Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          q4IfvNOiiZApy4CMJTXMDDqxPbqsuu8D0TQRdPaMRc4=
Subject key identifier:   55:8A:99:50:86:34:10:4E:A6:84:71:48:7B:45:C8:54:6D:00:E2:E1
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       4DCCADFB46BC6501036C35560843519723F40B06
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:54:16 +0000
ROA not before:           Tue 23 Apr 2024 13:49:16 +0000
ROA not after:            Tue 22 Apr 2025 13:54:16 +0000
asID:                     52527
IP address blocks:        2804:dec::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cc:ad:fb:46:bc:65:01:03:6c:35:56:08:43:51:97:23:f4:0b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:49:16 2024 GMT
            Not After : Apr 22 13:54:16 2025 GMT
        Subject: CN=558A99508634104EA68471487B45C8546D00E2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:a2:92:87:e0:2c:eb:18:e9:a4:f6:c4:20:
                    29:33:8f:8a:bb:df:06:e4:e5:d7:c8:17:f1:24:1d:
                    3d:24:55:55:74:14:1a:fa:7a:2f:f2:d2:a5:eb:db:
                    74:4e:0b:09:33:3d:8d:15:ee:ac:44:80:87:08:1d:
                    51:03:07:00:df:96:68:14:4d:a2:74:af:1f:71:44:
                    25:4d:75:cd:bd:53:04:5e:0a:1d:b5:fd:f4:08:21:
                    aa:c1:4e:39:fc:c6:d8:c7:4f:4e:46:84:ac:b1:c1:
                    8a:0c:57:e1:55:4f:8e:dd:bd:94:65:f3:4d:49:81:
                    0e:02:e2:21:52:e1:5e:f3:74:d8:15:e2:68:0c:44:
                    67:10:89:1d:2e:54:79:dc:01:b6:88:d9:4f:ef:62:
                    2f:74:72:9b:95:91:7f:fd:81:e6:64:d9:37:77:10:
                    9b:c8:65:56:63:89:1b:c4:a4:f9:9b:11:59:b8:29:
                    21:62:b7:ba:93:5f:ca:f0:97:30:3b:10:f2:ac:42:
                    4f:7d:23:b5:9a:a6:b5:b8:56:9c:47:76:c5:b2:bd:
                    2b:30:42:30:5e:65:a2:d3:83:83:f4:da:99:0c:98:
                    51:34:df:7d:c7:92:a1:68:21:a4:58:c8:86:9f:31:
                    c7:2a:60:7c:57:f9:d6:0b:a1:b0:92:d8:d5:c4:8f:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8A:99:50:86:34:10:4E:A6:84:71:48:7B:45:C8:54:6D:00:E2:E1
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec::/35

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:b6:80:4f:38:39:65:c3:fc:ed:2a:46:96:83:89:2e:6d:
         5a:51:28:de:a8:b5:e6:10:ba:48:5a:d7:75:c2:19:5e:51:89:
         0b:c1:24:69:e5:82:a1:54:76:cd:aa:82:02:23:d5:92:e0:cd:
         ad:f3:4f:d3:66:26:79:a7:18:ff:33:47:af:50:75:66:e3:e0:
         08:16:b6:39:2b:00:e5:37:69:33:fe:24:3c:da:e3:f6:f0:e7:
         63:65:6b:59:35:2f:cd:b4:f1:15:fa:46:ab:2d:2d:59:3b:05:
         8a:0f:17:5b:10:1a:84:fe:a3:27:7e:a7:bc:c9:2c:3e:76:28:
         0d:5f:41:86:1b:3d:81:c2:0b:70:79:12:91:a1:41:17:0b:0c:
         8d:e0:1a:a7:d8:6e:ef:71:73:82:82:f3:66:0c:28:13:91:75:
         41:5e:24:07:89:7b:d5:11:19:68:24:01:a7:0b:7c:9e:42:eb:
         25:11:9a:35:eb:17:59:38:64:3f:5b:b7:b2:05:6a:45:21:b7:
         dd:f7:36:be:97:8e:6e:c5:df:82:f0:cc:e4:e8:c5:81:a2:7c:
         1d:b8:74:dc:55:35:83:d7:23:86:fe:dd:c1:29:d7:33:a6:d6:
         13:fc:2a:db:78:db:52:3c:60:59:46:48:e3:7d:69:29:bd:b7:
         63:ee:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org