Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38362e302f32342d3234203d3e203532353237.roa
File:                     3137372e3135322e38362e302f32342d3234203d3e203532353237.roa (raw, json)
Hash identifier:          KXdXBRS5tFNyGZ8CzNtd6d8rTcYqnYwk2829EQvFi6o=
Subject key identifier:   CD:26:72:56:4D:E8:E5:0B:49:34:95:86:C9:BF:6B:AC:29:92:D0:51
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       571402D82B286DAA5C8EA511CFCBD4B4D69DE9B3
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38362e302f32342d3234203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:56:06 +0000
ROA not before:           Tue 23 Apr 2024 13:51:06 +0000
ROA not after:            Tue 22 Apr 2025 13:56:06 +0000
asID:                     52527
IP address blocks:        177.152.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:14:02:d8:2b:28:6d:aa:5c:8e:a5:11:cf:cb:d4:b4:d6:9d:e9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:51:06 2024 GMT
            Not After : Apr 22 13:56:06 2025 GMT
        Subject: CN=CD2672564DE8E50B49349586C9BF6BAC2992D051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:2d:58:b3:b2:25:57:97:eb:43:26:3b:0d:
                    b9:b8:26:05:45:1f:a4:66:30:15:dd:3d:dd:12:84:
                    c9:b3:39:2e:8a:81:5f:c9:81:e5:d1:00:47:06:4b:
                    6a:d7:5a:53:95:0c:02:85:4e:ce:a7:61:56:b1:c7:
                    7e:27:d8:3e:02:ca:da:5a:56:4f:92:c0:73:b6:04:
                    76:5b:55:49:21:35:f8:61:9d:0b:2d:40:31:80:10:
                    64:b0:c0:16:86:00:d0:a8:60:2d:c7:b2:0b:dd:fc:
                    b9:00:7c:47:a0:eb:1c:de:c8:7e:3e:b0:5b:94:dc:
                    52:f3:c8:3c:ee:12:d6:e3:54:13:08:75:e3:f1:11:
                    52:12:1c:24:c0:ab:d0:5d:a6:f0:a0:15:9f:c3:39:
                    3d:de:9d:31:bf:9a:2e:1d:ad:9b:c9:76:9f:44:99:
                    10:cc:bb:47:11:0d:b4:22:0d:3f:ef:ff:40:e6:89:
                    cf:91:9c:f6:9d:e2:ba:03:d6:da:0f:8b:f8:21:7e:
                    16:e7:98:42:98:5b:95:a1:a6:5e:11:7a:0b:12:d7:
                    4f:5d:ee:a0:4a:a8:aa:7c:04:0b:03:6c:d5:8a:c4:
                    7f:b5:59:f5:4e:bd:6e:cd:e0:8e:c5:42:03:98:b7:
                    08:be:5c:14:02:87:42:66:16:a4:54:9a:b6:d7:ee:
                    c5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:26:72:56:4D:E8:E5:0B:49:34:95:86:C9:BF:6B:AC:29:92:D0:51
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38362e302f32342d3234203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:df:dc:55:c7:db:38:3f:0d:1a:99:e2:e3:18:60:66:c4:10:
         48:cd:42:c0:63:7c:97:43:b1:2e:91:18:cb:bf:cb:be:02:d5:
         0b:ea:61:bb:0d:f5:7d:11:3b:47:98:71:5e:35:91:66:cf:2c:
         19:7e:1f:c8:dd:21:9e:ea:c8:56:0a:85:a8:24:42:ce:77:73:
         88:c6:8c:a5:9a:42:c7:38:96:ef:3a:ff:2f:54:d9:f2:9a:e5:
         dd:d4:3a:66:d6:48:ab:c8:47:95:49:9f:a8:2b:be:4f:a3:b7:
         8e:05:e5:11:49:c4:9a:07:f6:e9:8a:ed:7d:68:bb:69:fb:da:
         64:fc:7b:b3:e0:da:fb:64:77:2b:0a:5d:ff:a9:36:dd:5d:ef:
         0c:df:f7:a3:91:5a:1e:62:27:18:6a:7a:67:11:ad:fc:f9:16:
         0c:36:0a:e8:22:04:07:36:6e:4a:38:8f:04:f0:fa:69:61:54:
         ae:5d:da:56:69:86:31:9a:35:39:07:42:90:9f:f8:1c:3c:b7:
         ff:1c:4d:5d:8f:53:8c:2b:03:7f:35:ef:47:72:d3:0f:8a:33:
         7d:22:45:8c:95:2e:d0:33:78:ae:e5:f7:89:d6:a3:7e:ca:9f:
         6a:f7:1d:c8:29:0c:31:e6:f9:65:f1:fa:64:b5:4e:5b:12:4b:
         aa:35:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org