Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          87AFR/GyETsPJKLSf/YpdcAYmZCwzZsZ1r9qUy7LtyQ=
Subject key identifier:   89:A3:1A:2A:28:0E:1A:52:31:0F:C5:C7:1B:36:3C:68:09:1E:9C:3B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       09B55E048F438FB122F6150A98EB8A29EDFC5142
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:41 +0000
ROA not before:           Thu 04 Apr 2024 23:16:41 +0000
ROA not after:            Thu 03 Apr 2025 23:21:41 +0000
asID:                     11921
IP address blocks:        200.150.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:5e:04:8f:43:8f:b1:22:f6:15:0a:98:eb:8a:29:ed:fc:51:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:41 2024 GMT
            Not After : Apr  3 23:21:41 2025 GMT
        Subject: CN=89A31A2A280E1A52310FC5C71B363C68091E9C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:17:be:b8:d5:71:8d:67:b3:f5:9c:58:a3:eb:
                    b0:0c:48:5d:e0:c3:5b:c2:6e:18:f0:cf:77:e6:86:
                    3a:87:b0:dc:08:e5:51:ac:d1:db:45:6d:9c:cd:35:
                    d3:47:cf:62:c3:a1:f5:18:f5:28:2a:d4:82:c7:5f:
                    4d:c3:1f:f6:40:31:f2:5d:5f:7e:88:75:a0:f4:53:
                    48:c4:e9:a6:ae:60:43:b3:78:50:e8:27:41:eb:14:
                    1d:9e:3a:97:f9:a0:d8:e9:69:32:aa:c6:3f:c8:25:
                    bb:8a:c5:2b:61:ef:ce:b0:e3:3c:e8:f4:f0:3f:d2:
                    65:34:b1:c2:3a:f5:00:02:13:ab:31:de:70:21:67:
                    67:8a:ff:49:f5:32:35:36:0c:3a:f2:a8:ad:2b:9c:
                    54:4e:7d:32:56:7e:35:a1:51:53:a2:ac:06:a0:f1:
                    25:de:69:58:8d:0d:0c:2c:ec:00:f1:58:cc:61:85:
                    7e:9b:6f:d1:d2:fc:20:1f:e7:10:11:7a:a8:88:47:
                    80:7a:8f:62:a8:7e:0e:8a:80:e3:de:ac:d5:84:fc:
                    c9:02:6e:a3:b5:15:55:e4:3d:a1:4f:63:d9:d0:af:
                    14:81:55:aa:62:3c:ec:95:53:8e:dc:03:01:7e:29:
                    d5:4e:3a:79:4a:d9:29:36:f0:a8:e4:44:fb:c9:7e:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A3:1A:2A:28:0E:1A:52:31:0F:C5:C7:1B:36:3C:68:09:1E:9C:3B
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:84:fb:4e:11:88:a6:a9:e4:0a:f0:4d:ee:1a:e2:b5:a2:60:
         37:e8:78:38:8a:bf:9e:1a:70:6e:aa:cc:dc:ad:92:f2:76:e5:
         b8:40:bf:6b:f7:4f:cb:46:67:2f:ba:11:2a:66:4d:1c:00:c4:
         60:8d:a5:68:de:2a:21:92:ad:a9:0f:b6:01:ee:9c:66:5a:52:
         e5:6a:67:22:9c:68:38:93:f3:98:f5:4f:8c:c2:11:2e:a1:d0:
         de:71:b6:00:e1:31:7a:5e:16:c9:3c:37:7d:27:7f:35:09:9c:
         f0:ef:6b:06:aa:c1:59:63:fe:70:6c:b9:e4:6b:3e:0d:99:b2:
         d3:56:db:74:b0:04:5d:74:04:60:89:cf:05:1d:dc:a3:d7:8d:
         38:00:6b:ef:98:e5:1a:36:35:e1:6f:57:c2:ce:51:3d:04:d1:
         b9:3e:77:f4:5a:a4:03:a4:9c:85:26:3d:24:b5:d4:25:33:8b:
         a1:67:4e:67:4d:ba:73:64:ad:c8:06:de:5b:e8:7c:52:54:98:
         7d:e6:a2:82:47:31:23:47:07:fb:c8:02:15:dc:16:32:a3:b1:
         91:42:75:78:0a:fc:8d:49:35:a0:0a:7e:52:05:0d:e4:b9:45:
         5f:1d:f6:47:78:4a:93:de:00:5e:f7:97:5f:59:f1:55:2e:fc:
         bd:b7:55:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCbVeBI9Dj7Ei9hUKmOuKKe38UUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDFaFw0yNTA0MDMyMzIxNDFaMDMxMTAvBgNV
BAMTKDg5QTMxQTJBMjgwRTFBNTIzMTBGQzVDNzFCMzYzQzY4MDkxRTlDM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmF7641XGNZ7P1nFij67AMSF3g
w1vCbhjwz3fmhjqHsNwI5VGs0dtFbZzNNdNHz2LDofUY9Sgq1ILHX03DH/ZAMfJd
X36IdaD0U0jE6aauYEOzeFDoJ0HrFB2eOpf5oNjpaTKqxj/IJbuKxSth786w4zzo
9PA/0mU0scI69QACE6sx3nAhZ2eK/0n1MjU2DDryqK0rnFROfTJWfjWhUVOirAag
8SXeaViNDQws7ADxWMxhhX6bb9HS/CAf5xAReqiIR4B6j2Kofg6KgOPerNWE/MkC
bqO1FVXkPaFPY9nQrxSBVapiPOyVU47cAwF+KdVOOnlK2Sk28KjkRPvJfmSrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiaMaKigOGlIxD8XHGzY8aAkenDswHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMTM1MzAyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIloswDQYJKoZIhvcNAQELBQADggEBACmE+04R
iKap5ArwTe4a4rWiYDfoeDiKv54acG6qzNytkvJ25bhAv2v3T8tGZy+6ESpmTRwA
xGCNpWjeKiGSrakPtgHunGZaUuVqZyKcaDiT85j1T4zCES6h0N5xtgDhMXpeFsk8
N30nfzUJnPDvawaqwVlj/nBsueRrPg2ZstNW23SwBF10BGCJzwUd3KPXjTgAa++Y
5Ro2NeFvV8LOUT0E0bk+d/RapAOknIUmPSS11CUzi6FnTmdNunNkrcgG3lvofFJU
mH3mooJHMSNHB/vIAhXcFjKjsZFCdXgK/I1JNaAKflIFDeS5RV8d9kd4SpPeAF73
l19Z8VUu/L23VR4=
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org