Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3230203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          1Re103144BOTgwwQXz8BoxGEQq1EmnUgWWpLQ718bbM=
Subject key identifier:   7E:CC:E0:91:DC:8C:B3:18:0A:7E:6E:49:60:33:85:56:7B:B7:54:3F
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       552533A97FF6DD9DAE12EBAF0772B28AAB449614
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3230203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:33:11 +0000
ROA not before:           Tue 06 Aug 2024 21:28:11 +0000
ROA not after:            Tue 05 Aug 2025 21:33:11 +0000
asID:                     11921
IP address blocks:        200.150.128.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:25:33:a9:7f:f6:dd:9d:ae:12:eb:af:07:72:b2:8a:ab:44:96:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:28:11 2024 GMT
            Not After : Aug  5 21:33:11 2025 GMT
        Subject: CN=7ECCE091DC8CB3180A7E6E49603385567BB7543F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:36:2b:e6:0c:b3:17:67:65:6e:4a:6f:56:
                    5a:b9:47:da:49:f1:d3:93:a5:a5:84:1e:b2:ea:b4:
                    07:75:13:0b:b7:c8:33:59:63:8b:c4:44:ba:8f:af:
                    7e:b2:06:a8:53:95:d1:3e:04:18:a8:7c:c2:e6:e3:
                    0b:fe:a4:69:1a:fe:bc:64:73:ed:06:b2:45:85:44:
                    5e:08:59:d4:a7:fd:e0:92:4f:00:d9:2b:48:e8:a2:
                    4d:e9:0a:1c:3a:4f:c9:4f:8d:8f:e4:05:38:74:1f:
                    fb:50:a6:55:cd:fc:4d:4e:c8:4c:27:50:d9:b9:a7:
                    ff:49:99:31:24:cb:d3:e4:d1:5d:e2:44:a4:46:9f:
                    9c:b2:f6:be:17:0b:f5:d2:ff:b6:f0:bd:43:ef:40:
                    75:3d:20:4b:19:4c:39:7e:cb:6d:6c:cf:53:16:89:
                    5b:5b:ab:38:dc:67:81:1f:72:b6:b1:8e:0f:f7:d4:
                    bf:1e:01:13:25:c5:e1:b6:0c:cc:4d:c1:5f:be:38:
                    c9:7e:92:4c:77:93:8b:92:6d:cd:4a:36:d2:19:08:
                    40:e4:cd:83:33:ea:5b:bf:4f:cd:d7:68:23:b7:96:
                    47:37:b6:0d:b4:50:cc:40:80:49:d6:f3:44:02:09:
                    6a:39:f1:88:f7:e4:3e:b7:f5:82:a5:66:51:84:0d:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CC:E0:91:DC:8C:B3:18:0A:7E:6E:49:60:33:85:56:7B:B7:54:3F
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:32:76:36:55:c7:9f:6b:82:90:60:5a:63:33:1d:1e:5d:f7:
         ff:8b:d0:c4:96:18:38:d3:8b:84:54:26:a7:81:e6:cf:a4:80:
         b6:17:b2:02:68:3f:72:7a:eb:56:ea:ae:c9:af:4b:c2:48:a7:
         70:45:50:13:86:eb:65:ae:75:1b:68:54:c9:d5:b9:ed:6c:73:
         7d:8b:fc:ef:8e:87:5b:e9:18:2d:0b:b4:b9:ff:72:56:f1:a7:
         d2:91:08:26:d2:d0:67:7d:df:59:2d:b5:6b:2d:16:16:85:20:
         1f:a8:1b:22:74:ec:a9:7b:bd:ad:e8:3c:41:a3:96:50:7b:a0:
         32:13:ef:e7:c5:9e:41:b2:78:3b:6e:57:87:ac:d5:2f:a5:bb:
         3c:22:e3:c9:16:97:a8:2e:9e:13:e0:82:62:69:26:43:7d:23:
         e1:78:08:cf:9b:0d:17:81:2b:aa:f8:86:36:49:85:a3:08:51:
         66:58:7e:bd:c3:61:af:30:2b:be:ec:99:4a:5f:1d:58:01:81:
         58:51:7f:b9:4b:0e:1d:78:01:1f:e5:56:f3:aa:9e:61:5b:66:
         a0:07:41:07:4a:e4:5e:a7:d0:95:af:05:8f:3e:8b:4e:10:73:
         b3:77:8f:65:e3:f5:81:67:2c:cf:1e:35:5c:3d:a4:b9:27:ad:
         28:45:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:34:07 2024 by rpki-client on console-ams.rpki-client.org