Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          edzt/wfab+qT7d1URYxklopTPeELU8Z2BWk4KRiAkjk=
Subject key identifier:   8B:2A:EB:91:CE:53:7E:AA:B3:F9:3B:35:BB:46:91:E9:80:A2:61:85
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       696D19102DB79087C88CCE5808361C4D7BC90417
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        200.150.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6d:19:10:2d:b7:90:87:c8:8c:ce:58:08:36:1c:4d:7b:c9:04:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=8B2AEB91CE537EAAB3F93B35BB4691E980A26185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:74:17:db:2c:cc:c3:0d:68:34:e7:7f:87:
                    ce:33:c7:d4:7b:0d:e3:1b:79:0b:5e:b7:0b:af:1a:
                    39:b1:63:dd:aa:3f:e4:03:99:4c:7b:86:e1:86:f4:
                    f7:be:7c:3e:58:b3:8b:a7:d6:d9:1e:af:28:28:8e:
                    19:77:95:5b:1c:6b:87:54:88:01:9c:f7:5c:59:f6:
                    45:5e:f5:53:62:45:a1:50:30:13:5d:ba:e6:d1:bb:
                    c0:95:91:4a:2b:24:52:e2:69:59:9e:24:94:38:92:
                    0f:78:e3:2c:66:d1:c7:44:f7:bc:99:98:79:97:43:
                    ff:d3:d6:39:a9:94:6f:a0:86:11:6b:7e:2c:e3:f7:
                    78:d3:53:67:eb:2e:d9:04:19:a0:df:60:23:89:83:
                    f7:03:12:07:d9:7c:45:40:c6:81:14:26:c4:8e:c4:
                    7a:c6:f9:f1:a8:73:47:ae:00:8b:e3:54:45:93:81:
                    c5:8d:96:b2:3f:11:48:f2:49:aa:6e:dc:d1:ea:b5:
                    83:35:73:12:63:88:08:67:c5:c7:39:5e:87:7c:1a:
                    79:09:8d:fc:92:2c:bf:6c:08:52:8d:1b:e5:6f:a9:
                    ab:fa:dd:20:cb:c3:b9:99:a8:55:08:2f:ee:4e:80:
                    7e:8c:48:99:3e:20:5a:5e:02:7f:6e:00:8b:bd:4b:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2A:EB:91:CE:53:7E:AA:B3:F9:3B:35:BB:46:91:E9:80:A2:61:85
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:62:58:93:1b:2f:c7:82:eb:a6:85:3e:e3:ec:ee:55:ab:
         30:a7:ac:11:b7:a7:f9:6f:8a:be:ce:69:9e:d2:18:96:9b:fd:
         95:84:2a:63:99:f4:de:5e:9d:18:c6:d1:8b:f7:84:f1:50:22:
         c1:ff:9d:75:75:a7:0b:10:f4:e8:a4:15:d8:fe:2d:4a:d1:09:
         31:b7:44:25:8a:7b:72:0e:0d:e8:74:73:e9:db:1d:5c:c2:ab:
         73:4a:dd:7e:27:f2:c4:0c:ec:cf:cf:d2:0c:e7:a7:70:eb:34:
         5c:00:d9:9a:0c:b8:b8:5b:e9:84:9b:75:5e:92:03:31:7c:77:
         e1:4c:1a:37:b1:f8:cd:81:65:ed:f5:97:6c:b0:36:5b:ca:e7:
         69:e7:80:c2:20:5d:65:09:76:40:a2:15:73:dd:ff:e2:ee:cf:
         1b:c9:f4:80:96:26:62:c8:7a:69:0c:23:3b:2a:14:1a:08:93:
         48:89:11:ce:69:05:7c:d7:c9:6e:83:73:7b:36:e1:be:ec:6e:
         b8:fe:91:41:e2:b8:00:80:8c:4f:7f:85:71:ce:5f:50:ff:7b:
         71:b0:11:01:76:04:cc:2e:d3:04:f0:df:91:9e:58:2d:c3:eb:
         6c:07:86:f1:36:31:c5:64:b9:47:10:8c:39:c2:9b:ae:87:6c:
         15:51:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org