Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          RldLO4tuzQuypiW+oxcoSaYUUr/Ufc9yyfyQDUMukWU=
Subject key identifier:   2B:87:B8:56:AC:4A:AB:17:7E:34:A8:9B:3A:FA:00:C8:3E:38:74:F6
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4A1B39C32975A591EE24DBEB451620D258C36632
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:35:56 +0000
ROA not before:           Tue 06 Aug 2024 21:30:56 +0000
ROA not after:            Tue 05 Aug 2025 21:35:56 +0000
asID:                     11921
IP address blocks:        200.194.100.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1b:39:c3:29:75:a5:91:ee:24:db:eb:45:16:20:d2:58:c3:66:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:30:56 2024 GMT
            Not After : Aug  5 21:35:56 2025 GMT
        Subject: CN=2B87B856AC4AAB177E34A89B3AFA00C83E3874F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:73:0a:ab:dd:63:b3:e8:b3:66:fd:7f:6a:
                    26:3f:b7:42:b4:9f:45:4f:73:3f:3f:d1:c0:fe:d4:
                    d9:86:95:e6:52:cd:77:d3:fa:25:a9:ca:77:27:ad:
                    46:d2:1e:af:70:cf:1a:9e:f4:55:90:5a:28:43:95:
                    4d:00:7c:2b:6b:00:c0:32:e1:15:08:e9:89:ba:34:
                    fc:44:cb:cc:7d:73:e5:b0:de:16:bc:ba:75:62:a9:
                    69:b5:9f:f0:22:40:2d:4d:9e:5b:7a:16:5f:6e:b4:
                    65:9a:64:29:e1:04:16:95:c7:00:fc:4e:47:ba:17:
                    8a:f9:93:2b:39:1e:85:e0:1d:fc:f2:9f:e5:9c:37:
                    a2:e0:c1:39:cf:d7:38:ec:ae:13:02:0b:1d:78:4a:
                    af:62:83:8a:8d:53:e0:ad:eb:e9:24:20:07:7f:e4:
                    09:15:56:e1:fe:3f:2a:a4:2d:54:62:d4:30:38:f0:
                    62:64:39:57:31:74:2c:eb:5f:4c:6d:3d:dc:4b:50:
                    2d:5b:21:f5:26:83:f6:31:65:71:7c:c7:5c:15:df:
                    51:5f:ec:23:70:4e:ed:b8:fa:81:14:21:e4:20:61:
                    c8:3a:f2:b8:55:9b:81:1e:bb:07:00:6a:7e:1a:b9:
                    c8:7c:e1:51:13:e5:34:02:63:57:fc:84:5f:26:e9:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:87:B8:56:AC:4A:AB:17:7E:34:A8:9B:3A:FA:00:C8:3E:38:74:F6
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:01:e6:72:79:b7:77:9b:fe:82:ae:9d:6b:2f:85:6a:6b:74:
         33:3e:75:1f:bb:b8:26:11:26:af:5e:41:03:91:d0:ae:dd:da:
         e2:c9:e1:ff:ca:d1:53:97:a6:8d:5b:12:ae:16:04:4e:9b:3d:
         55:57:97:8c:7c:31:04:45:40:d2:a0:e4:19:bf:cf:db:da:f0:
         8d:34:ef:4c:6d:4b:ba:ff:50:3e:5b:67:54:e9:f5:0f:79:5f:
         8a:45:a3:7b:f2:41:8c:07:5e:fa:82:fc:b6:5c:81:2e:cd:ce:
         c8:3b:d8:0a:3d:b8:a9:c2:86:6c:4d:71:26:62:72:5b:b1:1a:
         94:33:37:10:c3:f9:fb:da:f8:a2:fe:72:c1:1b:81:9a:a1:bd:
         54:14:d7:63:fb:27:6c:aa:ae:3b:2f:7c:2d:0a:02:1a:30:56:
         bc:58:11:0a:36:fc:01:7c:ac:67:83:5c:ab:10:7a:83:4d:96:
         3e:b5:ca:97:1e:b7:76:4e:ef:72:83:79:a8:31:05:7b:4a:ab:
         53:25:00:1c:49:ff:da:36:f7:da:c3:bb:eb:ff:48:53:1c:77:
         b3:91:e1:19:95:63:ce:a5:e3:c1:06:83:ed:6c:2d:15:a2:bb:
         b9:a2:13:54:9a:e5:f6:a8:96:3c:38:37:42:31:3c:fa:5e:d5:
         18:84:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:34:07 2024 by rpki-client on console-ams.rpki-client.org