Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a343030303a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a343030303a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          7MTsISOWN5EUmlpiJ85KBn3er9KtSb1df4OJd9TNk+s=
Subject key identifier:   29:98:A5:13:07:B9:42:E8:6B:5B:A9:52:52:5F:02:CF:5C:20:4B:BB
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       7626FBAE1A66FD010749C8A7FE1C3C05E76B951F
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a343030303a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:38 +0000
ROA not before:           Tue 23 Apr 2024 13:49:38 +0000
ROA not after:            Tue 22 Apr 2025 13:54:38 +0000
asID:                     52527
IP address blocks:        2804:dec:4000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:26:fb:ae:1a:66:fd:01:07:49:c8:a7:fe:1c:3c:05:e7:6b:95:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:38 2024 GMT
            Not After : Apr 22 13:54:38 2025 GMT
        Subject: CN=2998A51307B942E86B5BA952525F02CF5C204BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:f8:3c:76:15:b9:52:42:b7:c1:4c:1b:bf:
                    a8:6e:5b:d4:10:a2:f4:57:94:95:f8:bb:5a:7e:bb:
                    a8:cd:da:ac:7c:7b:0f:bf:62:3d:33:ef:3d:fb:98:
                    fd:54:d9:0f:ae:eb:2c:cd:a0:40:80:11:f9:d6:38:
                    9e:15:9f:ac:22:80:31:5f:51:20:b1:23:a8:87:1e:
                    36:53:c8:ab:99:5d:39:46:54:6a:7f:21:5f:af:f6:
                    cb:55:5f:53:d5:93:dc:48:1d:b2:15:c8:18:95:31:
                    e8:a2:2d:a7:1b:04:9b:53:bc:a5:81:e9:b2:c2:90:
                    bc:cf:b3:27:5a:3e:aa:7c:79:c9:4e:80:2a:cc:0c:
                    10:78:02:3c:13:3a:c1:56:ec:44:6f:78:4c:74:9e:
                    90:c9:12:50:36:ee:b8:e5:88:65:6e:f4:31:94:c9:
                    fe:d1:48:8f:78:50:3d:9e:17:a7:1c:63:5d:fb:7a:
                    33:e4:b9:8c:31:e9:62:6b:18:45:1e:6e:44:a6:b8:
                    4e:11:2d:68:6e:cc:7e:17:fa:5f:e1:d5:67:6a:fc:
                    be:54:55:ea:ab:72:b8:0b:97:fe:41:cb:1b:93:67:
                    8d:f3:5f:fc:f4:02:6f:2d:f8:a8:96:8a:8f:98:49:
                    a8:eb:f3:12:32:4f:ef:07:0b:02:22:b0:f3:28:65:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:98:A5:13:07:B9:42:E8:6B:5B:A9:52:52:5F:02:CF:5C:20:4B:BB
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a343030303a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c7:bb:05:9c:56:d1:ee:d1:17:c7:1f:e2:11:2c:30:b0:b7:05:
         89:ee:9f:0a:c5:fc:a4:72:58:03:ab:47:e0:81:ae:c1:3e:41:
         18:38:0e:7a:cd:d6:a8:0e:a2:f7:1d:1b:ab:7e:39:46:f5:52:
         0e:8c:7a:b0:5a:37:e2:21:1a:d5:68:70:ee:64:b0:fe:1f:46:
         b6:99:11:7e:34:b5:f3:68:ae:38:2f:02:57:27:51:0d:58:4a:
         fc:b8:b5:2d:e4:1e:7f:ba:ec:96:10:1c:75:ad:9f:b2:d0:21:
         bb:a1:df:94:43:6a:7f:5a:5f:2a:dd:15:b8:ae:b1:f9:0d:1c:
         92:98:af:d3:5b:12:58:dc:5b:a3:96:52:4a:24:6c:57:c3:01:
         77:9d:73:8c:f9:05:be:7c:36:49:94:68:8b:1a:eb:69:21:0e:
         e2:f4:0d:17:0b:cc:ff:55:c8:80:f0:34:32:70:99:d4:df:c2:
         a2:00:52:99:aa:41:8f:c9:51:c2:5b:12:41:43:c0:d0:83:85:
         2e:bd:a9:39:fa:eb:ca:95:6b:55:97:ba:94:79:84:a3:b3:71:
         5c:be:93:ca:de:4d:49:28:51:6d:a1:d4:58:28:00:f0:ca:0c:
         28:35:99:68:93:22:67:a1:df:6c:00:e8:2f:53:19:93:7c:7f:
         67:67:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org