Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a383030303a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          XHg33W3auCK/4ssHIzdHsBvQWQsOFBYKIWWpM/Vg4H8=
Subject key identifier:   E5:F0:90:6D:A1:14:6A:4A:19:27:8E:12:D7:D0:42:CD:0C:C6:48:EB
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       30670AE4738BF4802B8647561CCDCBA54AB2C811
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:53 +0000
ROA not before:           Tue 23 Apr 2024 13:49:53 +0000
ROA not after:            Tue 22 Apr 2025 13:54:53 +0000
asID:                     52527
IP address blocks:        2804:dec:8000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:67:0a:e4:73:8b:f4:80:2b:86:47:56:1c:cd:cb:a5:4a:b2:c8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:53 2024 GMT
            Not After : Apr 22 13:54:53 2025 GMT
        Subject: CN=E5F0906DA1146A4A19278E12D7D042CD0CC648EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:42:08:77:d4:59:5e:1b:72:89:73:3c:52:
                    64:00:de:a2:9f:8e:b8:fb:fc:32:55:ff:3e:e2:0f:
                    71:f2:e4:c8:3d:58:c0:8a:ce:c3:d3:3c:68:f3:a5:
                    88:1b:7b:b9:d2:6d:3f:9d:62:bb:d7:d3:e5:76:aa:
                    a1:a9:20:40:98:30:dc:55:71:f7:4e:4a:95:c2:bf:
                    5e:cf:58:94:5c:44:68:67:ce:5b:4e:32:4b:ea:99:
                    a9:59:17:59:ee:f0:f9:a8:81:c1:19:b6:88:bc:6e:
                    60:76:32:4f:91:49:90:92:db:5c:a9:d4:cb:1d:2a:
                    90:78:d0:4b:56:9b:6d:73:d2:0e:5b:52:83:96:49:
                    4b:74:a8:61:5f:52:d1:a3:03:27:ad:ce:be:70:1b:
                    43:85:33:58:cc:2a:20:84:26:a4:ee:95:e9:13:3d:
                    70:f0:2f:39:25:c1:ff:ff:3a:1c:5b:78:f9:2a:a1:
                    de:fe:c6:82:46:d3:c4:b8:ae:bc:d8:68:e9:3b:32:
                    95:3e:85:64:01:b2:aa:34:d4:bd:20:d2:3c:6b:35:
                    3f:71:0a:67:f4:4f:86:73:08:cd:a7:79:ec:ae:59:
                    24:20:dd:01:05:36:e6:8f:49:95:11:df:dd:c3:ae:
                    29:93:ff:14:ab:59:ff:0d:0b:c3:88:87:87:d6:b9:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F0:90:6D:A1:14:6A:4A:19:27:8E:12:D7:D0:42:CD:0C:C6:48:EB
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:1b:5a:c7:bf:67:f6:31:fc:91:90:f1:72:27:69:56:c9:
         40:67:31:0d:a9:ab:06:4e:af:8d:47:5c:38:bb:4f:5f:b6:07:
         70:27:75:1f:82:c7:b4:b2:89:15:a0:19:23:be:a6:f0:1e:79:
         28:51:e3:9f:23:13:9b:05:9d:08:01:ce:54:fb:55:ed:33:55:
         b4:a1:ee:85:af:ff:e0:06:42:a6:b1:7b:5e:69:5c:d5:2a:3e:
         f9:9e:e8:91:00:34:96:64:22:a6:e9:d2:b1:95:c0:2f:e5:6f:
         68:ca:f8:69:b6:e2:bf:12:d4:07:cf:0f:dc:e5:66:aa:98:46:
         57:09:2a:ee:a1:6a:1b:c7:4c:f3:90:ca:b0:af:e3:ae:0c:28:
         0d:a8:8b:9e:55:7d:f6:c7:ff:73:1e:a1:e0:d7:61:d5:0c:b7:
         02:37:96:61:b4:e6:60:fe:2f:0c:f0:53:32:f9:d8:b6:65:65:
         91:bc:43:f7:f7:39:14:b3:d0:c1:b1:e5:fa:22:3a:ae:73:c1:
         b9:48:20:65:10:fb:c4:f8:b2:2e:83:b2:de:4e:e7:3f:e7:97:
         74:86:22:74:8c:ff:b7:78:75:0f:77:63:96:10:5e:5a:46:cd:
         6d:78:48:86:12:93:21:7d:96:2c:6f:38:84:a7:c7:91:38:db:
         98:f7:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org