Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e36382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          n8lGHA9NSlbRYS1kdVebdmtwLOw3MGwzETnCtILDES0=
Subject key identifier:   DD:4F:CE:24:04:F6:FE:D0:C0:25:DC:94:E6:85:56:B8:32:B7:C5:66
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4C957B5A292799A7FE07A059E81C06B55DAAA298
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        200.233.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:95:7b:5a:29:27:99:a7:fe:07:a0:59:e8:1c:06:b5:5d:aa:a2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=DD4FCE2404F6FED0C025DC94E68556B832B7C566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:51:ef:00:4c:83:6c:46:9a:9b:fb:da:4b:
                    a5:5e:03:0f:55:d7:c7:1d:cb:d6:04:55:36:9f:27:
                    4c:8a:dc:09:fd:73:11:2d:91:36:f2:ff:1d:2a:56:
                    65:d5:4a:53:43:9c:c9:5f:ab:89:ef:6f:a3:01:14:
                    ad:3d:6e:89:d4:65:c2:ab:b4:c7:d7:78:b4:8f:7e:
                    5b:de:32:1d:27:27:bc:25:00:7e:00:74:72:eb:8e:
                    68:0e:88:d5:d1:e8:45:d8:2b:c5:72:b9:fd:0d:d6:
                    93:c0:cc:73:c9:a9:c6:c8:68:21:61:2c:ab:4b:84:
                    98:3c:28:06:9f:9b:16:cc:5e:10:e2:24:e9:f4:4e:
                    66:bd:4d:0e:dd:60:59:f1:f5:99:6e:70:06:7e:9b:
                    ff:42:c2:a6:4e:e2:eb:3f:99:0a:3b:18:68:e1:7d:
                    b5:e6:79:92:93:e8:3a:f4:ee:ec:d3:77:07:f8:d4:
                    3d:f5:c6:15:35:21:ef:a6:11:93:c0:59:1c:18:49:
                    0a:0c:72:3d:91:af:04:f1:b8:3d:4a:90:7c:34:2a:
                    3a:e7:a9:2f:ee:3f:44:b7:d0:a7:6c:0a:13:8c:60:
                    b1:fd:b0:00:86:b4:29:da:68:94:db:e7:c5:f6:22:
                    63:92:be:d3:47:6a:7c:21:9d:85:7a:c4:4e:c8:15:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:CE:24:04:F6:FE:D0:C0:25:DC:94:E6:85:56:B8:32:B7:C5:66
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:97:1e:aa:23:df:96:4a:49:47:64:a8:ab:6c:ac:79:5e:93:
         cf:11:d9:49:f3:c0:71:e8:7b:ef:f8:0e:10:7f:f1:85:76:27:
         81:5d:77:1d:53:61:c7:ab:17:66:a1:1a:32:38:a6:5b:cd:57:
         09:e2:4f:66:9e:47:df:8b:d1:f0:dd:c1:60:96:25:5b:89:8a:
         69:95:42:46:df:5a:59:8d:82:3b:49:17:e4:2b:75:27:b5:d3:
         d7:67:31:26:6b:56:92:68:ed:9d:da:c6:9e:e9:30:a7:eb:a8:
         fe:0e:31:29:95:63:cf:b5:42:46:12:e5:07:29:a0:d3:e3:64:
         d1:a9:81:13:e8:b2:a6:42:9b:63:6a:40:cf:be:65:6e:4a:75:
         b6:fd:94:db:c7:32:57:f9:3a:1b:71:eb:63:be:c7:92:d5:15:
         85:07:a1:3f:84:19:d1:d4:be:ed:d5:26:ee:42:37:50:5f:31:
         0e:65:55:de:88:e6:1d:78:6a:76:a7:23:4d:ce:40:e2:1c:da:
         0a:3c:dc:fd:ae:b5:8a:07:9c:5d:15:26:15:89:1d:21:0d:9a:
         5d:63:59:f0:45:f0:b5:41:ec:8b:20:8a:ae:01:98:95:75:d3:
         55:1b:af:26:a9:9d:bb:16:d0:e7:e9:2d:54:56:8c:63:2f:28:
         eb:99:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org