Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235342e302f32342d3332203d3e203532353237.roa
File:                     3230302e3135302e3235342e302f32342d3332203d3e203532353237.roa (raw, json)
Hash identifier:          OPp6Xpiu8T9LBIzATFx2OBY8c0SrVyjYQv/QFoX3zgg=
Subject key identifier:   F3:A3:4D:49:5E:92:01:E9:F7:9A:DA:20:9C:EC:41:4C:E0:69:42:8D
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       39082B792174F25E80FC95C7BD3420B3B4B48465
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235342e302f32342d3332203d3e203532353237.roa
Signing time:             Mon 10 Feb 2025 12:49:14 +0000
ROA not before:           Mon 10 Feb 2025 12:44:14 +0000
ROA not after:            Mon 09 Feb 2026 12:49:14 +0000
asID:                     52527
IP address blocks:        200.150.254.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 16:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:2b:79:21:74:f2:5e:80:fc:95:c7:bd:34:20:b3:b4:b4:84:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb 10 12:44:14 2025 GMT
            Not After : Feb  9 12:49:14 2026 GMT
        Subject: CN=F3A34D495E9201E9F79ADA209CEC414CE069428D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:3a:67:d9:91:1a:73:1d:44:4f:c8:f3:38:
                    7b:72:ee:38:66:d5:e9:83:5e:34:7c:3a:e0:cf:67:
                    55:0b:d7:7c:1a:df:1b:db:23:e8:b3:db:7a:79:53:
                    8f:35:14:1d:26:4a:65:21:4d:ab:28:e4:d1:22:80:
                    ae:fd:e1:4a:7b:82:36:e6:88:2f:c3:83:71:49:2b:
                    d6:8f:68:1d:0d:f2:21:67:a3:06:bc:ab:e8:ab:e0:
                    8e:cd:c0:d3:7e:ae:0f:1a:64:77:cd:06:41:56:33:
                    f0:89:58:ac:d3:69:06:b3:03:f9:37:2f:93:f0:f6:
                    7f:e1:a5:60:87:17:3e:21:9e:73:46:08:8d:5b:ac:
                    ef:d2:f8:4e:c9:a7:ee:82:3e:50:e5:9a:2c:f9:5e:
                    72:0c:85:00:e3:18:b9:0e:f7:5e:79:ef:6b:c1:d5:
                    74:39:af:79:40:83:47:e9:13:f4:cc:0b:9b:1d:92:
                    73:fc:d8:15:af:59:bc:52:4a:80:9e:7c:22:ab:03:
                    21:19:86:d4:4d:5f:21:9f:d1:9e:ec:ad:ca:b3:32:
                    45:77:15:25:df:e9:5d:3e:2f:c7:bd:1e:26:0a:90:
                    0b:15:6a:ff:3b:62:16:a5:5e:6e:28:08:07:b7:03:
                    7d:48:a7:0c:8e:0f:1d:9a:46:bd:a0:dc:90:51:4d:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:4D:49:5E:92:01:E9:F7:9A:DA:20:9C:EC:41:4C:E0:69:42:8D
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235342e302f32342d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:04:0f:da:dc:80:1f:c9:02:93:b7:d6:3c:af:df:a8:a8:
         13:24:f0:db:e5:08:5d:94:33:57:33:63:87:99:51:84:53:d7:
         16:ac:38:2d:8b:c6:b5:ba:7b:3c:a3:72:8e:5b:bf:61:ec:ac:
         af:51:6a:2c:1a:70:dd:5b:db:2d:bf:a0:3d:c8:78:84:5e:fb:
         42:4d:c7:ea:5c:6d:cb:ad:16:aa:3a:5b:f2:58:24:49:0a:f6:
         43:f6:fc:10:ec:af:33:d8:cc:1f:bc:85:45:e2:b9:78:50:f6:
         9f:49:56:13:26:86:9a:f8:ff:6a:22:b5:05:eb:d6:67:3c:70:
         b0:45:f0:f7:ee:19:bc:20:01:61:d9:63:3f:4c:9f:33:70:62:
         9b:3f:8b:cf:ad:95:07:73:c8:85:87:89:5e:a3:3a:c3:2a:36:
         a2:34:cc:ee:0e:7d:5f:f1:48:3a:dd:98:ea:0c:e5:20:98:56:
         a3:65:45:a0:7f:94:2b:93:57:1d:ae:97:ef:b5:3f:ff:c6:3b:
         78:af:47:dd:c1:7f:ab:27:4f:83:dc:fd:28:0b:40:4d:6b:4b:
         00:16:70:dc:b5:c5:65:c8:d9:c0:a2:6e:00:cb:d7:84:56:7c:
         22:85:e3:78:0a:5a:d7:a7:f6:ed:05:e7:4d:bb:0a:55:de:2a:
         04:94:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:51:12 2025 by rpki-client