Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32332d3233203d3e203532353237.roa
File:                     3137372e3135322e38342e302f32332d3233203d3e203532353237.roa (raw, json)
Hash identifier:          vgnmggxAlYvk+ablKjdVUwF7IrrybotBXKlk6fdY83o=
Subject key identifier:   30:2E:4A:07:32:5D:22:04:A8:9A:E9:24:24:35:47:81:40:8B:0D:BC
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       5345B897E5643C4D1E80200874603C90BAB3DB47
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32332d3233203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:45 +0000
ROA not before:           Tue 23 Apr 2024 13:50:45 +0000
ROA not after:            Tue 22 Apr 2025 13:55:45 +0000
asID:                     52527
IP address blocks:        177.152.84.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:45:b8:97:e5:64:3c:4d:1e:80:20:08:74:60:3c:90:ba:b3:db:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:45 2024 GMT
            Not After : Apr 22 13:55:45 2025 GMT
        Subject: CN=302E4A07325D2204A89AE92424354781408B0DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:73:78:32:16:a7:a4:e0:4b:33:70:5e:78:
                    a4:af:b5:a9:95:fd:c4:78:24:92:38:ef:69:08:4b:
                    2a:be:b1:e6:6f:2c:b2:f3:43:f7:ab:45:c4:0b:59:
                    b4:86:eb:f6:88:77:58:65:d0:b6:50:8a:cf:c2:15:
                    74:5c:cf:20:17:e5:df:79:c7:14:c7:3d:61:83:46:
                    86:5a:db:db:13:3e:f9:29:72:46:1c:ab:8b:76:01:
                    be:81:8d:a1:47:c0:21:52:97:27:32:d6:a0:b8:f2:
                    94:7d:2e:20:5c:8a:11:b8:96:22:d0:4a:3a:91:a1:
                    d7:15:b1:0c:6a:30:95:95:29:d4:79:bc:86:1b:83:
                    26:09:50:19:2f:5c:7d:7e:39:f1:4f:a8:3e:ba:12:
                    37:39:66:2b:ec:59:6c:c5:a2:f7:8d:f8:d4:e8:fd:
                    3f:63:46:e3:22:be:10:d0:6c:db:f8:c0:05:f5:2b:
                    3b:8a:0f:ba:8a:27:83:5c:94:ba:f4:09:fa:ae:62:
                    e3:cb:89:a7:ce:8b:4a:b6:37:10:13:16:30:e3:d8:
                    21:17:94:66:41:6b:5a:19:9c:ce:b3:b3:7d:b7:7d:
                    ce:ef:ae:2e:d9:88:21:b6:db:94:57:c7:52:9c:fe:
                    3a:ae:72:fd:c1:98:8f:0a:c1:6a:51:e0:ce:6b:64:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2E:4A:07:32:5D:22:04:A8:9A:E9:24:24:35:47:81:40:8B:0D:BC
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32332d3233203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:b8:03:4d:58:03:10:34:2d:1a:34:7e:0c:af:87:df:ea:02:
         1f:6d:2f:e6:b7:26:12:a4:aa:c8:a8:c9:bc:7f:aa:fc:27:38:
         35:bb:a5:f1:3c:93:26:cf:7e:85:ef:3f:07:e2:c5:1e:dd:5b:
         65:cf:e5:a8:91:74:cd:8d:98:e4:8a:ec:9e:3c:2c:84:0c:b2:
         9b:06:37:36:b4:96:9d:10:60:89:fe:9b:a6:65:f7:e0:9f:e6:
         c9:76:40:e3:06:ef:2c:94:65:3b:61:e1:61:0d:a6:6a:9a:27:
         db:e6:a7:4a:a5:2a:d0:58:ef:12:f2:85:16:32:bf:08:4b:ba:
         81:66:96:02:48:34:23:74:95:37:41:bc:bf:e2:a2:a4:3f:5d:
         9d:16:d0:fc:0a:82:dc:be:74:7c:8b:47:73:ab:6c:50:8d:0d:
         12:e1:5b:fa:b6:f4:7c:81:71:bd:3f:04:8b:59:64:94:e0:0a:
         41:7f:2f:e9:dd:8a:84:2c:97:16:46:93:69:b7:af:59:db:95:
         0e:e7:04:b6:fd:36:69:c4:25:25:79:8c:dc:12:fb:30:38:f0:
         95:89:06:e4:61:43:d3:7b:58:d9:1e:73:c2:43:06:15:5a:36:
         3c:31:c5:88:39:fc:a4:d0:88:ca:76:24:15:0e:d7:65:fb:21:
         39:ec:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org