Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e39382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          d0Lyn7uBimG/Kn+n98DqJSSZ4G4tIihGAnTUvOy+Jaw=
Subject key identifier:   6F:C5:98:8F:92:2B:79:4E:D3:57:C0:EA:CC:93:FB:D8:6D:61:12:E2
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4364F1C304BF30F1F6B04A8B81A9C87C5790FCA2
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39382e302f32332d3233203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:35:43 +0000
ROA not before:           Tue 06 Aug 2024 21:30:43 +0000
ROA not after:            Tue 05 Aug 2025 21:35:43 +0000
asID:                     11921
IP address blocks:        200.194.98.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:64:f1:c3:04:bf:30:f1:f6:b0:4a:8b:81:a9:c8:7c:57:90:fc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:30:43 2024 GMT
            Not After : Aug  5 21:35:43 2025 GMT
        Subject: CN=6FC5988F922B794ED357C0EACC93FBD86D6112E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:cb:75:b6:84:de:6c:37:20:1d:57:a7:c8:
                    36:ca:8e:00:3d:0c:18:5e:da:cd:cb:39:3b:c1:81:
                    f1:9b:bc:96:8c:5b:1f:3d:46:2e:6f:a8:00:c5:d2:
                    98:e4:fb:77:c0:d2:d9:40:c5:86:57:d7:a5:b0:38:
                    b7:9c:c3:95:ac:59:48:78:92:cf:67:f3:dc:a8:fa:
                    18:97:d3:f7:0d:d2:49:7d:de:b8:54:8f:13:ef:c9:
                    20:21:02:85:8a:86:81:24:dc:cf:c6:a4:1a:c6:fe:
                    8c:14:a3:b0:e0:70:51:ae:20:cd:9f:19:1f:50:e6:
                    61:e1:cd:8b:a4:07:10:46:86:f9:fb:02:28:00:ac:
                    09:8d:bc:d6:9b:c3:52:64:af:6e:e5:11:b5:d5:8c:
                    63:10:83:b8:fc:a8:98:94:a3:99:5a:3a:bc:a0:ef:
                    1d:4a:1c:c5:25:59:a4:9d:32:1b:74:5b:cf:68:96:
                    7b:8a:3a:da:e5:cc:dc:2b:cf:7d:86:3b:67:13:98:
                    c5:a1:ba:69:89:93:8c:f4:62:3d:1e:e0:45:c6:ae:
                    fe:fb:72:d8:9a:b5:af:e4:ce:ef:9b:83:86:92:6b:
                    f4:1c:ee:3a:c2:1a:c4:2b:ec:cf:e2:8c:35:4d:15:
                    4c:5c:c1:59:cb:9e:71:74:0f:e1:52:1c:13:12:b5:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:98:8F:92:2B:79:4E:D3:57:C0:EA:CC:93:FB:D8:6D:61:12:E2
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e39382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:e1:f9:7d:35:bc:44:0a:c2:31:50:b1:3d:c5:ee:a7:fa:
         a9:48:0b:cb:d3:65:f4:e7:8e:c7:df:77:05:2e:3f:f2:9c:bb:
         17:fd:6f:36:f7:19:1b:ce:66:e4:f6:06:71:c0:b7:35:38:22:
         14:4d:c1:83:ee:68:19:60:27:4c:08:97:28:dd:8b:0f:62:33:
         ef:7f:55:52:8f:21:08:44:e2:80:5a:05:93:66:c6:ae:e5:36:
         21:9a:0f:6e:5a:43:49:5c:d5:c0:33:8a:e1:2b:54:92:44:37:
         53:24:f0:6c:e9:22:e2:c8:5c:95:7a:da:c0:7f:e6:3c:e0:aa:
         c4:60:11:49:c1:92:26:79:94:03:c7:2c:f9:fd:d8:48:df:92:
         2f:89:a0:07:a0:9b:a0:c8:b7:39:cc:27:a8:ff:6f:b4:dc:25:
         24:98:44:a2:12:a0:08:f7:e8:ad:e0:90:37:65:f9:75:38:29:
         96:62:de:51:9d:77:ed:3b:09:78:62:37:2d:73:0a:00:91:a0:
         9b:4c:07:b9:7f:5a:f7:44:32:d3:2b:1d:2d:98:1c:cd:11:4a:
         09:21:ce:fb:25:d0:fc:b2:5d:f6:2a:90:f8:df:7e:6b:02:ad:
         90:20:76:07:89:81:57:02:4f:f1:57:a2:65:a8:f4:af:39:c3:
         aa:bc:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org