Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33342d3334203d3e203532353237.roa
File:                     323830343a6465633a383030303a3a2f33342d3334203d3e203532353237.roa (raw, json)
Hash identifier:          TyqxTQp8PiUa2wWx95b61pjl1d+fKo2nwp5FPiSA5rM=
Subject key identifier:   8C:2C:CB:23:F5:56:EC:E5:86:9E:B4:80:2C:A6:0F:6C:AC:C0:FE:34
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       4950552C594DDE04DC49AB3B7779AD9F474E95C7
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33342d3334203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:50 +0000
ROA not before:           Tue 23 Apr 2024 13:49:50 +0000
ROA not after:            Tue 22 Apr 2025 13:54:50 +0000
asID:                     52527
IP address blocks:        2804:dec:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:50:55:2c:59:4d:de:04:dc:49:ab:3b:77:79:ad:9f:47:4e:95:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:50 2024 GMT
            Not After : Apr 22 13:54:50 2025 GMT
        Subject: CN=8C2CCB23F556ECE5869EB4802CA60F6CACC0FE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:e9:d3:85:77:76:28:2a:6d:91:0d:28:df:
                    cf:47:e5:cf:1d:69:b7:81:8e:a2:61:de:c6:b6:40:
                    cc:2f:77:7e:d1:84:f7:0d:1f:41:f3:f4:00:c2:dd:
                    43:1c:d7:c8:36:61:f0:dc:39:26:df:ed:8c:ea:d0:
                    64:15:51:07:2a:e3:bc:a9:64:36:7f:4b:05:9b:c1:
                    94:7d:c8:6a:3c:ca:f3:11:ac:45:3b:3e:e2:80:5c:
                    f1:f2:38:45:0e:d8:ee:9e:7a:ce:b3:41:16:c1:2d:
                    70:ff:8b:f1:f0:df:7f:5a:d9:29:45:f7:25:cb:5f:
                    b0:50:6c:97:2c:2b:a4:14:25:1c:b0:57:4c:01:a3:
                    6c:8f:dc:8e:6b:4f:53:9e:fb:9b:2f:a2:01:a1:d5:
                    d4:0a:14:db:f6:f2:57:9c:ba:01:8c:74:d1:37:6b:
                    79:dc:4c:ca:4e:d7:8d:e8:be:ab:7c:5d:b3:15:99:
                    be:2b:0a:21:d3:cf:bb:bc:56:1a:4a:aa:bc:d4:ce:
                    83:19:6c:ae:48:e8:fc:66:6c:b1:13:ac:41:9d:17:
                    f6:8f:9a:ae:9d:87:da:11:06:13:1d:2e:c3:c8:4c:
                    0e:17:1c:f8:d0:58:b6:30:0c:1e:bd:31:e4:8f:af:
                    79:0c:fb:f6:a5:ed:fc:fd:62:01:10:35:e1:a9:46:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2C:CB:23:F5:56:EC:E5:86:9E:B4:80:2C:A6:0F:6C:AC:C0:FE:34
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33342d3334203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:56:d6:f1:78:fc:f9:58:42:db:67:4e:b1:44:0b:57:4b:39:
         20:a5:ee:22:59:eb:10:89:4f:44:e2:4a:04:78:17:d5:ee:1c:
         82:a2:08:d6:b5:47:a7:be:45:ac:32:06:a6:ab:2e:85:e7:4a:
         ca:3d:6c:63:d9:c0:93:b4:dd:28:d6:37:ab:ef:54:74:66:9b:
         a8:b6:42:a9:4c:34:78:ec:96:66:e1:4c:f0:e8:0e:14:38:1d:
         89:0b:70:d2:74:7e:a1:79:71:01:5a:ab:c4:f9:d8:5a:d0:61:
         99:6f:04:c4:32:4b:a1:2c:ed:1a:01:31:f0:31:8b:89:9f:2a:
         b5:df:66:25:0d:e6:f5:d8:57:67:cd:e6:a6:bf:0f:80:4d:d4:
         f0:7d:13:b1:17:2c:58:b1:70:c0:b2:69:31:9e:63:19:c5:53:
         14:b7:f2:59:96:0d:a5:48:4a:5e:db:ea:05:bf:4d:98:b5:3e:
         07:cd:74:2b:0c:56:6b:f2:67:a7:d7:0c:ab:66:7f:fe:f0:ee:
         be:dc:48:3f:25:4a:f2:36:c0:54:a3:40:ee:24:90:cb:57:95:
         e9:00:2d:0b:92:a7:73:ba:3e:94:bb:cb:1b:63:ad:9e:9f:25:
         ca:08:1b:68:75:62:0b:62:82:4c:e0:17:69:1d:13:09:b2:7f:
         d1:77:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org