Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32312d3231203d3e203131393231.roa
File:                     3230302e3139342e39362e302f32312d3231203d3e203131393231.roa (raw, json)
Hash identifier:          YCyiG3EF6Y7YHsJxkWyiC/ojYbekXPiWL4JujyRIZVM=
Subject key identifier:   3F:DE:B8:13:FA:50:7C:DE:86:FB:65:FB:10:6C:A5:E7:92:CC:D7:8F
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       5292A23220B70F5DC9F3B390218EF495B0CB8861
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32312d3231203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:35:24 +0000
ROA not before:           Tue 06 Aug 2024 21:30:24 +0000
ROA not after:            Tue 05 Aug 2025 21:35:24 +0000
asID:                     11921
IP address blocks:        200.194.96.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:92:a2:32:20:b7:0f:5d:c9:f3:b3:90:21:8e:f4:95:b0:cb:88:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:30:24 2024 GMT
            Not After : Aug  5 21:35:24 2025 GMT
        Subject: CN=3FDEB813FA507CDE86FB65FB106CA5E792CCD78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:d6:ee:cf:08:3c:d4:d5:4b:cf:e4:ee:e7:
                    4a:cc:57:89:c4:cc:31:cb:05:cc:c2:83:6a:8d:26:
                    20:9d:4e:ca:e2:de:4c:97:37:c5:b7:73:09:ea:16:
                    9b:8d:af:3b:7f:e7:0e:60:06:31:66:ad:02:9b:44:
                    36:31:c3:2d:54:c8:a9:3d:3f:4e:9b:0e:87:d2:a1:
                    43:02:ef:ed:0e:a6:88:f1:69:22:a1:87:3d:f1:ce:
                    dd:20:1e:52:6e:9c:66:3c:e9:e4:bf:cf:a3:3c:59:
                    ab:de:e7:5b:49:e0:db:07:8a:20:32:25:8d:00:bc:
                    fb:0f:63:05:43:df:8d:9d:1b:ad:47:44:0e:86:73:
                    d6:cc:2c:9c:0f:ec:9e:24:55:e2:c3:b1:ed:28:a6:
                    ff:e2:6d:84:b7:88:97:d4:18:04:37:46:b3:05:47:
                    59:2e:18:63:9b:58:f8:f1:b3:ed:3a:f8:7b:2e:66:
                    5b:7d:c3:9e:e2:e8:4a:0f:df:c1:61:dd:66:52:b7:
                    81:f4:ae:52:17:aa:b4:d8:0c:90:f5:95:8b:c9:5d:
                    ff:53:75:bf:27:dc:f1:e0:56:7e:58:f7:03:79:3e:
                    f8:70:a6:0d:41:c9:6e:5f:91:ec:73:05:55:fa:89:
                    02:5b:12:51:ff:48:46:fd:23:37:19:7c:00:4b:6e:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:B8:13:FA:50:7C:DE:86:FB:65:FB:10:6C:A5:E7:92:CC:D7:8F
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32312d3231203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:0c:ef:e1:74:ee:72:9e:8c:d5:04:c3:71:fd:a4:4b:21:13:
         68:81:51:8c:be:b2:db:d7:17:a1:9a:b9:32:99:8f:0f:35:16:
         44:15:c0:e0:a4:b5:90:6e:9b:3f:99:ed:e9:c8:fe:f6:97:32:
         f0:27:29:9c:8e:1b:b2:52:8a:90:4c:a0:c9:38:67:5e:13:c4:
         ca:41:a6:f3:e9:8e:7c:ac:b3:fd:a4:a1:c2:c4:a2:f8:c3:f1:
         9e:01:c1:ba:44:ed:f9:1d:67:5e:23:46:27:14:df:45:2f:57:
         7e:08:4d:03:e1:09:f8:1a:82:7f:5d:16:bc:6b:07:79:05:29:
         08:6f:94:9a:c2:ae:71:2c:d7:83:86:97:fc:01:99:26:ef:5c:
         c6:2b:03:ab:96:08:84:e2:0b:5e:9a:53:28:4f:a4:f2:6a:71:
         4f:97:81:4b:4c:d5:38:e8:5d:cc:55:c4:ac:52:39:f4:46:4c:
         6e:fe:33:63:0d:d8:3c:53:11:e1:01:4a:02:34:c0:d4:27:f8:
         58:06:04:3d:c0:f4:15:7b:95:a4:37:85:f5:3c:5b:1f:2a:7f:
         ee:0d:a2:63:3c:49:e1:df:0f:67:fb:b3:8d:03:91:1a:ba:c5:
         2d:8a:15:79:08:d8:79:e8:05:cc:f6:cd:d5:94:24:6d:91:d2:
         db:ae:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org