Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a633030303a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a633030303a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          cstEn2X8f6+Uz/CVNhqeP/lfYsCaVDeLTyxZiIt6nV0=
Subject key identifier:   90:94:4E:97:E4:A6:B9:A5:C1:D5:F2:29:9F:2F:04:7C:B8:35:11:5B
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       321A6191E8F5C5850537C544E3857FC8D73C5B2F
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a633030303a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:07 +0000
ROA not before:           Tue 23 Apr 2024 13:50:07 +0000
ROA not after:            Tue 22 Apr 2025 13:55:07 +0000
asID:                     52527
IP address blocks:        2804:dec:c000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1a:61:91:e8:f5:c5:85:05:37:c5:44:e3:85:7f:c8:d7:3c:5b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:07 2024 GMT
            Not After : Apr 22 13:55:07 2025 GMT
        Subject: CN=90944E97E4A6B9A5C1D5F2299F2F047CB835115B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:99:d5:3a:2f:b1:33:c7:ff:16:34:9f:da:
                    a1:57:16:90:3f:ad:60:79:39:dd:67:81:a6:2b:40:
                    6b:75:ee:1f:a6:09:e5:9c:48:a9:2f:c0:21:48:be:
                    9d:ad:ee:f4:8d:77:0b:1a:d0:4e:2b:0a:e3:f8:cb:
                    69:1a:c3:02:86:ba:1e:e1:e6:d4:47:32:7b:d4:cc:
                    9b:e6:ef:bf:33:9c:b8:d7:72:3c:31:55:15:29:13:
                    2b:19:d3:6e:79:21:93:34:aa:87:de:1f:9d:71:19:
                    33:eb:9c:a7:9a:a3:85:09:4d:bb:3c:c5:be:f8:33:
                    66:fa:d7:d5:38:30:5f:b7:c6:85:c8:69:f6:84:c4:
                    70:79:26:9e:15:5f:b3:2c:b7:c5:0d:cc:e4:12:8d:
                    d3:5d:a6:df:ba:66:8c:1f:e6:4e:b7:17:88:5e:34:
                    84:ef:fb:17:24:9a:2a:8f:fd:4a:66:0a:ad:de:07:
                    da:47:90:42:a4:90:ef:71:ce:54:02:73:41:7a:1d:
                    54:28:51:92:9e:99:5a:bb:8f:a7:34:e6:35:f1:5a:
                    b5:ef:45:e0:e3:6d:1c:ab:19:6a:fb:34:21:5b:4f:
                    4c:ad:40:a1:d4:63:10:fe:c4:c1:a1:21:83:88:05:
                    19:65:56:a0:37:09:8b:35:57:3f:bc:f4:02:83:96:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:94:4E:97:E4:A6:B9:A5:C1:D5:F2:29:9F:2F:04:7C:B8:35:11:5B
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a633030303a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4b:9e:46:ff:6a:bd:6e:dd:47:60:85:47:ce:84:03:fa:b6:a2:
         5a:cd:5a:4a:3a:6e:67:19:2c:1a:ce:21:77:8e:b3:21:e5:42:
         53:74:ef:c3:ff:33:eb:d0:b7:89:1c:97:84:52:f2:39:53:e6:
         a6:95:86:51:77:92:aa:21:09:c8:9f:84:56:b9:d5:5d:2b:04:
         89:6d:6d:e0:fc:d4:bf:9b:bb:d6:4b:4f:bd:1f:30:74:e5:4c:
         e4:e6:f1:a2:f8:7a:46:e5:da:2a:61:ec:ac:c6:ad:1f:f6:0b:
         46:51:45:9a:42:9a:b4:23:d6:c5:1a:ef:e6:12:e8:99:9d:23:
         63:00:54:91:4b:07:1a:8d:d1:42:ac:e1:04:b4:18:95:98:b2:
         27:6c:a2:aa:2e:ba:f8:95:72:ab:7c:28:ba:c4:78:1c:e0:25:
         87:4c:4d:46:f2:18:0c:a0:7c:ca:fd:a4:57:02:8a:e9:df:4e:
         ee:ce:32:ed:67:76:c6:03:f4:6d:38:23:12:de:ad:e6:83:79:
         7e:dc:e0:ed:b3:fd:53:3a:1e:05:9b:aa:59:a7:83:8d:3f:a9:
         47:f1:98:c3:2c:e5:6d:52:ef:cf:bc:34:74:a2:f2:a5:03:fb:
         51:d6:44:5b:cb:7c:15:64:a7:94:c2:35:7b:21:8c:6c:94:95:
         16:c1:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org