Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383130303a3a2f34302d3430203d3e203532353237.roa
File:                     323830343a6465633a383130303a3a2f34302d3430203d3e203532353237.roa (raw, json)
Hash identifier:          q4G+F1zA3+7m757Y/fy8nGclAJux67ZubzdJLcOZAA0=
Subject key identifier:   2D:6A:C7:CB:CA:3D:FE:97:19:2B:35:87:93:37:64:34:81:C6:32:1D
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       070AEE331F8D31BD9043507E48BD000B3C174260
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383130303a3a2f34302d3430203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:56 +0000
ROA not before:           Tue 23 Apr 2024 13:49:56 +0000
ROA not after:            Tue 22 Apr 2025 13:54:56 +0000
asID:                     52527
IP address blocks:        2804:dec:8100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0a:ee:33:1f:8d:31:bd:90:43:50:7e:48:bd:00:0b:3c:17:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:56 2024 GMT
            Not After : Apr 22 13:54:56 2025 GMT
        Subject: CN=2D6AC7CBCA3DFE97192B35879337643481C6321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:21:fe:76:9a:ef:38:84:a4:29:d1:6b:a4:
                    23:4c:82:d6:9c:6a:e1:89:08:07:2e:61:c5:86:88:
                    a0:dd:32:9e:51:17:32:58:3e:8c:50:e4:d1:67:cc:
                    1e:d6:f2:5a:6e:ca:88:ec:b9:1f:d1:5c:d9:8d:33:
                    84:0e:16:8e:ba:1b:c1:4d:37:e2:ca:fa:15:7b:3b:
                    39:b6:65:92:42:aa:c6:14:dd:00:02:dd:cb:70:1b:
                    c5:1f:2a:e7:1c:fe:b4:cd:ac:83:91:bc:c2:88:33:
                    bc:2e:ae:cc:c0:32:fc:ba:1e:f8:13:17:54:9c:87:
                    de:17:c6:e8:97:e3:35:63:96:61:23:b4:4a:ab:d7:
                    d3:42:00:58:81:6e:2d:8e:d3:0c:3b:5d:79:8d:96:
                    3f:db:39:60:67:6a:b8:6d:6e:ba:0a:be:77:d4:52:
                    58:27:a3:1e:38:d2:6b:70:47:35:77:1e:25:55:d1:
                    21:02:8c:28:4f:a1:bc:9d:b7:c9:02:8b:8b:46:e5:
                    88:a1:87:b7:12:06:ee:e2:c5:11:f9:78:50:aa:df:
                    35:b4:48:65:cb:9a:28:2d:26:9f:55:36:72:78:ce:
                    b4:12:05:0e:4d:82:9a:08:4f:b0:f4:90:6c:0f:a9:
                    9d:67:bc:54:cd:67:3f:48:f8:f7:e4:08:b0:3a:1f:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:C7:CB:CA:3D:FE:97:19:2B:35:87:93:37:64:34:81:C6:32:1D
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383130303a3a2f34302d3430203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:dc:6b:5c:4d:cf:b0:35:db:00:65:ec:0e:ad:f7:61:57:81:
         6a:41:72:52:75:16:ae:8e:97:66:40:e4:d1:4a:1e:e8:a7:16:
         e2:15:56:c6:2c:8b:f7:bd:69:49:82:4f:e8:1d:4a:07:a2:4d:
         c8:42:46:4b:0a:9a:ab:c7:c1:b1:9e:f1:42:65:5a:a6:06:19:
         77:0c:f9:1f:3c:6a:aa:c3:da:27:7d:00:25:32:be:33:cd:38:
         ea:d3:26:f0:58:17:25:83:d5:62:61:9a:24:f9:9f:17:cf:d2:
         89:ac:78:be:dd:86:85:dc:fe:ef:d6:7d:17:80:21:e0:29:03:
         8d:44:fa:b4:0d:0d:7c:f4:08:2d:e9:7d:c1:da:00:c6:c1:40:
         af:03:e4:50:3f:fe:e2:55:2f:5e:3a:25:4f:a4:62:34:14:39:
         14:30:f2:5b:56:e7:8a:e2:81:da:99:a6:a1:47:4c:bc:dc:c0:
         c7:3a:bf:6b:a0:e4:26:70:f2:bf:ae:4f:ca:90:71:4b:d1:f8:
         f7:8b:a9:e6:a1:f6:53:5c:4f:92:8a:0a:e6:31:7c:8a:cb:3d:
         ed:a7:60:82:70:1c:f2:ff:17:98:3d:2a:1e:e0:6e:57:85:1c:
         b8:f3:24:95:85:ba:56:96:9a:fc:0a:3b:69:f9:fe:15:81:49:
         74:e3:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org