Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          q5yNpyvl6Ty+zJ/pG7mcWYLUPC7ETaq55Ll8tUE5ETs=
Subject key identifier:   11:E8:0D:67:D0:E1:DA:78:AB:E2:90:1A:50:72:58:91:E7:7B:4A:23
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7BC2E1419A4EA2AE25DF3982F50D0CD4DA0ADE8A
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        200.233.70.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c2:e1:41:9a:4e:a2:ae:25:df:39:82:f5:0d:0c:d4:da:0a:de:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=11E80D67D0E1DA78ABE2901A50725891E77B4A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:f9:ff:f6:55:3a:dc:1e:f2:8d:11:39:9f:
                    a6:56:82:38:8b:47:0f:2d:82:46:45:5b:44:75:75:
                    d6:e9:82:bc:e8:6e:8a:e3:0f:44:fa:12:e0:92:aa:
                    04:12:9a:4c:eb:de:2a:4e:9d:2a:ea:44:90:9a:13:
                    e6:e7:02:d1:75:ab:cb:ac:0e:58:d7:ca:34:bc:f7:
                    21:6d:37:fb:dc:84:0c:13:cd:0a:c1:65:16:8d:9d:
                    c4:ad:af:b1:1e:a9:2c:df:c7:ee:cf:cb:5d:aa:97:
                    12:da:af:8a:65:1d:11:4f:d3:28:a7:a9:d2:17:99:
                    71:53:7c:50:34:00:f9:40:9f:66:f6:83:8f:dd:c8:
                    08:c9:d1:c4:07:4c:b7:61:74:99:27:fc:dc:50:f6:
                    8b:fb:7b:5c:b7:28:f3:d5:de:c1:6a:ba:23:24:8d:
                    29:15:d0:6f:d4:ee:22:f4:d9:c5:c3:c0:89:07:7e:
                    fe:87:ee:6e:58:76:00:13:c7:27:4a:ab:fd:a5:23:
                    20:1f:4c:31:0e:ec:56:4d:2a:90:e1:b0:13:7b:dc:
                    99:e7:de:5b:40:1f:71:54:35:35:79:47:1a:0d:72:
                    cc:e5:76:8b:60:9d:b6:f9:d8:de:f4:b5:1a:03:e5:
                    b0:8b:0c:6f:fb:4f:ab:a9:7a:38:b2:dc:86:9d:dd:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:0D:67:D0:E1:DA:78:AB:E2:90:1A:50:72:58:91:E7:7B:4A:23
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:5c:4f:6f:b7:d6:df:6d:1e:5e:6b:8e:b1:cb:b4:d4:4f:
         75:a8:db:a1:12:b8:29:1e:46:33:60:6d:7f:62:80:62:93:e5:
         86:ef:bf:68:32:90:60:0b:91:1d:3e:cc:2a:10:fc:58:3a:02:
         8e:45:0c:af:d9:d5:98:66:41:34:f2:35:c5:20:f9:9a:81:a1:
         cd:cd:f2:b0:7e:f7:44:e2:6d:38:db:22:8b:95:e4:65:77:3d:
         69:fc:a8:5e:aa:78:37:3f:8e:f8:96:5c:07:2b:f6:94:91:4e:
         d3:6b:46:81:d3:24:19:ba:0c:c5:6b:cc:b6:3f:7a:22:07:d7:
         28:20:ee:6c:15:5d:34:9a:5e:d8:7f:5e:47:51:5d:fd:6f:0d:
         33:88:a5:a2:4c:9b:f3:8b:73:34:96:02:a6:12:86:40:51:92:
         6b:f5:52:9b:96:1b:24:bc:38:ae:d4:79:9a:38:a9:f2:17:4c:
         fc:7c:af:8b:cf:44:76:d8:48:da:4b:73:63:9c:6c:f6:b8:10:
         f0:99:cd:9b:5b:1e:93:f6:c8:34:b7:e5:15:9f:8e:53:a1:b4:
         35:3c:4b:d2:43:a5:dc:2f:ad:97:6b:7a:8a:07:b9:d5:d7:d3:
         13:af:d6:31:4f:93:b9:b5:df:d4:b7:34:a1:e4:5b:d3:3a:69:
         b1:a6:0f:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe8LhQZpOoq4l3zmC9Q0M1NoK3oowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDJaFw0yNTA0MDMyMzIxNDJaMDMxMTAvBgNV
BAMTKDExRTgwRDY3RDBFMURBNzhBQkUyOTAxQTUwNzI1ODkxRTc3QjRBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81vn/9lU63B7yjRE5n6ZWgjiL
Rw8tgkZFW0R1ddbpgrzoborjD0T6EuCSqgQSmkzr3ipOnSrqRJCaE+bnAtF1q8us
DljXyjS89yFtN/vchAwTzQrBZRaNncStr7EeqSzfx+7Py12qlxLar4plHRFP0yin
qdIXmXFTfFA0APlAn2b2g4/dyAjJ0cQHTLdhdJkn/NxQ9ov7e1y3KPPV3sFquiMk
jSkV0G/U7iL02cXDwIkHfv6H7m5YdgATxydKq/2lIyAfTDEO7FZNKpDhsBN73Jnn
3ltAH3FUNTV5RxoNcszldotgnbb52N70tRoD5bCLDG/7T6upejiy3Iad3WPNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEegNZ9Dh2nir4pAaUHJYked7SiMwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMjMzMzMyZTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByOlGMA0GCSqGSIb3DQEBCwUAA4IBAQBluVxPb7fW
320eXmuOscu01E91qNuhErgpHkYzYG1/YoBik+WG779oMpBgC5EdPswqEPxYOgKO
RQyv2dWYZkE08jXFIPmagaHNzfKwfvdE4m042yKLleRldz1p/Kheqng3P474llwH
K/aUkU7Ta0aB0yQZugzFa8y2P3oiB9coIO5sFV00ml7Yf15HUV39bw0ziKWiTJvz
i3M0lgKmEoZAUZJr9VKblhskvDiu1HmaOKnyF0z8fK+Lz0R22EjaS3NjnGz2uBDw
mc2bWx6T9sg0t+UVn45TobQ1PEvSQ6XcL62Xa3qKB7nV19MTr9YxT5O5td/UtzSh
5FvTOmmxpg9j
-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org