Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e36342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          8LbzCx4V0AyJyNj/CYhi5d14uqXiVP0XBH83fEQ+iMI=
Subject key identifier:   86:74:11:93:35:44:1C:01:F2:C3:A6:73:76:93:C3:36:E2:EC:B6:CF
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       67A1682E794C28C1C14FA509F83C29AAB99E0543
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        200.233.64.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a1:68:2e:79:4c:28:c1:c1:4f:a5:09:f8:3c:29:aa:b9:9e:05:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=8674119335441C01F2C3A6737693C336E2ECB6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:90:c9:8c:ed:ac:30:27:0a:36:39:08:58:
                    65:78:54:81:73:48:f6:ba:d2:2e:1b:be:9e:42:d6:
                    c9:2d:af:95:b2:99:6b:89:67:11:ee:ab:ca:0d:df:
                    6c:cc:5d:59:7b:60:0e:cc:8a:40:17:1a:5d:89:69:
                    cd:1d:01:84:d8:ac:24:15:90:37:e7:8d:60:b0:31:
                    01:c6:a1:dd:b0:3a:20:f3:7b:ca:5a:ec:8e:c9:a4:
                    6f:1f:4f:af:ff:77:dd:d2:cc:2d:e8:24:79:f3:d7:
                    55:75:b7:ec:d2:70:35:73:c5:a8:e8:2b:b0:63:46:
                    9a:69:b7:5a:aa:fd:34:97:28:aa:e5:38:7d:79:e5:
                    8f:a1:4b:a7:b4:67:65:6c:f3:a5:2a:c6:7c:97:46:
                    54:f6:0a:5e:10:fa:8d:d1:98:48:d3:4b:b7:73:9d:
                    43:a9:1f:40:9d:f5:96:b2:cb:8b:e4:ef:5c:17:58:
                    be:dc:fa:60:64:9a:37:17:5e:10:d5:6b:4d:da:04:
                    d9:96:fb:e3:34:73:d6:95:50:c3:4d:a9:fc:e5:06:
                    10:6a:e6:79:cf:73:bf:ae:af:f0:80:9c:31:48:5b:
                    bb:f2:fb:7e:c1:86:cc:76:3e:92:2b:b9:5b:d4:9f:
                    bf:2d:25:3f:b8:8b:eb:26:6e:5f:e0:40:9c:7c:a9:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:74:11:93:35:44:1C:01:F2:C3:A6:73:76:93:C3:36:E2:EC:B6:CF
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:18:a1:c7:2a:74:83:6f:93:3d:ad:3f:80:fd:81:3c:56:c7:
         ba:47:01:3e:53:31:87:b9:04:8f:3f:3d:f2:43:4e:3e:7f:5b:
         15:61:ef:71:e2:c9:56:9b:a1:b1:0f:03:6b:5d:d2:1d:42:bb:
         c1:ae:d6:9a:9c:b8:2c:9f:d5:c5:42:f9:87:f2:a6:9f:c1:c1:
         f7:18:01:57:91:bf:d8:06:97:eb:80:4e:c0:ad:90:29:41:ea:
         7f:ca:45:75:29:0d:f3:30:dc:13:7e:fc:4d:d7:f3:90:26:91:
         ec:f2:a9:a6:8c:92:5b:5d:eb:de:bd:48:26:c0:7f:73:82:c2:
         78:12:e1:74:db:ab:cf:ac:e8:07:37:b5:e4:dc:58:87:15:81:
         7e:59:b9:48:0b:85:46:5e:65:b8:52:b0:93:a3:09:82:ee:57:
         c1:7f:9b:dc:c3:ff:16:bb:5b:cd:3f:ea:5d:46:32:51:2d:63:
         79:36:2d:c0:cc:6c:20:48:9f:8c:23:b6:b6:5f:a9:2c:01:b7:
         79:2c:e1:24:8b:e0:6b:61:82:37:87:77:2e:9d:c7:9c:b5:4a:
         22:f8:f9:01:2b:24:a0:de:a2:a9:b4:f0:d1:c9:e7:cd:21:6e:
         7e:98:b9:ce:b0:b2:c5:9f:ed:fb:3f:bc:3f:a9:bc:b2:b4:2a:
         c3:6e:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org