Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36362e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e36362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          uXsSh06YoCRIJeB8X28bOyoQZwfWLbOgEKJF08lVxfE=
Subject key identifier:   AD:E7:09:ED:73:4C:DB:09:14:97:D7:45:4D:83:09:B7:C6:61:AB:05
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       49F6F58207C5FE0EDFA67F4EDC748A19BBDD658B
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        200.233.66.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f6:f5:82:07:c5:fe:0e:df:a6:7f:4e:dc:74:8a:19:bb:dd:65:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=ADE709ED734CDB091497D7454D8309B7C661AB05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:26:34:21:0b:68:2d:b0:06:5a:e5:fe:9d:e9:
                    f9:33:61:a2:e2:82:08:cb:55:7b:80:b4:13:83:1b:
                    c0:aa:48:b7:d7:ac:e9:20:d3:b6:86:75:b9:37:b5:
                    b5:40:54:b6:a4:46:e9:93:b2:d4:05:40:4d:bf:60:
                    16:8f:7e:e1:ec:f4:58:8f:ff:8e:77:ac:33:27:cf:
                    32:b2:81:bc:10:38:ed:95:ef:3e:e9:49:83:3a:93:
                    c9:c4:50:7c:b7:b8:00:36:ad:a1:32:25:3c:4c:64:
                    a1:96:f0:1e:01:f9:63:8d:25:85:0e:a9:52:f3:82:
                    54:39:19:dd:83:fb:7b:a8:89:d5:f0:99:00:8d:d0:
                    0e:fc:07:54:e1:ee:fa:f8:6d:39:52:09:9b:cd:25:
                    fd:fe:7d:eb:f5:d3:a8:cc:14:84:b0:19:9d:c1:eb:
                    ae:83:f1:0f:7b:13:56:69:8c:bc:dc:57:d7:d8:e1:
                    7d:67:4f:35:99:97:99:aa:57:a2:4d:4c:26:91:75:
                    a6:25:eb:3d:66:8b:72:b3:16:e8:ad:09:55:72:b9:
                    a5:6f:0c:d2:e0:fa:cd:39:d9:ec:fd:cb:8e:22:87:
                    5e:3f:7c:68:63:bb:22:1c:17:93:6b:9f:04:60:a6:
                    7e:81:35:44:a6:ce:be:9c:e9:73:d6:a0:10:c6:ee:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E7:09:ED:73:4C:DB:09:14:97:D7:45:4D:83:09:B7:C6:61:AB:05
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:d1:59:0d:5a:7d:d2:41:6d:6c:c6:da:fd:a4:11:d4:58:
         da:b6:e2:14:c7:fc:4f:f1:55:f2:1c:0b:f7:81:05:96:a2:43:
         ef:d5:fe:5b:c1:61:f5:4c:0e:00:f9:f3:10:99:f0:ce:fc:87:
         c3:b9:d9:66:78:3d:cc:2b:c3:28:25:b0:2b:f4:3c:83:38:6e:
         8d:46:75:2d:f9:e9:7f:2a:6e:5a:00:77:9d:2a:d2:c2:9b:08:
         d9:33:d3:3d:29:35:0a:45:66:ef:1b:86:67:d2:8e:98:33:96:
         21:fc:04:53:1b:fa:15:3b:07:dc:3e:42:30:8c:75:b4:7d:df:
         5d:e0:6f:3d:05:45:83:7b:7a:dd:fa:38:c5:22:9a:d7:d5:b3:
         49:3f:af:c0:cb:8c:b2:0d:d6:14:34:f3:ca:33:ca:d7:14:d5:
         ef:c8:e3:5a:f8:71:38:bc:b8:10:f5:36:bc:63:e6:ba:38:27:
         6f:e1:49:f2:07:ec:d8:6e:da:d6:1c:bc:dc:60:9c:a3:ab:52:
         67:d0:49:cd:10:f2:9e:d8:f4:6f:7f:68:a3:66:f6:b6:ab:85:
         d4:a9:f5:86:01:fe:d3:39:b2:e8:fc:f9:14:5e:1a:85:bd:49:
         2f:cb:11:e6:cd:38:20:41:08:85:9b:6f:01:fd:de:8d:c3:c5:
         62:a4:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org