Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134302e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3134302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          2cOWI2W6UO2y8GgJ5Prae6PhBNoGl+lTDcYwlhRQ/uw=
Subject key identifier:   07:99:36:FC:A8:66:1E:5B:3E:FB:43:86:A4:07:2C:EF:97:95:9B:92
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       63A2C78DCC15BB0552E6E8E33CDCF078445EDF27
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        200.150.140.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a2:c7:8d:cc:15:bb:05:52:e6:e8:e3:3c:dc:f0:78:44:5e:df:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=079936FCA8661E5B3EFB4386A4072CEF97959B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:ab:1a:b4:4c:08:54:2b:81:ab:ff:10:c2:
                    64:71:9c:28:8b:80:87:24:08:d7:b2:dc:ff:16:4c:
                    c5:e6:02:24:14:fb:7f:f9:06:30:f6:31:2d:1f:c1:
                    39:47:ee:de:b8:4a:60:a5:9e:61:f8:9d:92:0d:b0:
                    67:fc:18:7a:6e:37:51:73:40:ba:cd:ec:5e:ff:8d:
                    2d:12:61:e4:30:c5:20:06:82:17:13:f2:25:cc:1e:
                    ed:64:94:3d:4d:16:40:a3:8e:ae:a9:f1:56:db:a8:
                    44:05:ac:b1:d5:bb:ac:a7:f7:e0:a4:02:f7:a3:27:
                    71:b5:cb:b8:37:12:bc:5a:4a:d8:60:2c:d3:db:11:
                    45:67:b1:fb:7f:91:dc:ec:5e:a3:81:b7:6c:f4:42:
                    41:97:29:8e:6e:89:e2:b2:96:6d:2f:16:70:f1:d2:
                    b4:4a:1a:a6:a9:1e:d8:23:22:8c:f4:4e:20:f5:a8:
                    9d:6e:44:31:8f:2e:a3:e6:21:6e:2f:37:5e:e2:6f:
                    39:f7:5c:1d:09:5b:0e:92:35:77:04:62:cc:04:26:
                    5e:14:78:37:c7:7e:6a:4b:2b:79:f1:cb:dd:b0:1e:
                    3e:88:5b:80:59:b6:ad:8c:23:1a:fa:a8:53:d5:d4:
                    0e:93:6c:a3:c6:cf:3c:c2:38:bf:ee:13:65:3d:7e:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:99:36:FC:A8:66:1E:5B:3E:FB:43:86:A4:07:2C:EF:97:95:9B:92
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:ae:8b:4b:10:48:6d:6c:ba:5f:66:59:63:54:88:0c:65:
         89:a4:02:17:9b:f3:bc:1a:8a:cd:a6:34:30:c9:c1:1a:01:07:
         b3:50:4b:28:c0:cd:4b:dc:82:bf:e1:89:a7:0e:5d:43:9d:57:
         86:e8:04:76:67:ab:57:2d:33:3a:02:6f:74:c2:5f:4e:6f:94:
         a9:0e:cf:57:55:aa:db:53:c2:be:9a:b3:b9:fc:b4:8f:01:21:
         12:fc:1f:f9:08:ac:65:5a:b9:bd:6a:80:53:39:a7:c6:28:e2:
         a0:0c:fe:36:05:b0:0e:82:d0:a0:13:b7:63:a2:d4:37:1e:f7:
         a9:e1:65:b4:c7:c1:07:91:d0:9b:f1:f4:b2:19:95:ec:bc:cf:
         41:fc:8e:64:cf:1e:90:ec:35:00:ac:d2:f6:66:62:d6:49:33:
         51:e0:ea:91:31:bb:ff:3d:82:57:d7:23:79:a0:a0:38:2c:7e:
         c7:14:fa:7b:bd:7d:93:bc:cf:d2:c2:3a:65:41:86:54:c0:0c:
         9e:2a:c6:72:e8:48:d1:e9:99:93:b2:1a:bf:c5:68:e2:59:f6:
         82:d9:a0:49:35:fd:fd:cc:ef:88:9e:fa:6d:a0:d5:20:46:e9:
         e5:c2:a6:78:e0:71:ae:ec:ce:c7:c5:b7:80:34:9b:f3:10:a9:
         d8:ec:6e:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY6LHjcwVuwVS5ujjPNzweERe3ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDJaFw0yNTA0MDMyMzIxNDJaMDMxMTAvBgNV
BAMTKDA3OTkzNkZDQTg2NjFFNUIzRUZCNDM4NkE0MDcyQ0VGOTc5NTlCOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LKsatEwIVCuBq/8QwmRxnCiL
gIckCNey3P8WTMXmAiQU+3/5BjD2MS0fwTlH7t64SmClnmH4nZINsGf8GHpuN1Fz
QLrN7F7/jS0SYeQwxSAGghcT8iXMHu1klD1NFkCjjq6p8VbbqEQFrLHVu6yn9+Ck
AvejJ3G1y7g3ErxaSthgLNPbEUVnsft/kdzsXqOBt2z0QkGXKY5uieKylm0vFnDx
0rRKGqapHtgjIoz0TiD1qJ1uRDGPLqPmIW4vN17ibzn3XB0JWw6SNXcEYswEJl4U
eDfHfmpLK3nxy92wHj6IW4BZtq2MIxr6qFPV1A6TbKPGzzzCOL/uE2U9fvxvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUB5k2/KhmHls++0OGpAcs75eVm5IwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMTM1MzAyZTMxMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIlowwDQYJKoZIhvcNAQELBQADggEBAIlvrotL
EEhtbLpfZlljVIgMZYmkAheb87wais2mNDDJwRoBB7NQSyjAzUvcgr/hiacOXUOd
V4boBHZnq1ctMzoCb3TCX05vlKkOz1dVqttTwr6as7n8tI8BIRL8H/kIrGVaub1q
gFM5p8Yo4qAM/jYFsA6C0KATt2Oi1Dce96nhZbTHwQeR0Jvx9LIZley8z0H8jmTP
HpDsNQCs0vZmYtZJM1Hg6pExu/89glfXI3mgoDgsfscU+nu9fZO8z9LCOmVBhlTA
DJ4qxnLoSNHpmZOyGr/FaOJZ9oLZoEk1/f3M74ie+m2g1SBG6eXCpnjgca7szsfF
t4A0m/MQqdjsbp0=
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org