Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          jS8DPN083Vf2yKJYEV5Wt0kjBMonVttM6rGTksCrK2g=
Subject key identifier:   B7:88:C7:33:C4:F1:D4:E8:B7:2F:4D:C0:D9:C8:36:37:83:ED:AD:14
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       102F0D9828FA288FA78298C769314A64BC83EE80
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:37:13 +0000
ROA not before:           Tue 06 Aug 2024 21:32:13 +0000
ROA not after:            Tue 05 Aug 2025 21:37:13 +0000
asID:                     11921
IP address blocks:        200.194.108.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2f:0d:98:28:fa:28:8f:a7:82:98:c7:69:31:4a:64:bc:83:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:32:13 2024 GMT
            Not After : Aug  5 21:37:13 2025 GMT
        Subject: CN=B788C733C4F1D4E8B72F4DC0D9C8363783EDAD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:48:4d:b8:8b:6f:b6:8f:99:7a:c6:e6:12:
                    c9:e1:6c:7b:a7:7d:49:78:d8:b8:25:24:d9:99:77:
                    40:99:9c:12:63:a9:9f:12:51:f3:a6:5b:be:28:22:
                    79:ad:0a:2b:3a:2d:09:6e:59:1a:e2:df:1e:dc:d7:
                    40:d0:f2:70:46:bb:2e:ea:9d:15:9d:b3:b9:dc:72:
                    d4:37:23:49:9f:83:d1:18:00:df:39:34:a9:cc:7f:
                    69:b0:d6:d4:c2:81:20:63:ac:67:06:f1:63:62:28:
                    82:a2:a8:42:62:33:d6:ce:76:52:62:28:bd:95:e4:
                    c0:d7:f8:76:ef:12:fa:96:70:4c:49:76:0b:43:23:
                    4b:f7:e1:d0:21:57:c5:19:9e:30:02:bb:91:61:1e:
                    1e:75:b6:02:84:3b:78:aa:f1:ab:38:1b:f2:6a:97:
                    4e:2a:d8:c5:08:3f:72:01:d3:63:7f:47:e0:aa:72:
                    c1:25:5a:bc:36:b2:2e:b0:3f:81:94:73:25:3b:40:
                    22:23:f4:6f:dd:d2:56:4f:fc:11:6f:c6:54:61:e0:
                    9d:b5:71:60:8c:a0:c1:28:57:4f:59:1c:98:43:10:
                    52:96:06:c7:ac:69:e1:a7:c3:c5:86:5d:a8:0a:7e:
                    bd:a1:2b:ec:02:40:bd:3b:69:69:61:96:21:e8:23:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:C7:33:C4:F1:D4:E8:B7:2F:4D:C0:D9:C8:36:37:83:ED:AD:14
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:f1:92:ab:fd:6d:b2:bc:14:6c:5f:8e:3a:4e:04:d3:2b:2f:
         4b:05:d7:ed:63:c0:be:5f:b9:39:01:8d:31:48:25:31:63:71:
         44:71:96:ad:8a:89:31:95:46:39:87:d3:07:f5:ea:22:c5:4f:
         11:7a:37:f1:94:5f:13:98:4a:d9:bc:6d:bd:3c:50:ba:36:78:
         0c:d7:1e:0d:45:1c:dd:6a:6d:c8:ba:f1:36:b1:2e:3d:fc:c2:
         35:41:d4:c9:5d:0e:5f:db:cf:41:30:e2:33:80:3a:2e:93:27:
         e7:03:35:e1:ed:98:00:83:98:93:36:d9:12:fc:ff:3b:e3:f7:
         87:b5:ed:2f:7b:5b:d8:5b:6d:77:fa:b1:fd:a6:2a:9d:b6:81:
         e5:22:9e:25:1f:93:82:51:00:d5:39:ff:32:c2:41:cb:3e:f8:
         b3:52:4e:29:3f:bc:65:c2:9f:1d:b6:7a:dc:a4:c5:6c:1a:2c:
         43:a8:e0:73:37:6d:a6:82:f0:28:3d:37:8f:ba:72:d4:74:04:
         b8:28:d8:63:a1:d5:dc:e4:84:f0:04:34:28:ec:4b:c3:1f:6b:
         6d:c8:cc:e4:43:0f:5f:95:16:95:19:f7:d3:35:1c:85:75:63:
         5d:8a:ee:ce:fb:04:68:7a:30:77:61:4a:6f:f5:2b:c4:33:ba:
         7a:a6:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org