Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32322d3232203d3e203131393231.roa
File:                     3230302e3139342e39362e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          Nce+44SxmTcPlBt7NsTF45ITJ7nwTEXQJPQ4f4Nv7fo=
Subject key identifier:   0D:38:83:50:5A:49:D8:6D:97:2B:39:96:3C:A5:01:15:F8:AB:83:CF
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       6049BA044756F69671F2F41209CF16E7C086C3E0
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32322d3232203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:35:33 +0000
ROA not before:           Tue 06 Aug 2024 21:30:33 +0000
ROA not after:            Tue 05 Aug 2025 21:35:33 +0000
asID:                     11921
IP address blocks:        200.194.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:49:ba:04:47:56:f6:96:71:f2:f4:12:09:cf:16:e7:c0:86:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:30:33 2024 GMT
            Not After : Aug  5 21:35:33 2025 GMT
        Subject: CN=0D3883505A49D86D972B39963CA50115F8AB83CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:0f:4b:bf:7a:93:f1:41:03:e9:19:0a:9e:
                    c9:5a:77:be:25:f6:bd:8d:4e:6f:a8:b2:cb:78:c2:
                    96:86:0d:79:f3:44:f0:b5:cf:0e:29:a9:eb:28:b4:
                    b7:c4:bc:be:1d:f2:9a:28:79:a8:13:82:46:ba:e9:
                    75:2a:0c:2d:21:2f:d9:98:c7:75:ac:ec:bf:45:22:
                    9a:fe:05:94:93:10:01:57:51:3b:8b:b6:0f:17:70:
                    23:27:84:80:0d:a1:75:4e:81:d7:83:b3:58:84:8a:
                    8d:13:1d:6c:cb:6b:f6:be:d7:ac:44:23:d7:32:f0:
                    fc:12:aa:c1:0b:6f:20:41:c7:e1:9f:bb:4e:40:6c:
                    c6:ca:2e:d1:d2:bb:6b:de:b5:93:dd:31:ab:59:78:
                    c6:60:94:a5:b8:2d:76:ce:07:96:78:82:fa:ff:5f:
                    81:22:cd:59:80:6f:e9:62:eb:d2:c3:b4:05:98:46:
                    c5:28:c8:d3:6b:aa:a6:62:a2:c5:aa:ef:81:b4:83:
                    2a:94:92:19:22:d2:f3:84:61:42:02:ff:18:1f:1d:
                    5c:4d:2e:31:03:81:1b:82:09:2d:3b:68:61:57:4c:
                    2f:47:13:83:87:83:fd:7e:da:36:f5:18:3e:8d:37:
                    c7:28:1f:cd:84:7a:91:15:f1:f1:8c:6e:49:28:8e:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:38:83:50:5A:49:D8:6D:97:2B:39:96:3C:A5:01:15:F8:AB:83:CF
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39362e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:db:88:1c:b0:05:ef:fb:55:30:a2:5b:1d:c2:e0:ff:f4:b3:
         be:6c:5e:b3:79:cc:c0:a2:2e:83:21:f5:58:fd:3c:62:fa:55:
         2e:eb:42:83:44:e3:93:7b:7a:a2:17:6c:69:fd:e4:11:db:6d:
         06:aa:c0:e6:86:45:e4:05:78:97:6a:70:db:98:06:bd:de:34:
         6e:5a:dd:d4:ca:5c:eb:88:15:cf:fc:d1:66:c0:ba:77:b7:f7:
         60:b2:4f:94:69:74:88:14:03:87:a6:73:ca:56:2b:2e:21:d2:
         2f:45:fe:a8:93:ea:58:72:49:83:62:29:d0:89:72:20:5b:ae:
         f6:86:27:e4:68:11:d3:b6:cf:5d:78:82:c4:3c:25:0b:17:cc:
         b0:c8:ba:2f:37:a4:a9:45:f7:b9:88:06:36:97:e7:1b:88:95:
         05:ae:8e:13:d2:2d:84:c8:3d:d7:c5:47:56:05:e1:fc:e4:84:
         29:aa:2d:df:26:3e:81:cb:a4:be:d9:14:c3:37:27:98:ec:23:
         6b:33:3f:8f:0c:05:6d:21:2b:12:28:0f:c9:e3:16:4c:17:06:
         29:f1:0f:d4:fa:d5:4d:96:84:b4:48:36:2f:8e:9e:23:b7:ea:
         d5:99:e7:5f:46:af:0f:1e:e6:32:8d:bf:9d:ad:a0:47:73:10:
         b4:92:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org