Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa
File:                     3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          b7rlQ40wQK+zSkoWF+AQmeZifmnUi7mfN29+C7EgotQ=
Subject key identifier:   66:0B:1C:2D:48:7D:A6:05:CB:62:FD:B0:A0:56:78:05:5E:05:A0:A7
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       04F5C07E9DD333EF483EF5B730BAE515E80A54F8
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:34:58 +0000
ROA not before:           Tue 06 Aug 2024 21:29:58 +0000
ROA not after:            Tue 05 Aug 2025 21:34:58 +0000
asID:                     11921
IP address blocks:        200.150.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f5:c0:7e:9d:d3:33:ef:48:3e:f5:b7:30:ba:e5:15:e8:0a:54:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:29:58 2024 GMT
            Not After : Aug  5 21:34:58 2025 GMT
        Subject: CN=660B1C2D487DA605CB62FDB0A05678055E05A0A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:7e:ad:da:a6:0b:fe:99:31:38:e2:5f:cf:
                    a2:f3:01:c7:52:2c:5c:72:98:f9:fa:8a:c6:0e:4b:
                    85:e7:4b:dd:56:9b:73:8a:b3:c9:a4:8e:e6:57:7b:
                    3b:ba:c9:e4:8f:40:46:10:aa:6d:03:05:c8:2f:38:
                    b4:cb:fe:0c:d7:13:95:69:e1:65:7f:c1:ec:6f:b5:
                    68:55:c9:e5:0a:1b:d0:18:f8:68:50:c6:d6:e6:84:
                    d5:eb:53:6d:8b:8d:64:b6:9b:2d:2f:d7:c1:56:e9:
                    87:3b:fa:61:d3:d4:1e:2f:1d:2f:5d:35:f2:19:dd:
                    90:3a:51:3a:71:02:65:63:a9:d7:48:94:d2:52:30:
                    d4:81:75:b8:42:8f:54:74:38:5f:68:87:98:b9:55:
                    0d:7b:2a:1d:38:85:42:44:17:78:9d:14:a8:3b:6a:
                    c2:69:ab:6a:9f:c3:df:53:66:bb:dd:f3:c6:82:f4:
                    fd:63:4f:4e:2f:8b:11:b4:e4:c3:09:f3:78:2a:ca:
                    67:6f:96:b3:b0:63:64:0d:d9:25:71:ea:49:b6:26:
                    41:39:ee:11:e2:85:cb:62:16:c9:69:67:97:70:00:
                    12:1e:bc:35:ac:61:0a:be:79:d0:9f:48:f0:a3:46:
                    ec:0f:71:94:0d:72:d8:2d:55:01:db:00:28:6f:8f:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:1C:2D:48:7D:A6:05:CB:62:FD:B0:A0:56:78:05:5E:05:A0:A7
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:30:1c:3a:96:c2:9c:d2:e6:14:4c:d5:c2:92:94:c0:74:e7:
         29:04:3a:bd:ff:5d:58:cf:b4:e1:05:c0:e6:c6:cc:fd:36:07:
         ca:03:bc:93:9e:12:99:23:c1:7f:5b:13:05:e2:db:64:13:29:
         10:3e:a8:70:fc:1d:27:0d:00:a4:1f:91:05:b1:e5:e6:6e:a6:
         6a:a3:88:b9:19:2e:eb:c3:c2:48:c2:ef:fc:57:25:a0:9a:25:
         13:25:26:c1:9a:c5:fb:07:21:05:48:3e:e7:c8:ad:03:cd:4a:
         a7:0d:b9:f9:89:77:67:19:96:5c:04:a6:29:9a:4d:a2:ba:c2:
         66:32:5c:35:7b:d0:08:1c:7b:51:4e:68:14:0f:d4:33:79:90:
         88:07:ab:42:5a:07:17:94:5c:13:db:ce:d6:ba:95:3d:bf:90:
         08:0e:e8:40:5c:98:dd:4a:d3:56:94:f8:7d:6f:d0:51:29:e6:
         67:79:34:47:06:f7:ce:ca:11:c6:71:02:fd:bb:3b:8f:35:36:
         58:06:7d:7d:3a:a0:32:b8:89:ef:c0:e5:52:c5:0b:e0:dc:4a:
         23:da:4a:2d:93:d3:c4:64:60:a2:5d:cd:1c:db:01:e5:64:ce:
         b7:93:c7:07:08:b4:29:99:3c:53:a6:d2:2b:74:a9:a7:1e:96:
         1d:f2:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:34:07 2024 by rpki-client on console-ams.rpki-client.org