Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38322e302f32342d3234203d3e203532353237.roa
File:                     3137372e3135322e38322e302f32342d3234203d3e203532353237.roa (raw, json)
Hash identifier:          CxaYajE9xfAHJPL7e85g304T9m34UVp7tobsxi8XgNg=
Subject key identifier:   0B:D9:01:29:31:39:96:59:60:82:B0:16:B9:1B:EF:27:59:75:86:A5
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       6BFAEF78EC36C386B8DBE7E5CF85FA1EB2117116
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38322e302f32342d3234203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:28 +0000
ROA not before:           Tue 23 Apr 2024 13:50:28 +0000
ROA not after:            Tue 22 Apr 2025 13:55:28 +0000
asID:                     52527
IP address blocks:        177.152.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fa:ef:78:ec:36:c3:86:b8:db:e7:e5:cf:85:fa:1e:b2:11:71:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:28 2024 GMT
            Not After : Apr 22 13:55:28 2025 GMT
        Subject: CN=0BD90129313996596082B016B91BEF27597586A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ec:70:b5:4c:7e:95:5b:a0:15:22:07:1e:82:
                    f2:aa:88:30:2f:5c:99:a3:ac:f3:64:69:f5:70:9d:
                    67:42:c6:2a:b3:cb:45:32:63:66:5d:f8:8d:e4:ac:
                    5b:28:dc:5c:fc:9b:a1:05:6c:8b:60:9f:df:0d:9c:
                    a5:26:f7:10:f5:0f:d3:2b:4e:0e:df:e5:3a:ab:8c:
                    48:d0:14:ec:97:8c:d8:a0:0e:e9:2e:96:3c:92:c6:
                    13:8b:a5:04:1b:f8:8b:b1:83:15:05:94:f7:4d:8b:
                    b9:f9:f0:93:ce:13:8a:fd:f0:b7:75:e8:2e:b8:10:
                    da:f5:5e:db:19:0c:3b:c8:14:b1:e0:58:7f:85:c0:
                    bd:53:d3:e9:10:3c:b4:f9:21:75:54:6a:87:f3:e9:
                    f1:db:b5:e3:79:cc:e5:9e:95:ee:ee:7e:87:bf:41:
                    d1:3e:c2:8f:bc:0e:fb:fc:74:d4:1a:b6:00:02:2e:
                    7b:a5:f2:a1:c4:49:74:10:d8:a5:14:2c:d3:74:d3:
                    fd:1b:01:8a:38:f2:f9:21:68:cc:33:94:d9:ce:9b:
                    d7:9e:f5:c1:19:13:e5:73:1d:44:0f:da:aa:f4:91:
                    41:49:49:ed:0a:90:87:52:99:45:ed:3e:c9:a0:4a:
                    60:97:80:7c:35:33:6c:34:5c:27:43:83:f4:79:47:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D9:01:29:31:39:96:59:60:82:B0:16:B9:1B:EF:27:59:75:86:A5
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38322e302f32342d3234203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:51:b6:00:3f:02:c7:47:f3:33:03:74:e0:d6:8a:bd:e0:
         fb:11:9f:aa:bf:ac:2b:81:6c:4a:e1:59:fd:0f:db:33:09:b0:
         37:17:2c:12:4e:da:91:41:17:bc:89:55:f0:70:e9:e3:dc:de:
         47:12:fb:cb:f8:be:ac:0b:29:e0:ac:51:37:af:cf:53:b3:43:
         06:56:25:22:c1:e3:05:ec:e4:64:8f:72:08:39:58:5f:97:34:
         ee:9e:1d:56:a1:e7:30:6a:4d:fa:5f:8c:b6:c7:c8:8f:ab:d0:
         36:b6:4b:7e:70:ce:78:c6:85:f6:13:5b:88:ca:35:ac:68:0b:
         84:05:5a:12:ae:ed:29:e9:f2:33:da:64:44:43:28:26:78:77:
         89:86:bf:d9:ee:a4:c6:66:d0:b7:36:58:19:c7:cb:8c:1c:7b:
         91:c2:fb:4b:ac:c2:bb:f4:d8:8c:cd:ce:c8:83:8d:76:c6:f1:
         45:2a:cf:c1:17:34:5d:45:75:45:8b:12:08:b7:6f:d7:bf:81:
         4e:5b:40:b0:05:6b:6d:9e:e0:5f:1d:80:c0:4c:6f:fa:d9:7f:
         fa:08:b9:6a:68:0f:38:a1:e4:e5:f0:c6:d9:dd:29:53:45:6e:
         fe:8f:20:f3:32:b1:c1:44:c7:30:9a:6f:46:15:33:14:8a:b5:
         12:30:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org