Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133322e302f32322d3232203d3e203131393231.roa
File:                     3230302e3135302e3133322e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          r+IBIys0gUhrarV1ioJ+IMsocpYK6C0aKmSA40kLWq8=
Subject key identifier:   0C:22:83:E5:F2:93:23:41:00:F0:96:F4:B3:8F:13:71:61:26:76:AF
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7F361681BDB62CF0BA65B78157289BCC439A3AC5
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133322e302f32322d3232203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:34:27 +0000
ROA not before:           Tue 06 Aug 2024 21:29:27 +0000
ROA not after:            Tue 05 Aug 2025 21:34:27 +0000
asID:                     11921
IP address blocks:        200.150.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:16:81:bd:b6:2c:f0:ba:65:b7:81:57:28:9b:cc:43:9a:3a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:29:27 2024 GMT
            Not After : Aug  5 21:34:27 2025 GMT
        Subject: CN=0C2283E5F293234100F096F4B38F1371612676AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:ca:7e:62:07:87:20:4c:85:cd:e2:29:cc:
                    f4:f6:e6:da:d4:a9:14:91:24:29:68:25:14:7b:3d:
                    32:ec:64:6b:13:bc:97:3d:c8:29:e0:9b:a4:76:97:
                    47:d4:01:89:8d:9f:af:0f:f1:42:c1:36:3d:78:8d:
                    25:f8:4b:cd:bc:c8:5f:6c:f6:d3:49:98:00:03:b9:
                    ed:74:cd:15:ad:1f:a3:64:d4:f2:77:06:b4:5b:e6:
                    f0:26:d6:6d:7b:33:0c:03:ea:da:52:eb:45:e5:77:
                    c1:6a:7f:fc:1e:3a:85:1d:13:06:37:b6:41:f1:9a:
                    b6:b8:19:b7:c2:ba:b0:2e:20:0f:cd:6c:ca:2a:82:
                    bb:27:bd:55:c0:02:42:9b:f4:64:37:91:d6:d7:61:
                    49:65:96:a9:77:48:b5:8c:1d:2c:20:32:6e:24:c0:
                    f7:d1:fb:2c:fd:6d:f3:e0:fc:cf:7f:ec:0b:1b:dc:
                    e7:f7:c7:8b:04:68:1b:75:9e:5e:6d:c6:fb:5f:eb:
                    3b:61:0e:49:c4:b5:1e:fa:75:af:14:62:4f:48:c2:
                    e0:84:c6:ec:ed:e4:cb:f5:de:81:90:d9:ce:49:1b:
                    9a:c9:fc:f8:4a:9f:a8:00:92:09:b5:f9:62:cb:bc:
                    73:52:a1:7c:36:11:14:50:7d:c8:f0:cf:74:e1:bd:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:22:83:E5:F2:93:23:41:00:F0:96:F4:B3:8F:13:71:61:26:76:AF
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133322e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:7d:dd:20:0e:78:37:00:db:31:72:48:7e:c5:22:ae:1d:45:
         27:10:62:44:be:bf:a6:3c:09:6c:3d:55:2d:4d:e8:aa:fb:85:
         53:68:f4:a0:e8:2a:47:50:ae:9a:64:5a:4e:f8:cb:ab:ae:47:
         6e:41:cf:f2:ce:ec:0a:90:36:ce:c9:42:98:bd:fd:57:37:2f:
         ca:7d:38:5f:b1:e5:05:1f:a3:50:28:fd:7d:7f:e4:8a:eb:e5:
         db:66:9b:e3:03:08:62:b7:59:5c:c6:b8:10:73:87:8a:18:d5:
         fc:b4:67:00:7e:05:cd:48:7f:17:4d:7e:e2:59:d6:db:7e:06:
         c7:2c:39:9c:73:76:0c:32:92:56:a3:99:14:ef:55:17:37:3c:
         7d:ee:e8:d8:6a:30:bb:de:7a:d1:d1:a5:66:e1:89:5c:f1:ea:
         b2:57:d4:d1:b8:17:4a:ea:84:ce:53:aa:46:df:97:65:ca:99:
         b3:ec:06:3b:5d:72:3e:08:8c:8b:59:f3:1c:a8:e5:55:f4:cf:
         f7:8f:e4:3b:9c:c4:75:58:93:e8:18:76:06:91:ba:c1:74:7f:
         a1:00:f8:60:21:2e:9d:de:d9:97:42:50:28:e4:e2:42:01:fa:
         df:95:a8:e2:0b:9c:3d:7f:51:b4:4b:21:60:79:31:47:b8:51:
         85:5d:23:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org