Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3530303a3a2f34302d3430203d3e203532353237.roa
File:                     323830343a6465633a3530303a3a2f34302d3430203d3e203532353237.roa (raw, json)
Hash identifier:          wCwtJgrOKKLnLxvcFQ++/9Z/j2jtkQUIHvORtAKaIPE=
Subject key identifier:   5A:5C:41:3D:A0:4B:3C:64:5F:B5:85:3D:A1:BD:37:00:14:F9:A4:0A
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       724FEA6C8E34A7329CB0EA48F3A6BF5FA39B5EB3
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3530303a3a2f34302d3430203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:29 +0000
ROA not before:           Tue 23 Apr 2024 13:49:29 +0000
ROA not after:            Tue 22 Apr 2025 13:54:29 +0000
asID:                     52527
IP address blocks:        2804:dec:500::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4f:ea:6c:8e:34:a7:32:9c:b0:ea:48:f3:a6:bf:5f:a3:9b:5e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:29 2024 GMT
            Not After : Apr 22 13:54:29 2025 GMT
        Subject: CN=5A5C413DA04B3C645FB5853DA1BD370014F9A40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:45:75:33:80:0f:f2:98:dd:46:53:71:dd:
                    1f:99:b5:1f:28:3d:b4:be:73:9a:a3:61:ae:f1:f5:
                    fb:36:f3:b2:4f:71:5e:69:09:41:d5:b0:12:4e:34:
                    93:c7:a9:89:08:6a:6d:fc:88:bc:66:1a:09:fe:3b:
                    fa:7c:d0:2c:db:cb:d4:1e:06:11:68:2d:f6:b1:20:
                    6e:2e:cf:18:94:dd:36:c1:3d:5e:d2:b9:44:7a:e5:
                    d3:a8:6e:9f:5c:3c:b7:96:d5:7f:5d:d6:83:90:96:
                    29:f7:7e:03:9e:45:4a:4c:83:ab:90:1c:99:12:26:
                    0f:57:54:53:0d:82:dc:3d:f9:36:cf:57:18:c0:a3:
                    6b:e9:2d:f6:c3:af:89:67:09:f2:16:83:df:13:62:
                    e4:b4:ac:d6:f9:3a:c6:8d:45:f5:34:b2:d8:17:cb:
                    73:67:84:0d:e8:68:76:58:d6:3a:28:c3:65:17:42:
                    c5:69:6a:d4:d1:49:20:c4:5d:2c:cd:ca:d2:64:f3:
                    61:eb:5a:40:85:e5:52:4f:59:c0:31:8c:a5:dd:82:
                    17:c9:cb:07:fa:c8:bf:65:e0:9a:3b:7b:80:6d:c8:
                    e5:17:78:fd:6e:93:67:15:1e:8e:c1:b8:7e:f9:cc:
                    5e:a2:66:43:0c:17:60:ac:76:37:9f:23:64:12:ac:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:41:3D:A0:4B:3C:64:5F:B5:85:3D:A1:BD:37:00:14:F9:A4:0A
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3530303a3a2f34302d3430203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:d5:eb:ee:24:eb:21:eb:1a:73:eb:17:1c:59:62:ba:94:
         07:d0:1c:e1:5b:6d:21:4f:0a:df:29:c6:e0:77:01:c0:39:24:
         ab:72:c9:c4:a2:49:5b:21:bc:c4:15:d9:54:fa:d6:dd:2f:7d:
         4d:e3:6e:72:34:e7:da:ef:b7:0b:32:15:0b:24:fe:90:b2:45:
         15:07:d4:0b:0e:30:d0:ab:4f:51:67:fd:2b:b8:a1:7d:b3:bd:
         4e:9d:e9:0e:b8:96:8b:b3:2b:5e:41:67:6e:d4:82:5a:0d:c5:
         f7:20:85:14:50:f4:21:51:45:c6:19:fb:b2:29:e5:56:4a:cf:
         cd:89:63:19:d1:e0:97:8b:90:8b:f1:9d:c3:f5:41:be:a5:9f:
         95:03:73:b5:f7:b3:75:74:0d:a9:dd:5e:4e:3d:0c:67:78:1f:
         0f:0f:2b:7b:8d:91:06:5d:39:e1:97:07:9e:b8:20:c6:f6:62:
         28:37:0c:f5:a9:90:28:e5:4d:ab:d7:a4:2b:10:b7:6b:8d:9e:
         27:ee:b6:15:97:7d:7e:53:ae:34:0e:c3:8b:29:0a:66:b9:e3:
         1a:0c:cc:e2:ab:59:34:42:22:75:ef:a0:57:89:2f:e4:25:43:
         3d:d3:b1:8d:6f:b9:21:d7:3b:15:d2:cc:fc:6c:7f:b7:c6:fd:
         fc:7b:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org