Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3130303a3a2f34302d3430203d3e203532353237.roa
File:                     323830343a6465633a3130303a3a2f34302d3430203d3e203532353237.roa (raw, json)
Hash identifier:          87LeHF5vxyG2NSfXhsVVuvPkZJss8AnxW9ILUgl3PDE=
Subject key identifier:   19:F4:5C:74:48:C3:DC:B1:7B:4E:C0:EC:69:29:2F:FB:E4:DC:4D:3E
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       28D534BA9D0C453FD53168D38EBC7A218DBB5B3C
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3130303a3a2f34302d3430203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:19 +0000
ROA not before:           Tue 23 Apr 2024 13:49:19 +0000
ROA not after:            Tue 22 Apr 2025 13:54:19 +0000
asID:                     52527
IP address blocks:        2804:dec:100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d5:34:ba:9d:0c:45:3f:d5:31:68:d3:8e:bc:7a:21:8d:bb:5b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:19 2024 GMT
            Not After : Apr 22 13:54:19 2025 GMT
        Subject: CN=19F45C7448C3DCB17B4EC0EC69292FFBE4DC4D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:b3:fa:f7:97:64:92:9f:1f:40:d0:07:8b:
                    e8:d6:99:7a:c8:79:2c:ed:08:f0:91:59:01:98:3c:
                    15:57:60:7d:c7:75:6d:6f:fb:78:6e:fe:68:75:7c:
                    b5:4a:58:21:5b:91:9c:26:1f:aa:89:44:12:34:02:
                    d0:25:eb:89:cd:21:62:f7:a2:c8:93:11:4f:da:93:
                    1e:7d:3b:47:03:84:cf:a6:fc:c5:35:63:72:84:8e:
                    00:8f:70:3f:c0:17:3e:5f:7e:99:27:37:aa:a4:52:
                    99:44:83:ec:ac:81:01:c2:cb:e1:1e:fa:c5:07:4c:
                    11:ae:cb:f4:ba:99:0e:f9:6e:70:12:a7:62:a2:18:
                    3a:d1:8b:4d:1d:be:7c:08:3f:fc:a3:aa:f9:51:52:
                    cd:4b:99:1f:a9:60:89:a5:f1:f0:8f:8a:5a:19:c6:
                    00:9d:51:56:d5:d2:5e:f2:d3:3b:8b:59:74:b4:94:
                    6d:29:c5:cb:4f:df:8c:72:da:d0:64:8f:0f:06:f6:
                    7f:14:1b:26:0d:d4:1a:9b:8b:ea:6e:d8:70:48:2d:
                    1a:6b:31:59:99:8b:7b:9b:35:c4:b2:9a:6d:fa:c3:
                    1b:28:52:34:76:c1:c1:69:ed:53:ee:41:ed:0b:42:
                    83:35:fc:43:26:16:fc:d2:11:52:40:47:8a:dd:82:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:5C:74:48:C3:DC:B1:7B:4E:C0:EC:69:29:2F:FB:E4:DC:4D:3E
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3130303a3a2f34302d3430203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:19:d7:4c:67:67:61:ec:24:94:31:b5:6f:ff:e6:a8:9e:
         04:5e:55:bb:5a:47:8e:5a:b1:5a:71:e3:15:04:c7:86:2f:6a:
         c8:db:81:01:f8:d7:49:e3:16:b3:c7:92:72:d3:c5:72:ac:bc:
         cf:88:99:95:84:ef:5d:76:ef:73:5e:d9:a1:45:14:dc:d5:f0:
         8d:f1:f4:fe:d8:25:59:8b:a6:d0:6a:fe:2f:3e:ad:d4:d2:3a:
         49:cb:52:b9:18:53:f9:22:29:54:85:df:02:45:7a:dd:92:b2:
         49:b7:bd:c3:f5:a3:ac:a6:6f:e3:b8:75:5b:0b:ed:ef:51:1b:
         af:41:25:e4:59:5a:5b:71:f8:00:38:bd:d2:f6:d4:e7:00:7b:
         62:01:bf:82:78:dd:f9:4d:54:ea:26:b4:84:20:e4:4c:f8:b3:
         7e:69:39:0b:09:bf:2a:91:c7:24:64:8c:97:b9:c4:42:d7:af:
         27:8b:ee:cd:65:54:81:4d:42:06:c8:0f:79:fc:e9:ad:a7:c3:
         ad:04:f9:9b:32:07:40:f6:0c:be:31:df:5b:a5:46:e3:86:fc:
         d5:21:83:89:5a:85:69:61:20:6d:fa:92:4c:c4:57:86:8d:ef:
         36:1a:0e:aa:0f:0e:93:7d:5d:ae:5d:a4:e0:e3:79:6c:c2:f7:
         9a:cf:e7:aa
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUKNU0up0MRT/VMWjTjrx6IY27WzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FFQjk1OTE1MDQ1NkVDMTY3NEU5MUUwODRGMkM0RUY1
QjFBN0VCNDAeFw0yNDA0MjMxMzQ5MTlaFw0yNTA0MjIxMzU0MTlaMDMxMTAvBgNV
BAMTKDE5RjQ1Qzc0NDhDM0RDQjE3QjRFQzBFQzY5MjkyRkZCRTREQzREM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGf7P695dkkp8fQNAHi+jWmXrI
eSztCPCRWQGYPBVXYH3HdW1v+3hu/mh1fLVKWCFbkZwmH6qJRBI0AtAl64nNIWL3
osiTEU/akx59O0cDhM+m/MU1Y3KEjgCPcD/AFz5ffpknN6qkUplEg+ysgQHCy+Ee
+sUHTBGuy/S6mQ75bnASp2KiGDrRi00dvnwIP/yjqvlRUs1LmR+pYIml8fCPiloZ
xgCdUVbV0l7y0zuLWXS0lG0pxctP34xy2tBkjw8G9n8UGyYN1Bqbi+pu2HBILRpr
MVmZi3ubNcSymm36wxsoUjR2wcFp7VPuQe0LQoM1/EMmFvzSEVJAR4rdgnLZAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUGfRcdEjD3LF7TsDsaSkv++TcTT4wHwYDVR0j
BBgwFoAUeuuVkVBFbsFnTpHghPLE71safrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da
SkovMC83QUVCOTU5MTUwNDU2RUMxNjc0RTkxRTA4NEYyQzRFRjVCMUE3RUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBRUI5NTkxNTA0NTZFQzE2
NzRFOTFFMDg0RjJDNEVGNUIxQTdFQjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAv
MzIzODMwMzQzYTY0NjU2MzNhMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzUzMjM1MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEDewBMA0GCSqGSIb3DQEBCwUAA4IBAQAJ
HxnXTGdnYewklDG1b//mqJ4EXlW7WkeOWrFaceMVBMeGL2rI24EB+NdJ4xazx5Jy
08VyrLzPiJmVhO9ddu9zXtmhRRTc1fCN8fT+2CVZi6bQav4vPq3U0jpJy1K5GFP5
IilUhd8CRXrdkrJJt73D9aOspm/juHVbC+3vURuvQSXkWVpbcfgAOL3S9tTnAHti
Ab+CeN35TVTqJrSEIORM+LN+aTkLCb8qkcckZIyXucRC168ni+7NZVSBTUIGyA95
/Omtp8OtBPmbMgdA9gy+Md9bpUbjhvzVIYOJWoVpYSBt+pJMxFeGje82Gg6qDw6T
fV2uXaTg43lswveaz+eq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org