Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          BL/tl1UXpdsCFPuweyxfzJBPUVU5pgxWnnEilwqdMXo=
Subject key identifier:   1E:D3:35:A9:D1:24:10:85:7E:0D:6F:CB:72:77:CA:38:44:CB:C8:8B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7E7E795C68D30C672E28FB0A2D7C928B7C0230E6
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:37:02 +0000
ROA not before:           Tue 06 Aug 2024 21:32:02 +0000
ROA not after:            Tue 05 Aug 2025 21:37:02 +0000
asID:                     11921
IP address blocks:        200.194.104.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7e:79:5c:68:d3:0c:67:2e:28:fb:0a:2d:7c:92:8b:7c:02:30:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:32:02 2024 GMT
            Not After : Aug  5 21:37:02 2025 GMT
        Subject: CN=1ED335A9D12410857E0D6FCB7277CA3844CBC88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:cf:a5:72:a2:14:12:94:c5:cf:99:62:4c:
                    25:81:97:80:b5:99:d3:cf:a0:1b:98:97:d3:49:13:
                    8e:90:94:ca:8a:b4:51:50:42:e3:02:8b:df:d1:fa:
                    86:0b:2d:18:10:a1:d6:15:ac:0f:26:f5:93:4e:6b:
                    d0:3d:ea:62:f7:7b:00:db:e6:77:36:89:4f:29:ce:
                    55:ff:1a:d1:f9:5c:13:68:5d:9c:3b:55:a8:c7:b9:
                    56:20:8b:fe:58:1a:4d:b9:fe:8e:62:bc:05:ed:31:
                    f3:dd:45:3e:59:80:07:6d:7f:f6:bd:d0:0c:0a:1b:
                    b3:4a:10:46:3e:4b:cb:b1:fc:da:df:5b:4a:c2:03:
                    62:62:94:a1:7b:ac:59:4e:4b:5c:63:a5:27:ea:8c:
                    ea:ea:be:3b:a4:28:09:3f:55:b4:a1:25:7a:41:95:
                    f4:85:40:34:bc:5c:49:2b:7e:41:0c:ba:2f:b3:33:
                    48:b7:d0:d9:17:89:df:b1:49:98:69:65:90:31:ab:
                    5e:32:4e:e4:4f:21:30:c0:db:09:8e:8e:1b:d1:26:
                    21:50:76:fe:73:f1:10:44:33:68:30:4a:f0:3c:41:
                    fb:0a:2f:ea:64:2c:1e:2b:3e:06:83:1f:c1:3f:84:
                    4a:88:e4:54:5d:15:e5:59:24:b2:99:a4:cc:91:47:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D3:35:A9:D1:24:10:85:7E:0D:6F:CB:72:77:CA:38:44:CB:C8:8B
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:50:9f:02:25:a8:e5:34:7b:2d:f8:85:12:13:80:f1:7f:01:
         2f:ff:7b:fe:62:81:bb:f5:84:a1:dd:8f:74:35:04:b2:5e:5a:
         9d:93:c7:be:1c:33:f2:9c:5d:2c:c6:6b:e3:d2:ea:74:91:eb:
         2d:d6:f6:d7:fa:f2:8a:26:23:7e:39:aa:ba:2e:24:32:04:8c:
         26:1c:30:e8:46:3e:f2:45:f4:fb:63:5a:f0:af:76:f8:2d:fc:
         d7:bc:5e:cb:e0:ae:b4:f9:a5:94:a8:f3:97:92:3c:a5:3a:15:
         c9:ff:af:46:9a:3e:c2:90:b1:ba:54:39:ba:8f:6f:19:81:dd:
         f5:d5:72:42:7f:39:eb:0d:7b:8a:3e:69:ff:47:3a:71:aa:02:
         45:f2:75:94:aa:c4:88:c3:13:02:cc:93:5c:f7:99:07:8a:12:
         7f:5e:f1:ae:83:8a:b8:f7:cd:b2:36:37:12:4c:13:66:a2:b6:
         fd:a4:a2:db:fb:f8:da:dd:64:7d:a3:30:21:86:9f:51:5a:12:
         3e:52:a8:20:f8:31:8e:9d:00:dd:3b:f2:56:af:a9:f2:cb:f4:
         63:c4:0d:a3:7f:5a:37:b4:a0:9c:c2:b5:dd:8c:91:37:ef:0a:
         45:ad:2f:e1:59:f9:ad:54:7d:ec:ac:55:ea:5e:99:97:74:f9:
         4d:4c:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org