Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          MVFYV9668qz1kqp1UO77QARjDr56EQYEs+eNgD3DWtc=
Subject key identifier:   73:23:DA:FB:F6:AC:4F:68:B4:1F:AB:62:F6:69:D6:5D:29:57:FF:A1
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       61B963679FA209DB34B18EDB86E07293EBA29E08
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        200.233.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b9:63:67:9f:a2:09:db:34:b1:8e:db:86:e0:72:93:eb:a2:9e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=7323DAFBF6AC4F68B41FAB62F669D65D2957FFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:a3:18:73:0a:c8:b2:28:2f:93:66:24:58:
                    ce:fa:7b:80:97:89:b5:d3:77:90:8b:71:42:92:eb:
                    c5:83:f0:8e:dd:a3:f9:b3:c9:25:f3:9d:4e:b8:7b:
                    e1:f9:e0:a8:10:f4:3c:77:0f:7d:a6:f9:65:35:75:
                    bb:c6:b8:c8:6f:20:a9:4d:45:f9:e3:9a:69:6c:97:
                    f0:01:c0:1d:8c:7a:6b:d1:0e:9d:f9:bf:2f:82:53:
                    98:55:8e:1e:dd:1a:4e:d2:7e:6f:fe:f5:cd:a8:72:
                    35:ad:ac:9f:cc:fe:16:39:c8:0c:5a:96:dd:be:85:
                    77:c6:c4:79:8a:af:de:64:34:4a:1c:e1:41:4e:a4:
                    7f:f3:c3:72:7e:45:dd:bf:c6:a8:9b:e0:01:dd:23:
                    f1:a1:cc:5e:1d:e5:73:a6:7a:2f:4b:4a:e0:00:25:
                    a7:24:c0:3d:8f:db:07:ab:19:ce:08:45:25:7f:18:
                    dc:9f:9d:55:09:0c:a5:3a:01:9b:b7:14:46:cc:2f:
                    f2:58:3b:94:04:ee:82:bc:f6:a2:7d:f0:77:f3:c8:
                    04:53:6f:ae:94:90:a8:00:3e:64:a1:72:ab:d4:8c:
                    18:f4:f1:64:d1:b3:c9:d4:57:fc:aa:ef:8f:a3:b2:
                    51:fb:57:44:98:8f:2c:65:21:3a:f3:62:5a:1a:f9:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:23:DA:FB:F6:AC:4F:68:B4:1F:AB:62:F6:69:D6:5D:29:57:FF:A1
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:51:9b:6b:97:bb:e1:a1:b3:d2:c2:d9:98:7a:58:23:06:ee:
         c9:28:df:bb:57:14:d6:ad:af:54:c1:8c:fc:39:36:61:72:57:
         a5:59:1a:e2:d0:f6:69:ef:ba:79:b9:9f:40:49:e7:12:20:f3:
         f2:5e:4b:c0:f2:05:5d:86:db:45:f7:a1:dd:cb:83:e4:dd:fe:
         2e:a3:ea:01:2b:9a:16:66:15:98:dc:f2:50:f8:6e:49:d3:8a:
         f2:e8:3b:e5:cc:41:b1:b0:c1:a2:c7:38:af:04:68:8d:e9:85:
         86:9c:f2:b7:80:ca:0f:ad:47:40:97:b0:75:b8:9f:aa:bc:ea:
         a8:20:53:6f:08:73:fa:bb:a6:54:68:fd:0f:f0:25:f0:50:e5:
         d3:9c:95:a6:5b:5f:68:84:ee:55:8a:5e:09:1c:9e:1f:79:19:
         62:b9:ef:a4:f4:94:70:5e:2d:03:d2:df:c9:cc:1a:26:7e:5d:
         ef:91:25:4b:59:ec:d5:6b:6f:88:8f:a2:32:e1:46:00:b6:1d:
         8f:76:f3:d2:b9:a1:38:92:57:46:55:b2:f1:14:b8:06:58:0f:
         81:ad:f1:9f:69:3d:78:b1:36:a2:2c:10:65:78:93:42:4d:a3:
         f9:3c:21:96:25:71:61:6e:e6:46:ca:83:5f:75:65:c1:cf:dc:
         be:a4:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org