Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3133382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          zAI2v88o/g0cZ1ati1CsSCoH15xgMVVzo0eRn9JGaCA=
Subject key identifier:   4F:AB:0A:5D:87:94:4C:F2:3A:F1:21:88:3D:F5:E9:17:7F:3B:63:71
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       47F0D8695704AE008741C31B302770455AFC77B0
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        200.150.138.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f0:d8:69:57:04:ae:00:87:41:c3:1b:30:27:70:45:5a:fc:77:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=4FAB0A5D87944CF23AF121883DF5E9177F3B6371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:15:3c:99:04:f8:bf:ed:8f:b5:d4:7f:60:
                    4f:62:8c:d4:9c:12:e8:46:c7:f4:08:74:e6:da:df:
                    74:85:c7:47:20:c5:f0:52:7a:6c:34:d3:84:02:0c:
                    b4:5e:46:b1:f2:48:29:88:d8:0a:42:d1:5b:95:03:
                    25:06:9f:9a:76:5a:dc:5c:74:e0:a1:71:a6:c5:bc:
                    7b:8c:4e:5d:35:11:ab:c8:09:ba:2a:9b:0a:9f:11:
                    c8:f1:17:1e:be:00:28:dd:a3:70:2f:a8:09:28:e9:
                    78:3d:c8:16:1f:da:1d:f2:c4:8d:8f:7f:25:7b:82:
                    fe:dd:e0:2e:b9:8d:95:9a:28:f9:36:ce:97:2b:ff:
                    b7:e9:b2:0d:90:fd:9d:c5:06:8c:68:be:66:b0:28:
                    2a:fa:ff:b4:e7:f4:b3:4b:98:72:ea:98:5f:03:ed:
                    7d:86:2f:8b:61:49:6a:2c:c3:96:c0:59:c9:0d:c7:
                    66:50:53:7a:56:de:d0:e0:62:74:67:3b:ce:1d:ce:
                    a0:18:a7:4e:07:6d:f3:22:62:66:e9:a8:11:0f:ed:
                    d0:89:d8:49:19:ac:15:69:25:d2:87:25:90:fe:21:
                    93:88:b8:08:d1:da:bf:36:12:9c:11:07:9f:56:7c:
                    a7:f3:c7:c2:76:a9:b2:e5:5a:da:38:fb:6f:0d:2c:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:0A:5D:87:94:4C:F2:3A:F1:21:88:3D:F5:E9:17:7F:3B:63:71
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:d8:d1:3b:52:4f:b5:3b:86:6e:59:88:d2:67:41:8d:0e:7e:
         55:49:65:43:e4:76:88:d8:79:03:51:dc:b5:0d:f4:1c:8a:3e:
         e9:9e:08:2c:c2:ec:f9:cd:a9:fe:cc:36:40:0d:08:45:53:e2:
         67:86:7c:d4:5e:ac:85:a1:57:63:a8:69:b1:c5:b9:a8:bf:83:
         2a:1a:41:95:35:35:92:1e:f9:c1:eb:52:21:f9:e4:4e:ee:c4:
         d7:1b:dc:68:b1:a0:5c:44:c8:ea:75:40:81:3f:f9:1c:e5:ef:
         87:d9:c8:ed:35:e7:19:38:3b:8a:2d:0a:1b:ce:23:f0:bf:11:
         7d:0d:f2:2c:ec:b6:23:90:66:f1:66:cb:71:03:27:99:9e:48:
         fe:a8:88:36:78:12:e4:3c:14:a5:fe:47:7d:e4:60:94:8c:fd:
         80:04:92:c2:6a:a0:50:ff:a9:da:ab:f2:4d:9b:9f:60:0e:5b:
         dd:6d:ca:13:43:d9:ba:bc:4c:ba:7f:eb:1a:68:8d:d1:a2:ef:
         3d:0c:b2:dc:f7:7a:86:a5:65:ca:f8:44:05:1b:db:d3:43:8c:
         97:d1:d2:10:6e:6e:de:c4:86:de:80:1e:bf:63:94:91:e6:5d:
         b3:f2:b1:9e:ee:c7:cd:cf:35:30:a9:e8:db:f8:6a:85:56:c2:
         b6:8f:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org