW/G2Y2wBDnD33udb6b1bS+mLJcP5uLxZWae0j7CsBC0CRc/F
uYcsUUZOPzUVP1PRgUT9yL4nXIwxgc6eWD2IDfMLhtF8n8JiBQsDCHqTd/ScFWid
iMxNe3JBJeafxHyUbWHXippftPUjFUn7kQv2VvdSY0aZ/vXcthvAZknPIMe+/FOb
FDmhiGrdhYCX9VGL2cH/KXJ8kv8i207q62xzcdb3Rx/FjqmVE/9Dq2Gq2KumKbz0
y1EN6SdEp3xy+/pDt3G0VffIHAZ6APiDJBnqG+gauulNuT+Gzn0Ks6DTQoFVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUABpS7E7mV8cqN31TVJTnbV53yYYwHwYDVR0j
BBgwFoAUeuuVkVBFbsFnTpHghPLE71safrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da
SkovMC83QUVCOTU5MTUwNDU2RUMxNjc0RTkxRTA4NEYyQzRFRjVCMUE3RUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBRUI5NTkxNTA0NTZFQzE2
NzRFOTFFMDg0RjJDNEVGNUIxQTdFQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAv
MzEzNzM3MmUzMTM1MzIyZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsZhRMA0GCSqGSIb3DQEBCwUAA4IBAQBoOlmucH70
SGvk05MSkrmFh0YGfY7kbkF1O3ook3j62ZHVBD4pR5TulCgZsGmIjcxmGvhF1tfQ
zyAHHyH6aswkquc6CelHBCyMrfvFvIUdjgBQTuJ7cgmLFqZ4pJMG7ixgUAzXO6Tt
QPIcHDvu2Un5D3N98gzfQgwLbfntOaduwtD9/lsEMV+/pE1H5dsC6OPMcN9tzUaw
ThEOFq65S5vtTb6kuFX3WBctczjIYBXLF/dZ5VHhOLc2upBvc0uOudABJCn5V2KW
EP7hEN5bkHjOyRGr8SBwoMFzNyqKTVKHCnBOgbo+QFoiVb4LApnCYM06v2CpGPIg
zhI6V29MgZdw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org