Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33332d3333203d3e203532353237.roa
File:                     323830343a6465633a383030303a3a2f33332d3333203d3e203532353237.roa (raw, json)
Hash identifier:          6pp14pi5AXksS3BMc7grtNulB2HchoAaOhSYj+fJwek=
Subject key identifier:   41:A6:AA:02:7D:F3:24:2D:73:F2:75:5A:ED:FE:B1:51:56:0F:67:B4
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       25D9E7F39D66954EA5B5DEF77E0578B396A2A071
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33332d3333203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:46 +0000
ROA not before:           Tue 23 Apr 2024 13:49:46 +0000
ROA not after:            Tue 22 Apr 2025 13:54:46 +0000
asID:                     52527
IP address blocks:        2804:dec:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d9:e7:f3:9d:66:95:4e:a5:b5:de:f7:7e:05:78:b3:96:a2:a0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:46 2024 GMT
            Not After : Apr 22 13:54:46 2025 GMT
        Subject: CN=41A6AA027DF3242D73F2755AEDFEB151560F67B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:60:38:a8:4e:93:d5:34:0f:c8:0f:f0:09:
                    da:82:dc:bd:66:67:66:c9:52:8d:11:4e:3a:04:ec:
                    da:21:d9:93:00:f5:e0:cb:d2:20:1f:2a:39:06:bd:
                    96:64:63:66:fe:35:21:a7:1f:29:eb:9c:e4:8e:90:
                    17:f9:47:c1:74:73:50:73:3a:74:24:18:dc:e4:42:
                    cc:eb:9a:87:fd:38:be:d5:11:4e:5c:1e:ca:43:d8:
                    55:ea:3f:97:52:15:0f:b3:e4:84:9a:03:1f:7c:23:
                    e4:2e:a8:80:4e:11:c9:e9:f8:de:6d:85:23:27:28:
                    f1:bc:e2:73:d9:7f:f5:84:00:52:65:15:31:c2:cb:
                    d8:d0:f1:d3:6a:09:d3:c5:31:f4:76:fd:5e:21:dc:
                    ef:3b:d8:29:0c:b4:df:ca:f3:a3:40:b3:c2:4f:8c:
                    8a:ad:85:30:9d:91:a3:48:b3:3d:ba:11:24:0d:22:
                    f2:fd:7b:9c:98:6d:c0:30:1b:6d:ea:3d:a6:07:86:
                    0a:8e:0b:39:bd:31:dc:04:88:7b:e7:08:f2:4b:e8:
                    1a:e1:3d:d9:40:6f:97:65:83:cc:88:78:2d:1e:ff:
                    24:82:44:5a:f9:52:df:2b:e2:5a:ea:8a:96:11:88:
                    8c:d6:54:b3:e4:2c:e0:94:59:72:35:d7:b1:55:f1:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:AA:02:7D:F3:24:2D:73:F2:75:5A:ED:FE:B1:51:56:0F:67:B4
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33332d3333203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:f3:9c:c8:36:d9:bd:4c:41:5e:81:1c:c0:33:75:8e:16:
         72:cc:23:ba:d9:86:5f:24:44:3d:c6:ed:7a:60:fd:a1:ad:20:
         91:0a:11:b9:36:ae:28:7e:b9:36:ff:a3:f6:0e:5e:40:92:f2:
         a4:02:76:e4:39:37:9c:01:56:6d:71:56:ad:1c:d3:cf:29:ea:
         71:1c:fa:db:c8:c4:d5:8b:36:e9:99:93:34:2c:a2:71:94:4d:
         2d:ab:61:00:8c:7f:74:a6:a9:06:cf:5b:05:02:62:3f:f8:6a:
         1d:c4:42:fe:cb:58:32:06:b2:fd:33:e1:75:7f:88:fe:0a:93:
         7f:f0:93:5e:cd:d5:80:78:9d:cf:dd:d1:0d:e7:33:b5:94:d9:
         7a:86:1d:05:76:02:7f:59:67:49:e9:68:36:63:1e:88:ca:99:
         fc:bd:d5:bb:c1:69:0f:5f:ef:d4:65:12:8b:da:b3:76:72:9a:
         a8:e2:05:7e:97:92:9e:7f:c6:ac:23:f9:a9:4e:13:09:c4:ce:
         44:f5:60:fd:09:07:e8:11:c9:38:44:df:dd:3a:9f:17:f0:66:
         b4:52:74:fe:0a:a0:2e:1a:b6:0f:59:92:51:20:9c:97:ff:9e:
         5e:6e:09:07:46:56:ae:41:76:f8:37:af:09:38:cd:43:67:fa:
         14:ee:64:d9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUJdnn851mlU6ltd73fgV4s5aioHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FFQjk1OTE1MDQ1NkVDMTY3NEU5MUUwODRGMkM0RUY1
QjFBN0VCNDAeFw0yNDA0MjMxMzQ5NDZaFw0yNTA0MjIxMzU0NDZaMDMxMTAvBgNV
BAMTKDQxQTZBQTAyN0RGMzI0MkQ3M0YyNzU1QUVERkVCMTUxNTYwRjY3QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrWA4qE6T1TQPyA/wCdqC3L1m
Z2bJUo0RTjoE7Noh2ZMA9eDL0iAfKjkGvZZkY2b+NSGnHynrnOSOkBf5R8F0c1Bz
OnQkGNzkQszrmof9OL7VEU5cHspD2FXqP5dSFQ+z5ISaAx98I+QuqIBOEcnp+N5t
hSMnKPG84nPZf/WEAFJlFTHCy9jQ8dNqCdPFMfR2/V4h3O872CkMtN/K86NAs8JP
jIqthTCdkaNIsz26ESQNIvL9e5yYbcAwG23qPaYHhgqOCzm9MdwEiHvnCPJL6Brh
PdlAb5dlg8yIeC0e/ySCRFr5Ut8r4lrqipYRiIzWVLPkLOCUWXI117FV8R+HAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUQaaqAn3zJC1z8nVa7f6xUVYPZ7QwHwYDVR0j
BBgwFoAUeuuVkVBFbsFnTpHghPLE71safrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da
SkovMC83QUVCOTU5MTUwNDU2RUMxNjc0RTkxRTA4NEYyQzRFRjVCMUE3RUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBRUI5NTkxNTA0NTZFQzE2
NzRFOTFFMDg0RjJDNEVGNUIxQTdFQjQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAv
MzIzODMwMzQzYTY0NjU2MzNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzNTMyMzUzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQN7IAwDQYJKoZIhvcNAQELBQADggEB
ACQd85zINtm9TEFegRzAM3WOFnLMI7rZhl8kRD3G7Xpg/aGtIJEKEbk2rih+uTb/
o/YOXkCS8qQCduQ5N5wBVm1xVq0c088p6nEc+tvIxNWLNumZkzQsonGUTS2rYQCM
f3SmqQbPWwUCYj/4ah3EQv7LWDIGsv0z4XV/iP4Kk3/wk17N1YB4nc/d0Q3nM7WU
2XqGHQV2An9ZZ0npaDZjHojKmfy91bvBaQ9f79RlEovas3ZymqjiBX6Xkp5/xqwj
+alOEwnEzkT1YP0JB+gRyThE3906nxfwZrRSdP4KoC4atg9ZklEgnJf/nl5uCQdG
Vq5Bdvg3rwk4zUNn+hTuZNk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org