Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a343030303a3a2f33342d3334203d3e203532353237.roa
File:                     323830343a6465633a343030303a3a2f33342d3334203d3e203532353237.roa (raw, json)
Hash identifier:          vP6RsXY+E3dL5QbJhj1W2/qahlZIk8w3G5/PMl6shwM=
Subject key identifier:   DB:F9:84:A4:2A:57:36:A8:4E:DD:2C:60:C6:4F:C1:99:61:71:94:14
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       4B9ECCE86CC3BBAD14B46DD1D3B94D351448A987
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a343030303a3a2f33342d3334203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:35 +0000
ROA not before:           Tue 23 Apr 2024 13:49:35 +0000
ROA not after:            Tue 22 Apr 2025 13:54:35 +0000
asID:                     52527
IP address blocks:        2804:dec:4000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9e:cc:e8:6c:c3:bb:ad:14:b4:6d:d1:d3:b9:4d:35:14:48:a9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:35 2024 GMT
            Not After : Apr 22 13:54:35 2025 GMT
        Subject: CN=DBF984A42A5736A84EDD2C60C64FC19961719414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:b4:86:90:3f:23:15:dd:9a:cd:46:ec:88:
                    75:25:a8:b4:0f:40:3c:d2:5d:6a:85:15:8f:bc:db:
                    01:53:7d:fc:11:d1:b1:3c:bd:8d:13:e4:4e:f0:78:
                    a1:bf:54:31:87:2b:6d:cc:44:85:01:ea:f5:9d:22:
                    94:3e:0b:b1:cf:4d:1b:7a:6f:3f:33:d2:bb:3a:c0:
                    53:a9:aa:fe:da:05:ea:5c:95:a4:28:c3:f8:02:df:
                    bd:07:ab:69:8e:bb:30:10:b9:20:0e:2d:43:07:c7:
                    d2:ca:99:7e:d3:f6:03:21:98:a1:bf:0d:67:ea:a9:
                    78:23:d8:e5:17:9f:88:55:4e:15:37:5d:88:ba:ba:
                    42:54:43:8c:18:be:52:e6:a7:a7:f3:c4:cd:79:5a:
                    96:57:2d:ca:48:fa:8a:bc:05:04:28:d9:49:3c:06:
                    e6:f0:a6:05:fc:ad:79:0c:6c:e3:d8:da:a8:5c:d1:
                    f8:0a:86:37:44:3e:10:eb:af:03:52:26:76:7a:4a:
                    e9:9b:c5:71:f8:db:51:a7:7d:5b:39:17:f6:c8:83:
                    4f:23:97:3b:70:2f:9e:45:6a:ca:78:2e:62:67:dd:
                    9c:ba:3d:6f:04:68:c5:c2:54:b8:06:76:3e:5f:91:
                    57:0c:30:14:6d:c7:18:1b:12:ba:a5:08:4a:b0:27:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:84:A4:2A:57:36:A8:4E:DD:2C:60:C6:4F:C1:99:61:71:94:14
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a343030303a3a2f33342d3334203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:30:c9:10:fd:b2:fc:70:33:73:12:db:74:79:68:6e:55:d7:
         bd:6b:6c:16:5b:0c:87:3e:c1:cd:00:7a:c7:96:03:a5:48:dc:
         ca:cc:bf:f0:fb:d4:07:f8:e9:e4:b4:5f:9f:e6:99:27:1c:16:
         8b:b3:eb:bc:b5:8e:b4:42:f9:31:da:72:6a:7c:c8:22:0b:4a:
         31:84:d6:33:9d:df:67:50:bb:fb:15:7b:7a:06:fa:85:d4:4e:
         34:3d:59:89:b1:cb:1e:5f:6c:b5:83:a6:5a:6b:90:d2:71:0c:
         1c:b1:18:66:62:99:6d:36:f4:53:d0:90:b4:7b:8d:c2:59:ca:
         11:35:39:63:11:d0:ed:04:6c:73:bf:25:2c:ef:26:c2:f6:81:
         37:a0:28:4a:9c:2b:cb:14:49:7c:0b:42:e4:2b:25:e8:3c:dd:
         1b:46:1c:fd:70:b9:c1:d6:24:9c:57:e9:12:34:8f:47:5c:e0:
         33:f2:af:64:98:c4:bc:4f:e3:15:a8:74:d8:5f:17:e4:58:3c:
         22:02:a7:22:04:b1:93:ed:0d:3a:9b:b7:88:d0:3d:23:af:9e:
         0d:99:b7:10:af:ad:b5:39:57:aa:b2:23:ea:a4:1e:16:da:1f:
         63:4c:e5:3d:8e:8c:44:37:d0:29:47:a4:89:56:6c:43:3e:c0:
         a6:3f:2f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org