Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          gmSWLXYGniW2qE5s4AngagFupyvFF6MzIUvVa4XFzS4=
Subject key identifier:   4D:83:07:6A:FE:40:AF:D4:B5:07:D6:C9:9C:A2:EE:D8:EC:CF:FC:12
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       2E49139E97964909E914B7E20AFA39BFE16C86A8
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:41 +0000
ROA not before:           Thu 04 Apr 2024 23:16:41 +0000
ROA not after:            Thu 03 Apr 2025 23:21:41 +0000
asID:                     11921
IP address blocks:        200.233.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:49:13:9e:97:96:49:09:e9:14:b7:e2:0a:fa:39:bf:e1:6c:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:41 2024 GMT
            Not After : Apr  3 23:21:41 2025 GMT
        Subject: CN=4D83076AFE40AFD4B507D6C99CA2EED8ECCFFC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:ec:0e:ec:51:ee:86:58:c7:59:e5:16:06:
                    dd:25:a8:ae:82:6f:7b:67:eb:b1:ed:8a:11:de:bc:
                    d0:fa:88:65:a6:97:36:5a:e4:d6:69:db:4e:fe:ec:
                    dc:4f:76:fc:93:bc:9f:d3:d5:2b:94:af:a1:0d:c0:
                    db:a8:3c:61:60:f9:14:e5:de:55:82:b8:f9:25:75:
                    4e:a6:e0:53:7b:f5:88:8d:ea:5e:e1:82:57:8f:01:
                    be:5f:c5:7b:4d:54:b0:63:1d:f1:0f:97:a5:a5:6d:
                    bb:20:19:5a:25:2a:ea:52:fc:00:ac:27:08:ff:83:
                    0d:82:34:8c:4b:bf:87:78:18:60:a0:d7:2d:25:a4:
                    d3:47:e5:1d:24:32:f4:dc:ff:5a:a5:9a:5d:1a:5e:
                    7f:1a:8a:ea:31:86:03:2d:5e:76:e8:28:8f:8e:aa:
                    a9:a9:c3:b0:ed:70:ae:57:cd:9a:90:00:97:91:6a:
                    86:58:ec:d0:6f:a4:10:45:c3:fd:c9:19:0b:a9:ec:
                    27:72:e0:fa:54:e6:2b:17:70:fb:e3:08:1b:34:e1:
                    6e:76:06:36:fc:03:81:a3:e2:a0:fe:dc:82:4f:2a:
                    4a:b9:28:e4:9e:bc:c0:18:2b:84:6d:10:b0:36:2f:
                    a6:c7:75:9c:d1:88:5e:e9:f8:c1:cb:81:0f:80:37:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:83:07:6A:FE:40:AF:D4:B5:07:D6:C9:9C:A2:EE:D8:EC:CF:FC:12
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:23:4b:9a:1a:1e:41:a2:12:79:74:f1:25:91:73:83:8c:
         11:fb:f1:cf:6f:ce:8c:95:df:aa:2e:8b:13:d7:74:7b:cf:78:
         36:3c:c6:7b:74:e2:e4:ce:c9:6c:b8:53:d6:af:5a:72:2b:85:
         3a:5e:bc:64:93:8c:32:ab:b3:6b:1d:27:11:71:b3:3f:5e:b6:
         53:35:12:26:b7:39:17:72:23:3b:3e:99:89:31:89:69:4c:c0:
         97:e1:b1:94:75:5c:5b:86:67:a9:f6:23:8a:ad:14:d7:da:f9:
         74:80:6f:10:34:9e:dc:79:1e:ea:6a:5d:4c:7b:d7:a2:24:8f:
         a2:a3:05:21:c4:87:b9:67:d7:ad:c8:bd:ee:0f:2c:ad:48:d3:
         28:11:8b:8a:f8:31:ae:e3:66:44:ca:11:36:5e:d6:4c:1b:a4:
         6d:26:c7:9e:bb:10:bf:6a:2b:26:33:38:9e:7c:27:56:ef:3c:
         ca:a1:b0:53:7b:01:e7:eb:3c:52:32:67:ad:52:01:bb:fd:3e:
         55:f4:70:9c:f3:d4:2b:52:ad:31:12:03:1a:09:f6:71:0b:ca:
         60:01:22:1f:3e:58:01:31:94:2e:80:de:0d:b6:e4:15:84:1c:
         e0:09:ac:ef:51:65:51:46:78:da:00:32:07:dc:27:20:62:88:
         d1:80:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org