Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130362e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3130362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          RsJ0zSYcicPRWrJLcUq94ISacxRk7rf3KImZnMivqz0=
Subject key identifier:   8A:BD:27:4D:42:A3:59:CA:50:14:AB:DE:A2:CA:7F:34:27:25:A7:46
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       38B7428D79C23F76C1FFC32E8B202EDC6C2D60A0
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130362e302f32332d3233203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:37:10 +0000
ROA not before:           Tue 06 Aug 2024 21:32:10 +0000
ROA not after:            Tue 05 Aug 2025 21:37:10 +0000
asID:                     11921
IP address blocks:        200.194.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b7:42:8d:79:c2:3f:76:c1:ff:c3:2e:8b:20:2e:dc:6c:2d:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:32:10 2024 GMT
            Not After : Aug  5 21:37:10 2025 GMT
        Subject: CN=8ABD274D42A359CA5014ABDEA2CA7F342725A746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:e5:61:ee:06:25:f6:c0:22:f8:33:8f:ed:
                    54:bc:98:5c:c5:42:16:cc:c9:2c:8b:0f:39:d8:b5:
                    c9:67:3a:a1:c4:89:1c:12:f5:11:b5:65:68:e9:1f:
                    90:34:68:e0:e2:9c:d2:6d:a0:33:5a:7c:01:97:62:
                    05:80:77:07:a3:9b:2c:65:1f:b3:54:38:4e:a1:53:
                    6b:cc:4c:6a:90:89:13:22:e7:89:3c:92:d4:f5:7f:
                    71:9f:3f:96:08:de:fb:f8:ed:e4:8a:90:19:12:37:
                    fd:0f:dc:3f:69:7c:24:c6:1d:1a:3f:1a:e4:c1:8f:
                    90:c3:77:41:23:d2:53:e7:b8:ea:84:b8:69:8d:30:
                    51:c6:f1:4d:be:0b:76:9d:db:ad:bd:e7:57:78:27:
                    5c:2a:e2:47:aa:41:ac:a2:1b:4f:df:2d:44:48:a0:
                    3d:4a:13:57:56:24:ae:e1:92:97:ca:45:cd:1d:33:
                    e8:e0:cc:44:45:65:26:3d:81:05:00:45:b7:6a:61:
                    93:a4:fc:1d:23:e8:d1:d2:f3:5d:13:15:01:40:0d:
                    cd:90:c0:fb:1f:8f:c1:70:a5:de:12:88:b4:bc:56:
                    bb:78:33:c2:e3:5a:8b:16:b4:ad:57:16:6c:4e:0f:
                    b3:c1:ee:00:48:00:ce:84:bf:09:9d:6a:a3:57:66:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BD:27:4D:42:A3:59:CA:50:14:AB:DE:A2:CA:7F:34:27:25:A7:46
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:03:b4:3c:79:39:10:06:0f:b7:26:7e:1c:5f:df:a7:0b:
         89:81:93:6e:77:f1:e2:b2:59:d3:87:94:47:1d:b5:ad:51:c3:
         f6:3f:74:e7:a8:d6:a8:74:02:f0:46:d9:ac:b0:1e:02:5b:7f:
         96:22:f4:d8:b8:f1:85:5c:a4:18:1a:21:ba:2a:d9:de:47:cf:
         eb:11:47:44:da:7c:81:2d:a9:a4:8c:62:30:f3:c8:e8:6f:10:
         2b:82:cb:15:c0:1f:3b:1f:a3:2d:0e:88:dc:f6:a7:ea:1b:3b:
         f3:41:ee:8c:09:87:3e:f2:52:83:56:be:ba:51:ad:79:41:53:
         7b:a3:8e:eb:99:b6:cb:7d:cc:bd:f3:94:b1:08:59:d1:74:d7:
         6a:d7:9b:10:d0:11:2e:6f:de:31:b1:5a:0d:47:b9:c1:20:fe:
         70:0a:b9:e1:7d:80:b4:4e:bb:f1:90:a9:33:1a:fa:67:79:1e:
         77:c3:65:60:bc:57:ac:fd:b8:e3:3a:1b:0c:26:67:07:d4:76:
         07:79:e1:0e:01:06:3c:ab:2c:3c:58:0e:90:e3:4b:03:80:2d:
         30:af:ef:a0:ce:6e:84:01:c5:43:f4:ef:9f:71:21:2e:d9:31:
         85:ab:80:55:ed:2b:47:ef:ea:8e:a3:f6:38:7b:85:15:17:1a:
         24:3d:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org