Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          ymT90SXFQF4l8J8aDMEGrvxRcczKIZKFnnzWTbrYsG4=
Subject key identifier:   95:6D:0D:E6:F1:AD:D2:A0:EE:A6:7E:66:53:BF:7E:DA:7F:22:9B:2D
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       28B4BC0D61F49388AE604A71FA52CB866FC63FEE
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        200.150.128.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b4:bc:0d:61:f4:93:88:ae:60:4a:71:fa:52:cb:86:6f:c6:3f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=956D0DE6F1ADD2A0EEA67E6653BF7EDA7F229B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:bb:ff:3e:de:28:d9:68:d0:ce:d5:38:2b:
                    f8:8d:34:7e:a1:17:2a:75:14:f7:9a:b0:b5:ff:ff:
                    62:23:30:14:f2:0c:38:43:8f:09:1a:b3:25:1a:31:
                    47:f6:10:ae:96:f4:3f:01:97:d7:39:7e:e7:85:94:
                    d0:ed:23:8b:81:90:68:50:9c:9f:94:43:b5:08:f8:
                    05:4e:3e:0b:8e:31:d7:a8:cc:59:76:a7:ad:03:14:
                    17:4d:b7:e0:ad:73:80:2c:15:49:22:bc:4e:14:ce:
                    f3:d0:88:9d:0f:46:6b:90:3a:a0:d9:e8:1d:d8:99:
                    2e:91:52:2c:b6:07:4f:7a:ea:87:f4:22:88:6e:74:
                    af:ff:37:cc:b2:1b:df:47:09:b9:f8:66:fd:27:61:
                    2c:2b:0c:75:95:4c:5a:c3:22:61:07:9a:83:b3:64:
                    87:3c:be:8e:36:5f:9e:c6:85:29:57:74:5f:c4:29:
                    dd:b7:f3:4c:b3:bb:96:ac:de:0f:0a:ab:6c:e0:03:
                    26:20:fb:c1:9b:74:f5:ec:b7:65:bc:8d:0c:fd:fa:
                    2b:4a:f1:8c:ab:7c:1c:a5:c3:09:5f:ef:dd:52:95:
                    e9:c1:cd:be:2a:76:33:b1:87:12:9f:80:7f:02:01:
                    57:93:f4:80:fc:ec:c2:d0:cd:a1:6b:6a:1d:04:27:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:0D:E6:F1:AD:D2:A0:EE:A6:7E:66:53:BF:7E:DA:7F:22:9B:2D
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:ca:41:48:be:b8:e9:b7:09:14:b4:40:e5:05:9c:5f:bf:
         17:18:5f:61:c3:4b:75:c2:8e:e0:97:38:ab:16:b0:34:e0:67:
         76:fb:ef:5e:58:71:5a:d8:ee:34:48:f6:8f:ba:e2:89:eb:44:
         e4:33:d1:44:cc:6c:6f:2f:24:e5:24:a4:e4:fe:9a:a0:e3:40:
         4a:0e:cc:d1:e8:c0:90:29:e0:c2:fe:b2:f0:3b:d0:bd:30:ca:
         6a:ef:24:c2:77:e4:c7:8a:86:e6:5b:cb:2c:7c:8a:7c:3d:95:
         e3:0f:4f:45:21:00:0e:3c:83:46:d3:92:8b:a3:8f:6d:44:b4:
         4c:b6:79:29:ff:d9:d3:e1:94:60:cd:6a:28:e1:0d:56:a0:b0:
         fb:cd:4a:dc:3e:ec:0f:c5:12:85:7b:ce:fb:05:98:94:ef:7c:
         4f:ba:4c:c5:31:f1:12:2b:b5:c6:1f:3e:c7:36:bf:eb:67:42:
         76:ce:56:00:55:43:49:cd:59:ae:20:36:bf:a1:38:50:2c:dd:
         52:b8:34:11:bd:ee:89:d0:71:19:82:88:5b:9b:9e:97:7b:e3:
         54:e1:f5:9d:9e:ff:0f:d1:4d:cf:a0:26:15:8b:6b:b1:17:99:
         45:18:4c:c3:77:ae:bd:4a:f3:f5:df:e9:78:dd:72:3b:8b:22:
         50:e4:fe:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKLS8DWH0k4iuYEpx+lLLhm/GP+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDNaFw0yNTA0MDMyMzIxNDNaMDMxMTAvBgNV
BAMTKDk1NkQwREU2RjFBREQyQTBFRUE2N0U2NjUzQkY3RURBN0YyMjlCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72rv/Pt4o2WjQztU4K/iNNH6h
Fyp1FPeasLX//2IjMBTyDDhDjwkasyUaMUf2EK6W9D8Bl9c5fueFlNDtI4uBkGhQ
nJ+UQ7UI+AVOPguOMdeozFl2p60DFBdNt+Ctc4AsFUkivE4UzvPQiJ0PRmuQOqDZ
6B3YmS6RUiy2B0966of0IohudK//N8yyG99HCbn4Zv0nYSwrDHWVTFrDImEHmoOz
ZIc8vo42X57GhSlXdF/EKd2380yzu5as3g8Kq2zgAyYg+8GbdPXst2W8jQz9+itK
8YyrfBylwwlf791SlenBzb4qdjOxhxKfgH8CAVeT9ID87MLQzaFrah0EJy+vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlW0N5vGt0qDupn5mU79+2n8imy0wHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMTM1MzAyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIloAwDQYJKoZIhvcNAQELBQADggEBAAp9ykFI
vrjptwkUtEDlBZxfvxcYX2HDS3XCjuCXOKsWsDTgZ3b7715YcVrY7jRI9o+64onr
ROQz0UTMbG8vJOUkpOT+mqDjQEoOzNHowJAp4ML+svA70L0wymrvJMJ35MeKhuZb
yyx8inw9leMPT0UhAA48g0bTkoujj21EtEy2eSn/2dPhlGDNaijhDVagsPvNStw+
7A/FEoV7zvsFmJTvfE+6TMUx8RIrtcYfPsc2v+tnQnbOVgBVQ0nNWa4gNr+hOFAs
3VK4NBG97onQcRmCiFubnpd741Th9Z2e/w/RTc+gJhWLa7EXmUUYTMN3rr1K8/Xf
6XjdcjuLIlDk/oU=
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org