Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3131302e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3131302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          yTyhblsNZRI4mPGraRkJkjAUih5VRUSimkOmr/8Mprg=
Subject key identifier:   25:31:11:E1:96:8C:52:AC:F0:E1:9C:88:F3:29:29:34:06:B2:0E:0D
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7F5AF66CF62BF9E0A6D7338A1611CE8CC6CCA221
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3131302e302f32332d3233203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:37:15 +0000
ROA not before:           Tue 06 Aug 2024 21:32:15 +0000
ROA not after:            Tue 05 Aug 2025 21:37:15 +0000
asID:                     11921
IP address blocks:        200.194.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5a:f6:6c:f6:2b:f9:e0:a6:d7:33:8a:16:11:ce:8c:c6:cc:a2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:32:15 2024 GMT
            Not After : Aug  5 21:37:15 2025 GMT
        Subject: CN=253111E1968C52ACF0E19C88F329293406B20E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:33:6b:45:00:6c:f8:0c:58:c7:82:21:0f:
                    a9:64:21:9d:36:bf:9d:d4:82:cb:35:32:8b:42:f3:
                    5b:c4:0d:1d:4a:21:4c:19:2b:34:b9:70:bf:18:59:
                    51:02:75:25:4a:e2:7c:6a:24:d3:58:a6:df:94:f6:
                    e3:70:ae:e2:61:21:29:ca:27:47:9f:c8:6d:62:b9:
                    9e:58:c5:cd:49:f6:a1:08:dc:65:49:26:a9:ba:56:
                    ac:fa:82:c7:56:78:4a:59:a1:2c:e8:18:86:db:78:
                    63:95:c1:ec:1e:8b:5a:45:29:20:ae:58:18:4f:95:
                    f5:3c:00:f2:fa:73:99:f3:d0:f5:4d:d6:97:80:87:
                    fb:bd:00:58:04:e8:02:6a:3e:ba:57:77:a6:2a:63:
                    87:98:cb:cd:b2:91:53:03:47:3e:48:1b:e8:c8:ac:
                    0c:d8:fb:57:cf:eb:61:55:5b:f4:97:87:f1:0f:78:
                    83:d6:1b:4d:ae:46:07:cc:82:19:56:57:30:7f:2c:
                    91:a7:ee:8f:1c:a2:db:fa:89:c1:42:fd:32:45:ae:
                    08:53:46:58:e9:72:1f:f5:4f:b0:8c:93:38:22:c2:
                    a8:25:2b:b5:31:0e:95:4f:d5:47:c5:16:d8:af:3c:
                    7b:d4:fe:b3:e2:5b:e9:09:b3:48:cb:40:84:9d:98:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:11:E1:96:8C:52:AC:F0:E1:9C:88:F3:29:29:34:06:B2:0E:0D
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3131302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:61:ac:2f:e5:84:97:5b:a6:78:d9:bf:66:c1:d9:a1:e1:52:
         2a:0d:a6:12:fe:9f:e1:59:8a:c4:e3:d0:23:47:5d:a6:4a:19:
         28:11:55:a8:ba:d2:a3:b0:7f:34:9b:bb:4e:81:c3:19:cd:a4:
         d6:13:4a:ca:cb:c7:17:9a:22:29:2f:bb:76:75:4f:f7:c4:eb:
         af:d3:4e:03:fb:6e:12:ef:62:91:0c:56:68:22:a3:41:4b:ff:
         a3:17:35:49:7b:bc:2b:fa:40:69:4d:ab:3a:86:b5:74:83:bc:
         e2:a8:43:ea:ed:a2:6b:b8:b9:9b:9f:37:50:f4:d6:cf:bc:82:
         0d:f4:98:55:69:cf:23:c1:07:1c:fe:d8:01:52:10:4e:36:63:
         be:62:2b:8b:52:f0:06:29:71:f5:41:c8:bf:1d:76:cb:28:4d:
         11:b9:47:7d:ae:9b:bf:ca:fa:6c:52:2c:4b:0b:27:1d:9c:bd:
         a9:b1:05:10:b2:68:dc:e4:ef:c8:69:3c:3a:c5:04:96:36:86:
         15:bd:ec:78:e5:57:f1:ae:55:e0:09:e5:fd:32:f5:97:b4:31:
         97:13:5a:2d:a5:ed:81:44:1f:45:55:53:7f:14:44:68:92:6f:
         fd:c6:c0:5e:b6:54:b0:fe:56:86:7e:8c:c3:fb:45:f6:99:2c:
         c3:88:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org