Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          RfaFTZwyQOHAmjuBl5rLXz+8+fIdkM5y9T39umjbDcs=
Subject key identifier:   C1:BC:82:E6:68:7F:C0:51:95:FC:C9:0B:10:E0:C8:B0:6C:CA:43:21
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       2133961E14A96C3CB3267FFEC85B62472B0E211E
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        200.150.142.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:33:96:1e:14:a9:6c:3c:b3:26:7f:fe:c8:5b:62:47:2b:0e:21:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=C1BC82E6687FC05195FCC90B10E0C8B06CCA4321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:1c:fb:88:40:a5:02:c0:b4:44:a1:fc:a0:
                    69:d3:db:0b:f7:34:8c:18:1e:aa:96:a1:1c:a0:8d:
                    10:ce:d1:69:c6:5f:ae:59:12:19:22:2e:07:3b:6a:
                    77:9a:37:f2:9f:91:a6:02:74:4f:8d:25:97:25:af:
                    e5:2f:a9:63:29:97:29:57:58:8e:df:8a:e3:cb:df:
                    45:6d:4f:80:ca:98:24:44:0f:1d:9d:d4:0b:e1:1b:
                    17:01:e2:37:73:00:09:6e:42:ae:4f:ec:d2:67:a6:
                    60:ea:63:18:57:d5:5f:13:b2:95:ff:96:e0:59:22:
                    91:b5:82:dc:23:b7:00:12:65:a7:d5:f1:4b:8b:03:
                    f4:4e:9e:2b:6b:08:c4:47:70:9e:5d:36:c7:55:22:
                    62:04:42:40:b1:fd:74:1e:ff:6a:89:8d:88:f7:c9:
                    83:78:63:fb:a0:2e:3c:ca:9f:89:3e:b4:bc:18:e7:
                    8d:8c:80:1c:b1:fb:43:bc:ac:77:17:54:ea:94:a5:
                    c2:fa:7f:9d:d0:70:b3:1b:a7:ab:90:a7:ca:b8:1d:
                    a2:42:eb:6e:ea:b8:ea:96:f3:40:6d:f3:ed:8d:05:
                    d1:f0:ee:4b:e6:f3:57:07:46:c8:1b:79:60:57:a9:
                    8c:b4:38:fb:19:f1:8d:38:71:36:ca:a4:c5:a6:f3:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BC:82:E6:68:7F:C0:51:95:FC:C9:0B:10:E0:C8:B0:6C:CA:43:21
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:58:2b:c0:91:48:91:64:e6:24:5a:9a:00:84:be:27:6a:18:
         b8:49:58:6f:39:54:4f:cc:4d:bd:c8:51:ab:c2:80:9d:00:ac:
         5f:a9:16:dc:e4:56:00:94:73:fa:61:44:60:6a:03:d3:5a:87:
         66:59:39:3a:8a:bd:f5:86:a9:2c:65:52:af:3e:d3:df:21:b6:
         d3:61:dc:c7:a5:29:8c:2f:d5:9a:5f:95:a2:1e:8b:7f:13:8a:
         62:bc:28:a8:31:0f:78:85:5d:90:1c:3a:b1:24:ec:ad:89:98:
         b0:28:16:48:de:c0:aa:bb:5e:be:fc:97:6d:e1:93:ed:7b:6b:
         37:84:c5:c7:71:7e:07:e2:89:b6:1a:48:47:d2:ca:4b:c4:ba:
         be:62:bb:e1:91:6e:59:c8:12:e3:58:5e:38:76:1c:56:8c:a8:
         17:c1:a6:14:05:94:68:91:0a:68:b4:16:cf:57:55:20:51:37:
         81:65:a1:5b:c1:96:a9:f7:ee:f3:20:d4:92:69:3f:b4:10:78:
         75:18:6c:67:e7:08:d1:5e:8c:2e:d6:36:7c:40:bd:35:07:f7:
         6d:57:5f:99:f3:1f:25:a1:b3:1c:61:e7:3d:63:c4:b2:7f:4e:
         d1:0f:ce:e7:90:9d:9c:de:40:d5:6e:f2:9c:17:a2:47:2d:ef:
         8b:02:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org