Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a633030303a3a2f33342d3334203d3e203532353237.roa
File:                     323830343a6465633a633030303a3a2f33342d3334203d3e203532353237.roa (raw, json)
Hash identifier:          M7F891SVaGBaIJ6qh2gMRXseBNAiGdf0QrSxODs3dwQ=
Subject key identifier:   98:4B:C6:FE:7E:F0:42:1B:6A:03:36:51:05:4D:E2:CF:A4:48:CF:65
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       1A4B63EE53C148AF8783C06B4812A887E4287031
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a633030303a3a2f33342d3334203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:04 +0000
ROA not before:           Tue 23 Apr 2024 13:50:04 +0000
ROA not after:            Tue 22 Apr 2025 13:55:04 +0000
asID:                     52527
IP address blocks:        2804:dec:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4b:63:ee:53:c1:48:af:87:83:c0:6b:48:12:a8:87:e4:28:70:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:04 2024 GMT
            Not After : Apr 22 13:55:04 2025 GMT
        Subject: CN=984BC6FE7EF0421B6A033651054DE2CFA448CF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:e9:93:44:4c:3b:94:8d:9e:f7:e9:0a:50:
                    fd:17:3b:04:9e:5d:83:1c:7a:c5:c4:09:d6:e8:b7:
                    2e:06:4a:99:c6:ff:f2:50:44:a2:69:2a:f2:d8:73:
                    3b:cf:23:4c:a7:d4:cc:4a:c5:e5:28:80:32:91:7d:
                    db:43:c2:1a:96:38:7f:d4:c3:fa:12:77:bc:63:17:
                    50:90:07:db:fe:22:90:32:f5:2e:54:70:5d:a6:81:
                    e2:3b:3c:ac:83:05:be:6d:24:e0:46:e4:ce:4f:f5:
                    d3:e2:c7:39:66:18:17:68:4e:bf:c9:1d:3a:7b:08:
                    5e:c5:bc:b3:36:f8:c8:1d:ca:29:93:e1:1d:89:72:
                    ee:39:13:e1:70:1a:64:aa:cb:2d:84:d2:3a:ca:59:
                    42:35:6e:4c:59:0f:a0:a7:a0:17:3d:36:df:d0:99:
                    8b:ed:28:7b:a2:35:b3:85:8a:e0:1c:47:18:9a:14:
                    9c:56:4c:44:76:bd:98:0e:ac:23:74:4e:0e:58:ee:
                    b4:51:32:65:65:86:bf:01:25:94:1f:88:cd:48:85:
                    6c:0f:8f:03:41:54:e9:7d:4b:1b:3b:40:79:fb:f8:
                    f0:39:e9:0d:46:10:6d:27:ef:ef:05:b0:ee:c0:99:
                    ac:53:73:3b:f4:f2:1b:b7:bb:f8:ef:74:49:dd:76:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4B:C6:FE:7E:F0:42:1B:6A:03:36:51:05:4D:E2:CF:A4:48:CF:65
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a633030303a3a2f33342d3334203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:75:5c:e1:8c:c5:69:50:99:bf:22:da:87:41:47:27:ed:a9:
         95:e7:07:c4:10:c3:12:a1:26:5b:e7:81:8f:2b:d9:89:58:b0:
         89:f3:62:12:19:60:a2:a2:3c:d5:aa:81:e1:45:b3:7f:5e:bb:
         6a:61:e7:6b:76:61:ab:0d:fa:ea:7d:96:98:38:ac:12:6a:69:
         c9:bd:30:14:c0:82:0f:71:53:09:0a:ca:6f:84:47:f0:ec:b0:
         40:36:08:16:29:d9:49:55:f1:02:78:02:46:1b:b4:0a:1b:f6:
         49:9b:1d:fe:e2:16:35:a7:dd:cd:6e:7e:b5:ed:97:d6:01:bb:
         32:1b:3b:cd:dc:c9:b0:bd:30:0e:69:d2:ea:67:8d:38:a3:76:
         b4:93:57:82:8e:8b:90:e2:06:1f:40:5a:ed:b3:c2:b7:f6:ea:
         19:f9:b7:a7:a1:9e:63:aa:c1:93:e8:af:c0:d9:ec:aa:1c:b4:
         20:70:8b:11:6a:5d:3a:62:80:56:09:c1:25:1c:f0:04:e2:6d:
         9d:56:cd:67:94:b9:f3:86:a5:c2:80:59:18:d2:2e:b4:4f:9f:
         58:e6:cd:51:2f:0e:d3:2d:80:37:36:83:f8:b0:d7:6e:a0:9c:
         08:57:a6:92:f0:ec:b7:7e:ff:95:b1:2f:1c:01:56:ad:8b:0f:
         c1:91:d1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org