Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a613030303a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a613030303a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          ZShpuenRwtRbe9ELEEtRMerNV+74OvDtZRcfG+A/PJ0=
Subject key identifier:   1B:BF:BA:2C:3D:1A:0E:AC:51:5A:C7:9F:69:37:4B:A4:9C:90:AD:3F
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       15E0AA6F95ACFBD6899BF47EF96A4AB14E52502B
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a613030303a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:01 +0000
ROA not before:           Tue 23 Apr 2024 13:50:01 +0000
ROA not after:            Tue 22 Apr 2025 13:55:01 +0000
asID:                     52527
IP address blocks:        2804:dec:a000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e0:aa:6f:95:ac:fb:d6:89:9b:f4:7e:f9:6a:4a:b1:4e:52:50:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:01 2024 GMT
            Not After : Apr 22 13:55:01 2025 GMT
        Subject: CN=1BBFBA2C3D1A0EAC515AC79F69374BA49C90AD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:98:3c:0e:df:d4:84:b4:15:0a:8d:e3:1f:
                    e6:e6:7d:33:fd:a3:b7:b4:ad:7d:9b:62:91:e3:04:
                    fd:43:4e:41:c4:7b:03:83:67:21:49:f8:02:03:e6:
                    bf:6a:b9:78:07:97:6a:5c:5b:fd:2e:55:7e:f6:61:
                    e6:bb:bd:8d:c1:46:99:b8:6d:7a:14:b8:ea:43:a6:
                    3b:f7:d0:45:76:a1:63:52:fc:a5:53:5f:ae:fe:a6:
                    f5:26:08:f8:07:a1:e3:96:ef:8a:1d:e1:da:01:9c:
                    76:19:52:1f:fb:23:25:26:0b:a4:2b:fc:fc:a8:33:
                    d3:c7:17:e4:3b:ba:b6:11:6c:49:7f:ad:c1:6c:b2:
                    58:8a:49:47:59:47:18:fa:fa:cf:c3:8d:60:f2:82:
                    a8:cd:2c:ac:a1:46:d6:83:07:5e:96:e8:97:ab:67:
                    d3:67:1c:52:72:12:da:93:fe:de:d5:74:a1:31:fb:
                    3f:8c:4e:46:78:cb:bb:98:8a:fe:65:4f:02:89:97:
                    f1:5f:87:a8:02:da:ea:da:48:fb:4c:34:f4:60:11:
                    a3:fe:03:02:18:5a:dc:20:88:dd:15:5d:cb:d1:39:
                    d5:bf:97:25:a2:e8:03:07:33:8b:04:5a:e1:7e:a8:
                    8c:36:94:9a:ce:07:29:f1:6c:de:16:e0:43:89:95:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BF:BA:2C:3D:1A:0E:AC:51:5A:C7:9F:69:37:4B:A4:9C:90:AD:3F
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a613030303a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b5:99:e1:82:d9:a0:ab:77:7f:3a:0b:fa:e1:c0:7e:a8:38:ca:
         98:f1:4a:13:b4:7e:f3:6f:75:3f:4d:b6:11:f6:4d:4a:97:68:
         e1:ed:e2:7a:a5:24:15:d5:c6:90:4b:bf:80:f4:6c:f3:de:ea:
         7d:2d:15:cc:9a:df:7e:d0:c7:e2:6e:5e:89:0b:17:6f:ce:60:
         91:2d:bc:70:02:c8:62:62:da:3f:df:eb:eb:ca:b3:62:2e:e1:
         64:30:7d:fb:e9:9c:f4:a8:6f:02:c4:d4:7b:17:09:e2:7a:db:
         17:e1:85:f2:76:c8:8b:39:94:24:dd:1a:0a:29:72:8f:a9:20:
         70:8e:56:dd:32:27:4b:73:4e:a6:03:bc:d6:e6:85:81:54:7a:
         fd:78:2f:c3:a0:38:e0:20:73:a3:46:50:1c:72:48:f3:d5:d2:
         02:72:22:04:8e:b0:36:7c:9e:a5:b8:30:13:8b:21:ed:c5:3f:
         87:bc:ac:83:d0:5d:99:12:af:9a:6c:9c:4b:9d:79:58:3d:84:
         0c:37:6c:26:b0:0c:67:bc:72:f7:67:6b:a4:af:8d:17:7a:51:
         f8:3e:b6:ff:b8:46:41:bf:c0:c4:d8:32:4c:44:6f:a9:b0:54:
         be:8d:ce:a8:a9:3d:0e:28:7b:8b:19:f4:10:a6:37:22:31:f7:
         b4:fd:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org