Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a363030303a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a363030303a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          fWQNa7KN1Y5bP73UyJW1FCie6ek/lL7e3cOVGL7Jbp0=
Subject key identifier:   0F:79:4B:8A:31:18:15:4B:A9:E7:D8:11:86:57:24:7C:FD:6E:47:8A
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       3406A7E05A49D941CD589B40B1A0CBF9C8D60F7A
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a363030303a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:42 +0000
ROA not before:           Tue 23 Apr 2024 13:49:42 +0000
ROA not after:            Tue 22 Apr 2025 13:54:42 +0000
asID:                     52527
IP address blocks:        2804:dec:6000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:06:a7:e0:5a:49:d9:41:cd:58:9b:40:b1:a0:cb:f9:c8:d6:0f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:42 2024 GMT
            Not After : Apr 22 13:54:42 2025 GMT
        Subject: CN=0F794B8A3118154BA9E7D8118657247CFD6E478A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:67:48:97:4a:1b:37:06:4b:8b:7e:75:d2:
                    86:25:1b:bd:94:c5:91:8d:2e:5b:98:91:20:cf:7f:
                    7f:c7:3a:50:b0:a8:d6:e3:f2:6c:44:a6:31:41:39:
                    4d:4d:80:27:e2:bc:c1:54:50:98:f7:fc:8d:4b:bf:
                    07:39:b3:ee:7a:75:bf:a1:56:77:b3:d9:47:54:0e:
                    b2:b3:90:eb:65:34:47:07:7f:e9:f8:6e:0f:03:a1:
                    90:c0:32:36:2c:18:af:ff:13:14:cd:89:52:00:97:
                    3c:fc:fa:4a:f3:f1:16:ec:35:d6:c3:5c:cf:12:55:
                    b3:44:af:aa:e9:99:0a:aa:7c:d7:4b:e9:d1:60:47:
                    4c:27:f0:86:49:f6:b1:cb:0c:a4:38:66:7d:25:11:
                    a8:54:af:47:45:89:c5:55:c8:1d:85:b4:13:3d:65:
                    48:bd:53:b9:8d:53:de:5d:7a:03:65:4e:f7:ed:ea:
                    b4:a7:1e:a6:6d:2a:64:b3:79:8f:e0:71:be:8a:d5:
                    33:df:aa:48:33:2c:05:23:01:31:94:24:34:e0:3c:
                    f7:81:87:80:a7:48:ee:fd:31:13:db:43:8d:f9:4d:
                    45:0b:8d:15:7e:f1:31:ca:a2:59:63:61:69:20:d9:
                    9c:82:92:fc:42:8e:20:4f:0f:6b:9f:35:70:e0:03:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:4B:8A:31:18:15:4B:A9:E7:D8:11:86:57:24:7C:FD:6E:47:8A
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a363030303a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:a1:40:55:83:50:12:ca:8e:9b:ed:c9:9b:34:e5:35:f9:
         c8:ca:d6:7d:23:18:1d:5b:f4:f8:91:7d:70:87:88:9a:ab:3f:
         ea:30:26:21:10:c1:6b:b6:26:cb:99:d8:cc:48:81:50:3e:59:
         a5:76:05:6a:b4:dc:2d:e0:69:76:c6:3d:40:0b:a6:a4:14:64:
         9a:e4:4f:2a:4d:a7:69:dc:b8:a0:87:3d:e4:07:96:07:dd:ae:
         09:d1:7c:b1:21:30:22:81:ad:09:c8:59:c7:03:90:26:ca:c4:
         b1:d1:54:06:1d:66:64:2d:a3:8e:92:59:1b:54:e5:1b:a2:ac:
         2a:02:a1:97:3b:2b:4b:a8:8e:45:02:60:6d:c3:00:15:9d:80:
         7f:e7:1f:ff:b7:54:42:4d:bc:aa:19:85:8b:cc:76:21:e8:82:
         fb:b3:16:49:e9:b2:35:b3:b0:f4:23:af:f2:7d:b5:2d:e2:92:
         74:26:1d:db:64:c0:63:77:2d:a8:7d:04:57:44:6a:df:8c:48:
         45:7c:2c:84:a3:27:af:a5:d0:92:51:de:73:42:8b:6c:29:6c:
         c3:6f:06:1f:7a:c9:66:ea:09:fd:92:f5:17:43:c1:2f:ea:68:
         06:3d:b5:d6:21:57:2e:03:7c:eb:c9:14:ce:22:eb:16:1a:a1:
         de:d7:07:f3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUNAan4FpJ2UHNWJtAsaDL+cjWD3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FFQjk1OTE1MDQ1NkVDMTY3NEU5MUUwODRGMkM0RUY1
QjFBN0VCNDAeFw0yNDA0MjMxMzQ5NDJaFw0yNTA0MjIxMzU0NDJaMDMxMTAvBgNV
BAMTKDBGNzk0QjhBMzExODE1NEJBOUU3RDgxMTg2NTcyNDdDRkQ2RTQ3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGx2dIl0obNwZLi3510oYlG72U
xZGNLluYkSDPf3/HOlCwqNbj8mxEpjFBOU1NgCfivMFUUJj3/I1Lvwc5s+56db+h
Vnez2UdUDrKzkOtlNEcHf+n4bg8DoZDAMjYsGK//ExTNiVIAlzz8+krz8RbsNdbD
XM8SVbNEr6rpmQqqfNdL6dFgR0wn8IZJ9rHLDKQ4Zn0lEahUr0dFicVVyB2FtBM9
ZUi9U7mNU95degNlTvft6rSnHqZtKmSzeY/gcb6K1TPfqkgzLAUjATGUJDTgPPeB
h4CnSO79MRPbQ435TUULjRV+8THKolljYWkg2ZyCkvxCjiBPD2ufNXDgA1VVAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUD3lLijEYFUup59gRhlckfP1uR4owHwYDVR0j
BBgwFoAUeuuVkVBFbsFnTpHghPLE71safrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da
SkovMC83QUVCOTU5MTUwNDU2RUMxNjc0RTkxRTA4NEYyQzRFRjVCMUE3RUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBRUI5NTkxNTA0NTZFQzE2
NzRFOTFFMDg0RjJDNEVGNUIxQTdFQjQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAv
MzIzODMwMzQzYTY0NjU2MzNhMzYzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzNTMyMzUzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKAQN7GAwDQYJKoZIhvcNAQELBQADggEB
AEmOoUBVg1ASyo6b7cmbNOU1+cjK1n0jGB1b9PiRfXCHiJqrP+owJiEQwWu2JsuZ
2MxIgVA+WaV2BWq03C3gaXbGPUALpqQUZJrkTypNp2ncuKCHPeQHlgfdrgnRfLEh
MCKBrQnIWccDkCbKxLHRVAYdZmQto46SWRtU5RuirCoCoZc7K0uojkUCYG3DABWd
gH/nH/+3VEJNvKoZhYvMdiHogvuzFknpsjWzsPQjr/J9tS3iknQmHdtkwGN3Lah9
BFdEat+MSEV8LISjJ6+l0JJR3nNCi2wpbMNvBh96yWbqCf2S9RdDwS/qaAY9tdYh
Vy4DfOvJFM4i6xYaod7XB/M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org