Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a653030303a3a2f33352d3335203d3e203532353237.roa
File:                     323830343a6465633a653030303a3a2f33352d3335203d3e203532353237.roa (raw, json)
Hash identifier:          bYvfS2MB7grHFq7gjqTXIDUeZTuYaAn6ZzWmZbnfVA0=
Subject key identifier:   94:75:42:F2:1A:79:8A:C6:66:43:4F:29:8F:9E:9B:B1:8B:C0:4F:88
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       6765F1334ED2B9803B2F5C5467C7CA15202E624D
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a653030303a3a2f33352d3335203d3e203532353237.roa
Signing time:             Tue 23 Apr 2024 13:55:09 +0000
ROA not before:           Tue 23 Apr 2024 13:50:09 +0000
ROA not after:            Tue 22 Apr 2025 13:55:09 +0000
asID:                     52527
IP address blocks:        2804:dec:e000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:f1:33:4e:d2:b9:80:3b:2f:5c:54:67:c7:ca:15:20:2e:62:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Apr 23 13:50:09 2024 GMT
            Not After : Apr 22 13:55:09 2025 GMT
        Subject: CN=947542F21A798AC666434F298F9E9BB18BC04F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:17:af:c9:17:b3:d1:5f:52:d8:29:a6:e4:
                    21:a7:ca:ff:11:c0:49:8f:42:c1:43:b9:7a:9f:1b:
                    9b:19:bb:3d:55:a5:8a:37:f2:b8:42:f5:f8:d3:4e:
                    32:fa:c1:33:b9:6e:2f:0d:ed:d9:0f:0a:f9:9c:2c:
                    c6:85:56:a5:1a:9e:e4:78:85:ea:44:07:d0:90:c2:
                    4d:9d:8b:81:7a:4a:0e:67:f6:da:b2:49:4d:db:72:
                    b9:6e:0a:4f:f3:17:ed:65:8e:28:32:ec:a7:b3:fa:
                    b1:d7:f9:de:1b:e2:a4:8c:b6:d4:b5:3a:4e:0e:17:
                    50:b8:73:88:e0:70:c6:90:22:47:0e:74:a6:f0:e4:
                    ff:00:c4:a6:4d:34:27:2e:7e:35:6e:58:bc:07:73:
                    88:12:c4:18:77:3c:c1:6a:ff:a3:6e:3a:25:96:fa:
                    a8:2b:bd:1b:8b:73:c5:57:9c:0d:50:6e:d5:8e:41:
                    75:4a:66:63:e6:e2:56:17:27:38:60:56:af:1d:a7:
                    5f:ca:5c:36:31:8a:3e:e2:b3:bd:f9:83:93:73:ef:
                    39:81:e5:5f:ba:1c:fb:a2:ec:8f:f0:29:13:05:ff:
                    65:ab:44:fa:2d:43:07:84:b9:3e:52:85:81:8a:3f:
                    cc:83:29:a2:d7:04:a6:1c:b4:84:69:9f:0a:7a:7d:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:75:42:F2:1A:79:8A:C6:66:43:4F:29:8F:9E:9B:B1:8B:C0:4F:88
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a653030303a3a2f33352d3335203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:1c:be:82:d5:46:36:78:d9:aa:1f:1c:a1:a2:78:9a:91:
         65:87:47:e1:ab:15:a7:7d:a9:6c:d4:42:2c:2e:0e:31:b1:be:
         d7:2e:88:ad:49:6a:37:26:13:ee:73:f5:b4:39:fb:6b:52:fb:
         67:a0:78:f5:6d:55:8b:0e:66:8d:28:98:20:4f:b1:02:3d:6c:
         62:b5:cf:36:bd:43:da:fe:88:24:e7:42:15:fb:f0:84:cf:cf:
         93:a6:d9:4f:e4:3c:55:80:55:57:be:bf:6a:e8:fd:01:41:a7:
         4c:51:80:7c:71:1f:07:f9:38:e0:fb:4a:bf:de:7f:c7:ff:32:
         50:5c:68:3e:b5:70:33:26:12:16:7c:e7:44:46:ac:bc:ee:d1:
         8f:61:c8:bc:29:af:85:4b:dd:9d:e1:38:d3:7b:63:51:d6:f5:
         3a:c4:49:42:21:5c:94:cb:6a:9f:e1:26:f5:5c:c3:9f:bc:13:
         f2:b2:3a:68:2a:0e:24:d2:e1:74:7e:a0:a0:5b:ae:f9:d5:b0:
         54:0d:a3:cb:9b:c8:4b:37:11:b7:e4:0e:31:ec:2e:43:c5:99:
         92:c3:bf:d8:15:f2:de:6f:ae:e1:58:33:3b:4c:5b:d3:49:20:
         af:04:66:d7:f2:17:56:1f:4b:31:c1:4c:91:75:56:d5:d3:fd:
         69:ca:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org