Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32322d3232203d3e203532353237.roa
File:                     3137372e3135322e38342e302f32322d3232203d3e203532353237.roa (raw, json)
Hash identifier:          rXO2n4F5aIkgXazySRIhFNgJU51TGkPgs0+xXcZPSok=
Subject key identifier:   A5:14:96:F7:23:60:52:B2:1F:28:09:44:89:3A:F9:EF:4C:B1:11:52
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       44856F528764BDAE60F3F5A3ED728DC5D2039C5F
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32322d3232203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:39 +0000
ROA not before:           Tue 23 Apr 2024 13:50:39 +0000
ROA not after:            Tue 22 Apr 2025 13:55:39 +0000
asID:                     52527
IP address blocks:        177.152.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:85:6f:52:87:64:bd:ae:60:f3:f5:a3:ed:72:8d:c5:d2:03:9c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:39 2024 GMT
            Not After : Apr 22 13:55:39 2025 GMT
        Subject: CN=A51496F7236052B21F280944893AF9EF4CB11152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:9a:e0:cd:ce:bd:dc:21:6d:05:ae:fa:c3:
                    ed:ec:b2:21:22:72:09:22:83:14:61:28:71:1e:b8:
                    72:44:bb:a9:57:d8:74:d9:3d:9c:6a:31:6a:16:08:
                    93:c5:d8:67:41:3d:0b:66:7b:43:93:ab:20:b6:6b:
                    e3:17:20:84:69:e9:bd:12:14:a6:22:36:ee:35:48:
                    be:d2:eb:ed:68:e3:e9:d6:ad:46:d5:5c:d0:54:83:
                    5a:b9:b7:88:25:f1:db:95:59:3a:c3:44:4c:0a:bb:
                    73:3b:dc:d6:e4:4f:f2:b1:5a:64:6b:82:b4:9b:0a:
                    ca:48:13:ad:c8:68:79:e1:60:f7:0e:f8:34:28:87:
                    cb:5c:91:ff:71:1d:22:40:b4:07:ba:ce:e6:dc:a7:
                    08:25:82:bf:83:9e:7d:f1:e6:1f:17:68:6a:ec:f6:
                    76:82:03:0a:f9:1c:90:0d:32:a4:90:84:3b:36:72:
                    07:d4:f1:a5:2a:11:07:98:c0:ba:2c:f9:2a:04:aa:
                    d2:1a:a2:67:d5:f0:a3:b4:cc:9d:2c:40:15:27:64:
                    7e:fd:d4:25:4d:2c:47:1e:1f:c2:70:2e:31:1c:da:
                    d3:3f:ab:d2:d6:9f:a5:cf:02:3d:7b:1d:6e:92:03:
                    50:18:ec:dc:85:53:40:3b:d2:2d:09:7c:f1:58:b6:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:14:96:F7:23:60:52:B2:1F:28:09:44:89:3A:F9:EF:4C:B1:11:52
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32322d3232203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:3a:58:02:07:6b:04:b4:49:35:42:eb:a1:d7:3d:6d:c3:7e:
         86:bb:80:5b:25:54:a6:2c:1b:24:b6:2e:d2:03:3c:3b:07:de:
         b8:f1:6a:bc:81:0c:a9:84:37:fa:09:f9:69:b1:42:c5:d7:8c:
         83:39:d7:f2:4b:95:ed:6e:45:d0:c4:44:21:d1:47:f4:9e:34:
         b3:6a:08:dc:83:69:aa:37:36:ae:f5:e4:26:28:27:7e:ad:3a:
         05:b4:36:13:a5:8a:a7:1a:f4:a8:6f:06:a4:2c:f1:1b:72:45:
         0e:b2:37:57:aa:6c:18:c0:93:d2:3e:7c:4f:17:a0:8a:45:99:
         36:d8:f9:5a:1c:3d:d6:27:62:8f:d8:b8:19:b6:9e:af:2a:70:
         c5:e5:00:1a:83:6c:10:1a:f7:da:99:6f:d9:d7:94:5f:78:e4:
         fd:83:dd:f6:f3:25:62:dc:66:d4:aa:08:3c:56:cd:ef:56:48:
         57:8a:b5:4c:9e:ca:7c:3d:68:cd:43:e8:fa:9b:30:90:98:9d:
         bc:cb:2f:45:f6:48:41:f4:78:b0:8c:9f:10:6e:17:7f:40:bd:
         24:ab:9f:69:dd:5d:c6:e1:37:78:47:d6:8a:0b:c4:2e:73:ae:
         02:ec:2a:79:16:f8:af:b9:1b:5d:b4:43:88:6b:c7:b8:09:55:
         bb:ec:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org