Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3230303a3a2f34302d3430203d3e203532353237.roa
File:                     323830343a6465633a3230303a3a2f34302d3430203d3e203532353237.roa (raw, json)
Hash identifier:          qwYoVCIaWUuvBUAKuqUkhWhfVFd95WyFNPHod0KF7OE=
Subject key identifier:   E0:60:7C:B6:07:6C:83:E1:E3:02:81:70:5F:F6:B9:34:44:85:96:76
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       19FC4F7112BAC83EC6C58FF59575C3265FAE151F
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3230303a3a2f34302d3430203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:24 +0000
ROA not before:           Tue 23 Apr 2024 13:49:24 +0000
ROA not after:            Tue 22 Apr 2025 13:54:24 +0000
asID:                     52527
IP address blocks:        2804:dec:200::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fc:4f:71:12:ba:c8:3e:c6:c5:8f:f5:95:75:c3:26:5f:ae:15:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:24 2024 GMT
            Not After : Apr 22 13:54:24 2025 GMT
        Subject: CN=E0607CB6076C83E1E30281705FF6B93444859676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:51:46:66:50:4f:bc:71:f4:08:8b:99:f6:
                    f4:7c:50:fc:a9:9d:0f:ea:d2:7b:58:64:29:7e:bd:
                    76:4d:4e:e8:86:92:6b:26:7b:5b:0d:fb:6b:af:d4:
                    8b:7c:62:e2:b7:a6:c5:e1:19:09:de:82:b1:2f:f0:
                    59:aa:47:c4:c2:91:bf:6b:da:65:51:12:2c:75:76:
                    90:14:97:7e:ab:dd:68:4e:57:87:78:73:11:36:5c:
                    99:51:b2:30:fa:cb:ca:b5:cf:1a:b5:ca:7c:e1:24:
                    6a:cc:f4:86:50:36:19:bd:f3:94:4c:68:50:5a:47:
                    83:89:99:f2:ca:79:41:ea:4e:49:bf:20:bd:97:07:
                    8a:95:00:3a:c8:ae:0b:9f:a8:f8:d2:3a:7c:5b:93:
                    26:6b:ad:20:5c:e7:a6:2e:c0:d6:63:6a:70:84:21:
                    92:3e:30:8e:cc:af:84:a2:fd:f4:2b:25:3c:c4:47:
                    54:89:20:03:b9:f3:ec:ea:81:ba:ff:81:8c:43:2d:
                    41:3b:f3:2b:37:43:1e:8c:ee:ec:bc:a8:54:92:2e:
                    b7:ca:8f:5e:90:f3:06:72:49:76:c2:a2:24:ff:93:
                    f6:f6:bf:e3:6a:17:e6:4c:03:a1:72:91:ff:a6:f7:
                    c6:85:ad:ae:15:86:ef:64:d3:10:bc:95:76:14:ef:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:7C:B6:07:6C:83:E1:E3:02:81:70:5F:F6:B9:34:44:85:96:76
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3230303a3a2f34302d3430203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:6a:b5:fa:c0:e7:19:05:af:0f:04:ce:a2:b7:da:8e:21:
         1d:ec:4d:bb:b9:c8:a7:08:38:9b:dc:da:32:02:67:d0:59:d5:
         e0:9a:98:eb:bc:ff:2c:cb:fd:a3:68:a7:a7:18:c8:34:9c:ee:
         a0:48:7d:7c:b0:1e:59:e5:00:8b:05:34:e4:2c:52:1a:11:73:
         d1:17:d9:c7:6c:c0:30:04:1f:70:85:50:de:27:d1:f8:19:35:
         4d:97:ca:b4:9b:c1:94:9a:97:c1:fb:5c:49:77:a3:84:7a:89:
         61:2d:89:af:9e:0b:b8:3d:cc:f4:7b:73:f5:f8:ab:bc:a4:c9:
         cf:28:c3:fb:67:ac:d3:90:ec:18:83:33:b0:96:c9:08:b5:88:
         9b:b5:03:fd:a6:d6:6a:5e:12:77:36:77:bf:4a:84:30:01:dd:
         13:55:da:b8:fe:51:90:c4:10:fe:c2:ff:03:d1:aa:3c:da:8d:
         5c:a1:fa:a6:fd:73:72:2e:ee:54:96:a1:3a:9d:9f:8c:4a:f2:
         54:ab:71:f7:19:f1:21:e5:44:9c:c1:2d:9d:ec:b1:c8:30:91:
         7a:56:e3:ef:98:0a:f2:4e:e8:d6:74:67:d5:d0:aa:41:59:68:
         a6:ab:a1:21:fd:87:f0:30:2e:ac:9b:cd:73:dc:f4:f1:78:5f:
         80:27:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org