Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38352e302f32342d3234203d3e203532353237.roa
File:                     3137372e3135322e38352e302f32342d3234203d3e203532353237.roa (raw, json)
Hash identifier:          9xdvoYx+yp0JjWbF3uzvR/o8HEi0M6gsvZKmm6HuTQg=
Subject key identifier:   AB:35:88:34:79:8A:91:B8:44:8E:8C:8A:F0:0A:58:18:1D:E2:41:BE
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       27EE2DEDEB6215B2CDFADCB2DA220FFC5D4DC9EE
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38352e302f32342d3234203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:56 +0000
ROA not before:           Tue 23 Apr 2024 13:50:56 +0000
ROA not after:            Tue 22 Apr 2025 13:55:56 +0000
asID:                     52527
IP address blocks:        177.152.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ee:2d:ed:eb:62:15:b2:cd:fa:dc:b2:da:22:0f:fc:5d:4d:c9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:56 2024 GMT
            Not After : Apr 22 13:55:56 2025 GMT
        Subject: CN=AB358834798A91B8448E8C8AF00A58181DE241BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:72:f8:e8:af:ef:4e:ba:e3:3b:bc:b9:5c:
                    fd:6e:f6:ff:83:82:d0:7b:fc:6d:89:f1:8b:01:e2:
                    8e:9c:55:f6:b9:2e:af:02:8f:9e:94:d4:3f:9b:09:
                    50:74:d8:26:e5:61:d9:3b:e9:81:f8:18:e1:55:e7:
                    24:35:12:8c:b0:2f:27:b5:7a:00:b4:7a:ba:06:ed:
                    d9:47:78:9e:28:eb:f3:92:48:28:c1:a4:85:fd:c3:
                    c0:d1:fa:b3:7e:fb:8f:1c:cc:0e:55:5e:f9:5c:51:
                    e5:c9:a5:4e:d6:89:96:31:6b:8f:87:2b:40:60:c2:
                    ad:b0:41:b9:5a:22:33:20:e3:56:18:d6:2b:25:29:
                    a8:b0:37:cf:36:d6:ea:4c:46:70:46:3f:f0:20:43:
                    fb:3d:f6:ea:10:c0:ac:87:26:63:c9:8b:44:09:4e:
                    0d:a8:b6:a7:05:18:17:d2:4f:62:15:5d:32:4b:d4:
                    d4:3f:0a:e9:c4:dc:fc:65:ca:ba:68:fe:ed:fe:96:
                    6e:47:13:b5:03:43:b2:f7:dd:36:d2:9f:f3:a4:13:
                    3c:65:5e:6e:a1:74:96:c7:75:b1:ae:ec:01:c5:7c:
                    bd:97:3e:a9:f8:69:3e:bc:40:4c:e5:00:57:7a:ef:
                    b5:a8:fb:97:ef:8e:d7:1e:96:7d:da:37:08:c4:e8:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:35:88:34:79:8A:91:B8:44:8E:8C:8A:F0:0A:58:18:1D:E2:41:BE
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38352e302f32342d3234203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:06:6b:4c:75:e4:25:c9:a4:c6:fc:03:16:3e:41:54:6b:9d:
         e8:8b:d4:0c:1a:34:ce:8b:81:8e:ab:d4:d2:27:a7:a4:34:c2:
         55:0f:a3:bd:f5:40:4c:d4:83:77:c0:b2:91:eb:22:0c:ad:64:
         6d:9c:cb:9c:bd:00:cb:3f:56:91:f2:cf:cf:bf:60:15:a2:8f:
         0c:d5:d6:fc:6d:73:e1:d2:8f:45:87:68:4d:5b:50:54:04:ff:
         80:cb:8a:bd:1a:d4:0d:be:f8:e5:3e:dd:dc:ad:35:ab:4f:3f:
         e7:b7:98:ea:7e:7c:86:23:d9:41:9c:39:f2:4e:f3:c7:24:22:
         02:ae:ac:9e:0d:37:4c:68:7a:6e:ce:b3:b2:3c:67:51:8a:a7:
         c0:e7:4a:05:2b:38:17:c5:ac:23:42:1e:d8:ef:7a:99:f5:83:
         7a:13:fb:bd:f2:f4:b1:b9:e3:dd:b2:c2:ec:45:50:6e:82:fa:
         0e:6a:fc:02:a9:6c:a9:c0:bd:47:2b:d8:eb:6e:69:f4:e1:d9:
         08:9e:d6:ae:88:7b:6c:d9:31:3a:99:11:c0:b2:91:fc:bd:1f:
         c1:df:1b:c5:d7:e8:0b:24:57:4c:ae:75:af:3c:96:5d:a5:8b:
         86:1c:0c:a2:50:02:c5:97:37:b1:4f:0c:f2:5c:bc:04:91:73:
         3a:b2:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org