Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33322d3332203d3e203532353237.roa
File:                     323830343a6465633a3a2f33322d3332203d3e203532353237.roa (raw, json)
Hash identifier:          iB6CX/dEC8bzqq7rkhNBg3SeDAhBtPNfwBjuWDLUkQc=
Subject key identifier:   41:9D:F7:CC:67:AD:39:1C:72:97:4F:FA:A2:94:32:3B:E5:60:A0:0F
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       41B94DE2685668AF08B7AFB2F362201BAB9B40B4
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33322d3332203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 19:18:06 +0000
ROA not before:           Tue 23 Apr 2024 19:13:06 +0000
ROA not after:            Tue 22 Apr 2025 19:18:06 +0000
asID:                     52527
IP address blocks:        2804:dec::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b9:4d:e2:68:56:68:af:08:b7:af:b2:f3:62:20:1b:ab:9b:40:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 19:13:06 2024 GMT
            Not After : Apr 22 19:18:06 2025 GMT
        Subject: CN=419DF7CC67AD391C72974FFAA294323BE560A00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:60:8f:d8:3c:a8:11:93:14:22:7a:40:65:
                    c9:cf:ee:8a:72:fa:75:e7:43:1b:41:e8:d2:e0:6a:
                    f0:27:84:84:29:27:10:54:8f:8b:c3:86:5b:27:8a:
                    94:50:dd:46:d0:c4:c4:b8:39:0d:58:3b:94:79:b8:
                    b4:19:15:e3:7d:85:59:a1:3b:c2:6d:8e:f4:1b:41:
                    f9:dc:47:38:c0:24:8c:ff:86:f2:55:de:11:52:20:
                    c0:bd:dd:68:0e:a9:4f:26:db:e3:8f:b7:50:c2:2b:
                    52:8c:96:33:45:74:db:33:ee:35:58:ab:1e:23:8f:
                    0a:e3:26:30:c3:a5:dc:a7:46:2b:1f:cc:f8:40:c9:
                    77:40:c5:8e:23:83:2b:a5:7c:f6:84:64:bb:c6:9b:
                    fb:6f:84:92:51:8c:2c:16:57:7a:87:bc:8f:14:df:
                    1d:04:03:71:be:f0:8f:22:e7:68:e7:27:af:9e:a5:
                    cd:82:98:5a:29:5e:54:e0:68:b2:62:17:03:64:90:
                    82:28:e1:b8:dd:02:08:8b:fe:ce:be:1a:77:5a:41:
                    e0:10:68:08:0f:fc:e5:20:89:b2:81:fb:bd:2e:04:
                    35:54:f0:94:fe:3a:64:7f:1d:b6:2d:a9:f4:64:51:
                    be:9f:56:8e:7c:ec:b2:fc:ff:c1:0a:6c:38:23:a9:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9D:F7:CC:67:AD:39:1C:72:97:4F:FA:A2:94:32:3B:E5:60:A0:0F
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33322d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:18:13:25:30:c9:66:13:84:08:66:3d:60:03:dc:03:3b:f1:
         b3:45:71:6a:4c:88:1d:b0:83:39:fe:71:73:87:f6:d4:fb:2d:
         a4:18:67:64:89:18:54:72:55:e7:b3:75:a4:e6:85:01:9e:d4:
         38:4a:d8:f6:d9:05:c8:6d:0b:75:c3:0d:7a:b1:09:2f:60:0c:
         4c:9a:d4:4f:da:8a:9b:5e:37:45:21:52:70:1d:b1:19:6b:4f:
         88:eb:5e:17:fc:cf:f3:37:11:61:c7:a4:29:40:63:6d:9a:af:
         98:51:b5:e4:98:64:2d:12:a5:a3:2d:fb:bb:d0:d3:de:ed:3f:
         7b:64:43:cd:99:f4:c0:b0:74:f7:d7:83:74:61:fb:8b:32:fc:
         2c:36:4b:99:a1:76:a1:ba:86:c1:40:33:1a:20:85:51:f7:1e:
         d7:be:99:88:b8:55:33:fa:9a:49:6a:67:57:c6:45:00:d8:27:
         94:8a:a8:e7:24:21:cb:b0:49:a9:5b:56:5b:5b:c7:55:5f:6c:
         5a:ec:dd:55:32:b8:59:5c:ea:65:c5:f9:3b:e8:79:fb:f3:98:
         d8:38:a0:aa:37:0c:c0:33:e1:0e:15:fb:8f:44:95:37:8d:16:
         86:9d:ac:c2:51:75:9b:a3:e3:89:2f:93:76:2d:bf:bf:99:98:
         7e:89:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org