Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a323030303a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a323030303a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          isO7cDdxssjMbE+TmjV/pgoRRA+euyWdO0QNPj3DqU8=
Subject key identifier:   8E:E9:48:7B:87:21:B6:6F:C8:87:82:F8:10:53:54:9D:A1:2E:8F:ED
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       1DBEC671ADB75D2E2514F698D9C461A7673E8B20
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a323030303a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:33 +0000
ROA not before:           Tue 23 Apr 2024 13:49:33 +0000
ROA not after:            Tue 22 Apr 2025 13:54:33 +0000
asID:                     52527
IP address blocks:        2804:dec:2000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:be:c6:71:ad:b7:5d:2e:25:14:f6:98:d9:c4:61:a7:67:3e:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:33 2024 GMT
            Not After : Apr 22 13:54:33 2025 GMT
        Subject: CN=8EE9487B8721B66FC88782F81053549DA12E8FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:8e:1d:76:ec:44:53:41:6a:58:06:b3:ad:
                    5a:fb:20:fe:dc:6d:86:c2:5e:ee:eb:4b:52:13:76:
                    41:e9:79:15:97:ea:05:38:e1:20:b1:bd:8a:f0:bc:
                    6a:be:31:34:25:8e:d0:b3:e7:23:27:9e:6d:41:4b:
                    d6:ff:92:d4:41:93:8b:c4:52:bd:7a:37:96:94:89:
                    0c:5b:5a:ab:1a:4b:a9:20:a7:4c:09:01:b2:60:3d:
                    b2:33:c3:31:d2:da:bb:4c:83:43:4c:e2:a0:68:46:
                    d1:b3:06:b4:30:aa:68:b0:ba:23:a0:60:6e:73:6d:
                    09:71:46:c2:df:d2:fc:da:c8:d7:46:33:37:3f:c3:
                    c5:86:27:71:33:e0:5d:a4:9c:e6:5b:04:b8:1c:6e:
                    3a:a0:72:99:9b:80:c2:1f:82:90:53:43:f6:9d:54:
                    08:63:b5:e3:91:49:17:7a:53:a9:79:f1:4d:e7:e8:
                    05:e6:28:ce:09:c6:c2:0e:55:58:36:94:0f:9f:e9:
                    f6:c0:57:8f:4f:1f:df:74:e3:bc:c1:49:79:f6:db:
                    50:1e:35:9e:0f:bf:df:04:93:e3:1c:4a:71:0f:04:
                    58:11:cd:f2:86:4e:09:58:39:fe:7f:a3:eb:46:d4:
                    bf:29:36:e5:c0:d2:2c:06:28:56:50:5c:3f:07:78:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E9:48:7B:87:21:B6:6F:C8:87:82:F8:10:53:54:9D:A1:2E:8F:ED
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a323030303a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:70:72:38:25:e9:a3:45:4f:6e:f9:37:d0:06:4a:ce:e7:
         e9:ad:a0:e5:c2:0f:b3:b4:5f:6e:d9:73:3c:f1:a5:97:f6:75:
         f8:f5:fc:ae:ac:fe:6a:0f:88:63:a5:e0:45:c4:80:e1:ed:56:
         1c:7c:4a:f8:10:fb:59:aa:5d:3b:0f:41:40:15:75:ab:9d:36:
         15:bd:f7:86:f5:dd:77:e7:f7:e1:64:a6:96:c4:cc:be:92:e1:
         20:c2:f2:f8:61:68:26:8f:af:ea:d8:69:96:bb:23:db:5a:e6:
         13:19:01:23:a9:4b:fb:04:e9:44:dd:09:2f:87:df:4e:89:33:
         5d:b1:cc:db:66:e1:3f:d7:a9:2a:1d:ab:04:87:01:c5:f6:d3:
         d9:e0:af:41:5c:1b:2a:06:35:61:5b:74:0e:5d:88:bb:77:6c:
         19:9d:13:1f:11:c6:1a:89:12:2c:c8:05:c4:29:9a:d8:bd:45:
         e6:13:0f:7d:2f:7c:48:14:a5:f5:d9:e8:62:dd:89:5d:86:21:
         81:44:60:4b:41:99:5b:65:0b:81:d6:dc:ab:87:8f:61:f3:b0:
         c2:ac:df:a7:96:35:e1:e2:6e:03:ae:ac:cc:07:37:f3:60:73:
         f2:62:95:30:2d:6f:52:c9:47:85:cf:3e:3c:c5:06:be:49:b1:
         98:55:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org