Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa (raw, json)
Hash identifier:          KeuHslRlhMDgMQPVpYA7FBQHq3JzFlcngv0byFsUxII=
Subject key identifier:   26:7A:FB:6E:C1:A3:69:36:F7:EB:2E:EA:63:FB:DF:57:CB:F8:EC:40
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       3A54003934AD413C507731312017E022B44791C7
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:34:17 +0000
ROA not before:           Tue 06 Aug 2024 21:29:17 +0000
ROA not after:            Tue 05 Aug 2025 21:34:17 +0000
asID:                     11921
IP address blocks:        200.150.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:54:00:39:34:ad:41:3c:50:77:31:31:20:17:e0:22:b4:47:91:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:29:17 2024 GMT
            Not After : Aug  5 21:34:17 2025 GMT
        Subject: CN=267AFB6EC1A36936F7EB2EEA63FBDF57CBF8EC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:26:70:be:68:5f:0d:c2:1c:f1:a2:ad:04:8c:
                    32:f3:3f:48:19:ab:ed:5a:c7:3d:c0:77:5f:9f:91:
                    d7:d4:40:1f:fb:7c:ac:45:cc:ba:fa:91:71:0a:e2:
                    36:92:01:56:f6:bb:81:52:b5:94:6f:d0:ea:02:19:
                    8b:f8:1c:5c:01:e3:6c:bc:08:23:3d:6c:3e:b4:8a:
                    25:2d:bc:cf:bb:ae:53:35:48:c0:1e:c4:a8:11:68:
                    45:29:19:10:04:b8:f2:e7:cf:a6:ff:62:2c:11:43:
                    2d:76:d5:fe:06:6b:cb:ef:94:89:d0:4c:15:1f:c0:
                    ee:b2:cb:ec:07:f9:e9:bf:f6:68:a5:07:64:90:0a:
                    54:a1:b5:f2:d1:49:33:88:e7:35:9c:fd:5f:5b:3a:
                    48:4a:9a:63:bc:5d:03:7d:18:0f:5f:2a:54:ef:69:
                    e9:05:55:79:0e:3d:db:64:bd:9a:22:b7:18:94:a5:
                    b5:a2:ff:f5:43:c9:28:86:78:bd:0a:bb:54:49:cc:
                    10:82:b3:91:0e:eb:97:76:89:1a:54:c0:90:a4:27:
                    52:6b:58:6a:1d:43:6c:73:47:87:79:ca:91:6a:10:
                    8b:57:ce:b8:25:1b:c2:a2:1b:10:42:28:51:1b:18:
                    50:5f:3d:ac:32:ec:b6:d9:d7:45:ae:13:7a:bc:6f:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:FB:6E:C1:A3:69:36:F7:EB:2E:EA:63:FB:DF:57:CB:F8:EC:40
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:33:18:ac:b2:ae:40:1b:4f:7f:84:7c:e4:56:61:d3:f3:
         39:65:54:a8:83:40:f9:5a:79:e1:13:3d:6e:95:6e:52:04:53:
         9b:49:f0:2d:ba:2d:71:64:ac:72:27:84:0d:31:45:a0:58:b0:
         df:40:35:1c:b7:a1:79:2d:4d:bb:e1:d1:ed:2c:a0:e2:e6:72:
         86:e6:74:19:f1:0d:2f:3d:f8:ee:6c:3c:8f:d8:ee:15:c2:d3:
         66:73:8f:3c:a8:7d:78:f8:06:4f:ee:81:45:89:c3:9c:12:ea:
         47:a5:c9:0d:7e:d6:ca:48:be:3b:78:57:81:10:e0:bc:a0:dc:
         cc:fa:71:1f:f6:a8:7d:ff:6f:f6:88:f5:c1:15:14:e5:91:81:
         b5:fb:e3:13:22:24:f8:81:ec:ca:0a:3d:c0:e4:23:89:e0:27:
         52:60:85:76:fb:2d:d3:64:af:b7:ec:2b:f4:2e:65:15:e0:fb:
         00:c2:54:87:4c:9f:9b:2f:82:e3:f9:44:c6:22:33:c3:2e:67:
         3b:4d:39:74:df:00:62:1e:87:fd:fe:18:23:08:49:be:c1:3a:
         5a:e5:db:5f:a1:c5:0e:4e:a2:37:ec:6f:e6:15:46:80:18:fd:
         20:05:19:44:45:55:03:50:63:19:a9:75:08:0b:02:ba:19:39:
         63:79:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:34:07 2024 by rpki-client on console-ams.rpki-client.org