Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32342d3234203d3e203532353237.roa
File:                     3137372e3135322e38342e302f32342d3234203d3e203532353237.roa (raw, json)
Hash identifier:          uiLKAqxm0Q0XAVaWAd0w6ee9oXcHzfIJL6wug1wsjd4=
Subject key identifier:   46:E4:A8:F4:3F:8E:D1:B4:FA:F3:84:CD:20:A0:47:02:23:F5:FE:30
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       4E2026C1DB78061C6B27B5B22352BB70E43668A6
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32342d3234203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:50 +0000
ROA not before:           Tue 23 Apr 2024 13:50:50 +0000
ROA not after:            Tue 22 Apr 2025 13:55:50 +0000
asID:                     52527
IP address blocks:        177.152.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:26:c1:db:78:06:1c:6b:27:b5:b2:23:52:bb:70:e4:36:68:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:50 2024 GMT
            Not After : Apr 22 13:55:50 2025 GMT
        Subject: CN=46E4A8F43F8ED1B4FAF384CD20A0470223F5FE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:05:ca:69:a2:c9:39:69:b2:78:fc:33:67:
                    c8:a1:9e:1b:ec:dd:c4:d8:05:11:e6:b3:25:61:ea:
                    f9:f1:9b:06:7e:30:b7:84:7b:e9:8d:b4:fd:76:af:
                    6c:38:dd:fc:c9:cc:dd:44:44:7d:cb:1f:4a:86:5d:
                    5b:07:b5:18:c2:c9:fb:03:39:8d:d6:e0:25:2d:84:
                    d9:25:c9:5c:d0:ee:d9:01:4a:58:61:71:86:7e:87:
                    59:7f:84:b3:be:be:21:cc:7f:34:27:e0:24:9d:33:
                    bd:65:25:29:e4:07:a6:95:4e:39:5e:8e:c3:a1:67:
                    83:c0:4d:5e:f5:20:79:4b:d9:38:0a:e5:42:a7:f4:
                    b9:bb:d2:b7:5a:99:65:04:0a:73:4e:b2:4e:c3:8d:
                    c6:5d:97:dd:40:36:f5:06:d2:5e:34:00:2c:7e:ba:
                    c8:8c:56:b7:43:4c:19:bf:8c:66:04:0b:b5:be:ec:
                    ae:53:6c:c9:14:3a:5a:1c:6f:6a:b6:03:27:0b:d9:
                    2e:85:52:55:e1:e1:11:8d:21:db:1a:8f:82:82:38:
                    04:7f:1a:f8:e9:3a:f3:e1:82:37:99:de:c3:e4:12:
                    e3:ad:4b:55:6e:dc:3b:b3:63:62:c9:1d:00:90:ef:
                    50:eb:de:be:7b:f0:58:3a:89:d0:40:d6:e9:23:67:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:A8:F4:3F:8E:D1:B4:FA:F3:84:CD:20:A0:47:02:23:F5:FE:30
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32342d3234203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:27:3c:b0:ef:5a:3c:9d:89:d8:6f:5c:f7:13:97:f1:93:
         6f:cd:0c:d5:fe:d3:39:cd:46:7a:74:bb:c7:7a:93:83:fa:e5:
         05:53:fd:9c:1f:28:96:e6:5a:42:6c:3f:2b:4f:bc:0c:c8:9b:
         86:b5:f1:e7:ab:ec:01:9b:0f:f3:32:b2:e1:c5:a9:7d:32:fd:
         3b:48:8d:9d:9c:98:87:10:28:b5:15:37:5a:5d:49:11:be:83:
         24:00:e8:36:69:a7:9e:a2:25:c9:76:8d:1b:7a:45:dc:96:fa:
         89:3f:dc:8c:59:47:90:03:24:c2:02:eb:0c:d7:a9:c6:60:ae:
         c6:07:b5:41:f7:d8:23:0f:2a:1c:92:eb:08:57:80:d8:27:30:
         71:99:e0:ca:49:16:d0:21:e4:cf:63:05:b2:e9:90:39:ad:b1:
         f1:a3:c1:d6:8f:af:7a:4e:96:06:b0:91:e2:60:de:df:82:38:
         2b:a1:31:b0:44:46:17:d1:e6:e0:e7:67:99:d3:e1:c9:50:2f:
         05:0d:75:6e:18:f3:b6:03:db:01:f5:0a:06:b4:d6:41:3e:c1:
         7f:44:ca:4d:db:83:f9:28:18:14:b8:fb:c3:15:14:4b:be:f6:
         e8:60:0f:b2:dd:4e:d5:d8:4a:4b:e8:53:72:f7:11:b7:d1:f1:
         1d:0b:65:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org