Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          KuQMgmChLYpzseM/auS5dSbiDHREyyffNcf37box7SE=
Subject key identifier:   53:CC:BF:52:6F:8D:2E:AC:3B:7C:C5:27:0E:A6:2F:66:5E:BD:6C:2B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       5265A275FCFA8F1DE33157B7DFE7B33AF35C05DB
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:34:21 +0000
ROA not before:           Tue 06 Aug 2024 21:29:21 +0000
ROA not after:            Tue 05 Aug 2025 21:34:21 +0000
asID:                     11921
IP address blocks:        200.150.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:65:a2:75:fc:fa:8f:1d:e3:31:57:b7:df:e7:b3:3a:f3:5c:05:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:29:21 2024 GMT
            Not After : Aug  5 21:34:21 2025 GMT
        Subject: CN=53CCBF526F8D2EAC3B7CC5270EA62F665EBD6C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:59:88:dc:dc:4a:96:bf:bf:38:59:b2:5f:
                    eb:30:fa:11:fa:8d:b4:68:e7:f0:ba:35:4b:18:a4:
                    6e:28:85:b9:fe:a1:a7:d5:f0:3f:cb:4a:8d:7d:e3:
                    c5:3e:20:52:6d:e3:1e:ee:f9:d5:41:cd:a7:99:17:
                    16:37:10:6f:42:0c:bb:cc:22:cd:11:f4:15:e4:fb:
                    4a:c1:b7:fd:2f:15:c7:16:5b:2f:fd:27:a7:9d:29:
                    32:74:2d:71:44:7f:1e:cc:3a:9f:0c:74:19:2c:21:
                    ae:ad:f1:de:9a:8b:43:17:d3:ae:ac:2f:9d:aa:f0:
                    37:d5:50:8c:78:e3:cb:90:3b:56:a2:b4:5f:92:a6:
                    66:df:b4:5d:29:52:0e:09:36:90:3d:0f:4d:83:d3:
                    ac:17:a1:5d:c9:a1:d4:59:ad:c9:aa:41:d9:f9:6a:
                    fc:44:c2:2b:1d:22:51:75:e7:d1:7a:37:54:a1:7c:
                    86:37:a0:34:69:1d:0f:33:11:18:fe:3c:bd:27:2e:
                    79:46:06:74:ab:3d:54:64:a9:de:aa:f4:35:95:9e:
                    16:f7:02:f2:ec:76:73:b4:6a:61:8c:32:09:f9:37:
                    94:5e:fe:d0:3f:4c:8b:c8:36:71:01:a4:04:2b:8a:
                    48:38:ec:c6:77:02:c6:a9:13:08:3c:f2:e3:e1:64:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:BF:52:6F:8D:2E:AC:3B:7C:C5:27:0E:A6:2F:66:5E:BD:6C:2B
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:64:7b:5a:88:09:06:42:21:34:2b:f7:59:e4:91:e9:c4:6a:
         87:52:c8:3a:bd:2b:49:7e:0e:c1:ad:4d:ae:f1:8e:df:8c:79:
         83:a6:9d:5f:83:1c:db:eb:95:72:54:68:73:86:fe:41:04:55:
         8a:a6:64:ff:32:50:a7:0b:8f:99:e7:8b:c0:6a:8a:25:a0:44:
         09:8c:ab:05:02:78:78:bc:97:f5:db:98:56:6e:42:dc:29:4d:
         26:71:ca:b9:28:4d:60:ea:71:76:84:e9:c5:91:d6:5a:c3:47:
         df:5e:6f:6d:17:bd:de:0b:b5:44:72:c6:bc:10:3c:9f:af:f4:
         f0:24:a9:76:f3:da:5c:02:64:9d:b4:f8:9d:0c:a1:2c:5f:d0:
         21:65:38:9b:74:02:c8:1c:06:36:70:79:9d:cc:ed:c4:13:24:
         07:a0:e9:4b:3c:ac:54:d2:38:e0:47:10:eb:9c:0a:63:ba:eb:
         92:89:91:54:52:54:04:3b:ed:34:9e:d7:aa:2d:4f:62:8b:0e:
         fa:ed:22:0a:e6:10:61:4b:6a:81:4f:cb:51:07:1f:62:f2:7f:
         98:96:07:07:f2:20:6e:0f:51:c8:94:46:a0:cb:25:e4:f0:59:
         5c:17:ae:e8:2f:a6:89:b9:b0:90:ad:79:be:a1:74:18:a9:bd:
         eb:82:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org