Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32312d3231203d3e203131393231.roa
File:                     3230302e3233332e37322e302f32312d3231203d3e203131393231.roa (raw, json)
Hash identifier:          /OU4w8KMDKQQhn5vkJloAwcA9xcGJBczt2fjH4kQPug=
Subject key identifier:   82:8C:42:9F:CC:98:86:5C:9D:03:8A:E1:5A:EB:3A:1D:63:F8:71:AD
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       600436B12E19E710498F43D7DDCE098DD4649AC4
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32312d3231203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:37:58 +0000
ROA not before:           Tue 06 Aug 2024 21:32:58 +0000
ROA not after:            Tue 05 Aug 2025 21:37:58 +0000
asID:                     11921
IP address blocks:        200.233.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:04:36:b1:2e:19:e7:10:49:8f:43:d7:dd:ce:09:8d:d4:64:9a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:32:58 2024 GMT
            Not After : Aug  5 21:37:58 2025 GMT
        Subject: CN=828C429FCC98865C9D038AE15AEB3A1D63F871AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:52:d8:6a:aa:c5:a5:99:26:b1:37:32:e2:
                    a1:84:da:59:a2:aa:06:2c:13:21:98:12:00:af:0f:
                    fb:82:cc:ea:14:0b:e1:69:2a:1b:38:79:57:ac:5c:
                    62:f2:ab:0e:ff:09:86:ab:4a:5a:62:ec:99:6a:36:
                    0d:2e:31:ce:d7:d6:28:8f:0e:db:96:4d:e1:5f:06:
                    fe:40:b8:f7:fb:a1:e7:cb:a0:61:00:f7:cc:90:10:
                    b3:b5:c4:01:d3:0c:9b:c8:9a:7d:4a:4e:25:84:94:
                    0b:6b:d8:77:a6:15:ce:df:26:32:10:b5:a2:67:69:
                    85:42:91:e9:d3:25:74:12:6b:90:dd:40:77:9c:7a:
                    27:6c:b5:81:f8:5f:0e:ad:74:b8:5f:db:ec:ca:e1:
                    cc:e6:a1:66:d6:57:d8:f0:41:72:56:b3:40:2f:1b:
                    74:2d:96:3e:f8:af:68:f2:79:26:43:36:8d:ad:d8:
                    98:54:fe:f1:d4:8a:db:fd:41:bc:ba:b4:13:41:b8:
                    e6:e0:94:3d:07:cb:11:66:55:b7:71:dc:f3:2b:0c:
                    93:c9:42:4b:6a:96:dc:58:69:08:a2:b8:22:72:ff:
                    2c:8f:2c:8a:f2:88:3f:bf:a8:fd:b1:3f:44:8d:fe:
                    88:b4:4f:73:5c:94:8b:ca:31:ba:ae:36:49:e6:01:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8C:42:9F:CC:98:86:5C:9D:03:8A:E1:5A:EB:3A:1D:63:F8:71:AD
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32312d3231203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:e0:d8:c3:9e:be:4d:b9:b8:f9:91:c3:fa:4c:b7:42:80:
         bf:94:3d:5e:a4:de:c8:c1:a8:c6:43:49:ec:1b:ba:53:ec:9f:
         eb:21:f7:55:bd:a5:2a:91:e1:3b:ac:50:5c:21:9d:c6:d9:50:
         b2:e0:70:fa:c1:32:6c:cb:42:af:04:a3:cb:4c:38:37:3e:2b:
         bd:53:2d:10:e5:9b:8b:af:78:10:04:73:0d:00:0f:2b:77:62:
         3b:c0:ee:07:be:92:46:7f:4b:59:55:ba:1b:06:53:64:ff:f9:
         76:8f:33:7d:18:05:94:38:79:56:99:45:23:1f:64:60:4c:bb:
         2b:64:c9:ea:52:3b:f4:88:37:ed:05:02:a4:fe:84:c3:7b:01:
         64:23:29:cf:85:90:ef:55:b1:2f:8a:50:f2:05:2f:08:f9:ce:
         65:25:7b:fd:cf:49:87:f4:93:f0:93:04:98:de:24:be:51:93:
         5a:b9:12:99:a9:7d:a9:16:1b:7b:16:fd:27:33:b4:62:ca:04:
         d5:48:57:d4:ca:ba:28:fb:88:e0:2c:d2:af:1a:41:c8:1b:f0:
         0d:49:7b:ee:c8:98:8c:5b:7e:0c:78:aa:6c:e6:ba:fc:88:ad:
         5b:ea:8c:35:e4:ad:f2:d5:ad:70:4b:77:24:f6:a9:5e:bd:d1:
         45:f4:3f:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYAQ2sS4Z5xBJj0PX3c4JjdRkmsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA4MDYyMTMyNThaFw0yNTA4MDUyMTM3NThaMDMxMTAvBgNV
BAMTKDgyOEM0MjlGQ0M5ODg2NUM5RDAzOEFFMTVBRUIzQTFENjNGODcxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV71LYaqrFpZkmsTcy4qGE2lmi
qgYsEyGYEgCvD/uCzOoUC+FpKhs4eVesXGLyqw7/CYarSlpi7JlqNg0uMc7X1iiP
DtuWTeFfBv5AuPf7oefLoGEA98yQELO1xAHTDJvImn1KTiWElAtr2HemFc7fJjIQ
taJnaYVCkenTJXQSa5DdQHeceidstYH4Xw6tdLhf2+zK4czmoWbWV9jwQXJWs0Av
G3Qtlj74r2jyeSZDNo2t2JhU/vHUitv9Qby6tBNBuObglD0HyxFmVbdx3PMrDJPJ
QktqltxYaQiiuCJy/yyPLIryiD+/qP2xP0SN/oi0T3NclIvKMbquNknmAb/DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgoxCn8yYhlydA4rhWus6HWP4ca0wHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMjMzMzMyZTM3MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyOlIMA0GCSqGSIb3DQEBCwUAA4IBAQCPEeDYw56+
Tbm4+ZHD+ky3QoC/lD1epN7IwajGQ0nsG7pT7J/rIfdVvaUqkeE7rFBcIZ3G2VCy
4HD6wTJsy0KvBKPLTDg3Piu9Uy0Q5ZuLr3gQBHMNAA8rd2I7wO4HvpJGf0tZVbob
BlNk//l2jzN9GAWUOHlWmUUjH2RgTLsrZMnqUjv0iDftBQKk/oTDewFkIynPhZDv
VbEvilDyBS8I+c5lJXv9z0mH9JPwkwSY3iS+UZNauRKZqX2pFht7Fv0nM7RiygTV
SFfUyroo+4jgLNKvGkHIG/ANSXvuyJiMW34MeKps5rr8iK1b6ow15K3y1a1wS3ck
9qlevdFF9D/H
-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org