Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa
File:                     3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          6kGtjs+yQz4h84fyYDDmsgtlIocBlcx7DkahmnkQvLg=
Subject key identifier:   FE:20:AB:E2:86:A2:A9:2D:72:81:C9:2D:91:01:B2:25:01:F0:A5:EF
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7A1AA82DB7C296B9EC6D9C160FAF4E923EA518B5
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:34:56 +0000
ROA not before:           Tue 06 Aug 2024 21:29:56 +0000
ROA not after:            Tue 05 Aug 2025 21:34:56 +0000
asID:                     11921
IP address blocks:        200.150.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1a:a8:2d:b7:c2:96:b9:ec:6d:9c:16:0f:af:4e:92:3e:a5:18:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:29:56 2024 GMT
            Not After : Aug  5 21:34:56 2025 GMT
        Subject: CN=FE20ABE286A2A92D7281C92D9101B22501F0A5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:4b:21:73:d2:0d:cd:65:b5:77:3c:be:29:
                    d3:c3:24:54:6c:93:a7:4c:24:33:e9:67:31:80:1a:
                    3c:45:81:65:96:29:b6:66:46:3e:f0:6e:3b:fa:85:
                    a7:5c:2d:95:49:c6:04:cc:e4:4e:ce:9b:9a:83:b1:
                    2f:f2:7f:0a:4d:26:88:56:43:55:53:1a:26:bd:2c:
                    71:a4:03:68:62:c6:be:61:5b:a0:e8:15:e7:1f:c4:
                    fb:4f:bd:93:93:f2:00:4c:42:13:ab:dd:90:6f:6d:
                    14:7a:4c:9b:03:93:e5:ae:5a:af:7a:4d:88:0b:1c:
                    fb:17:ed:12:50:05:2b:91:52:fa:97:f6:7d:7a:05:
                    5f:4b:cd:b9:fe:9b:bc:2c:33:d7:b5:d9:ed:d1:15:
                    6c:e1:21:5c:21:89:e9:5e:f1:54:6a:e4:de:a1:f6:
                    f5:4f:5a:0d:28:26:97:25:44:80:27:28:ba:6f:46:
                    57:5d:60:0c:ca:d5:5f:ef:b6:6a:1a:67:a7:a0:4c:
                    24:93:af:1d:fc:13:fc:d8:ee:5c:48:f6:87:c7:15:
                    f7:7d:c7:c2:3d:bc:03:54:1c:51:bc:96:1a:95:7e:
                    46:8e:7f:23:0c:7b:e8:94:e9:70:e2:ab:2d:7d:1c:
                    55:e6:a4:d8:0d:1b:cc:50:77:1e:7d:38:25:ba:d2:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:AB:E2:86:A2:A9:2D:72:81:C9:2D:91:01:B2:25:01:F0:A5:EF
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:7d:e9:e2:90:74:7e:6a:0b:50:84:57:54:0d:84:52:d7:
         90:3c:ee:95:dc:63:66:9e:bb:59:30:0e:c7:9c:a8:27:1e:7c:
         a9:9b:99:a3:92:a0:e1:5d:ed:a5:d5:59:00:9c:93:62:a4:98:
         30:ec:9a:51:93:b6:54:09:ca:cf:f9:f7:32:97:dc:ca:69:eb:
         c2:8c:65:51:8f:af:c0:1f:cd:49:2b:cc:1f:68:8c:68:e5:42:
         0e:e7:ce:7e:70:22:f4:b2:9f:8d:59:c2:99:14:d8:dc:70:97:
         77:ae:cf:d7:68:46:d4:30:5d:43:85:93:a3:90:f7:20:51:df:
         42:f8:3b:e5:9a:e9:b5:6a:ec:d3:cf:0d:8b:c4:6e:24:53:cb:
         0a:e6:97:43:f5:94:34:6f:0a:c6:98:43:f3:95:a6:07:64:97:
         67:64:e3:4d:cf:70:18:7b:78:86:76:b7:14:80:5f:d5:a6:fc:
         74:23:39:15:fb:b4:e6:ba:87:9c:95:e0:88:dd:a3:45:4b:fd:
         ed:ec:71:60:14:e3:d6:eb:bb:4c:7c:ee:44:31:56:5b:a9:38:
         1d:2c:b4:2e:55:d4:1d:be:ac:01:54:b0:29:6b:99:1e:70:5f:
         65:79:11:bb:6f:b7:28:56:e4:88:04:b5:4a:ca:de:1d:c3:e0:
         ee:11:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:34:07 2024 by rpki-client on console-ams.rpki-client.org