Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37332e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37332e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          0g9a/lGdgB3lPpt8NPA5JmU0hu1/jv0kNHkdPIbv69E=
Subject key identifier:   2D:E7:1D:1C:BF:CC:4F:07:AA:DD:28:15:C0:B0:37:47:E9:79:54:98
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       6E0BA61AD0E53E3F8EFD3B604AF593AF421B5165
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37332e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:40:28 +0000
ROA not before:           Wed 31 Jul 2024 13:35:28 +0000
ROA not after:            Wed 30 Jul 2025 13:40:28 +0000
asID:                     11921
IP address blocks:        200.233.73.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0b:a6:1a:d0:e5:3e:3f:8e:fd:3b:60:4a:f5:93:af:42:1b:51:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:35:28 2024 GMT
            Not After : Jul 30 13:40:28 2025 GMT
        Subject: CN=2DE71D1CBFCC4F07AADD2815C0B03747E9795498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:92:3e:a5:18:26:74:e1:da:f6:d1:b4:f5:
                    54:ae:ae:30:46:65:e8:7c:58:56:8a:d6:3d:da:84:
                    48:b7:f0:62:fd:15:83:ac:77:c9:da:9c:cf:fc:49:
                    92:c4:a6:8e:fb:f7:81:0b:85:6b:42:81:f7:9a:bf:
                    50:75:ed:a2:19:11:ac:87:e3:24:63:72:48:db:52:
                    72:90:c5:a9:82:b3:ef:f6:14:dc:ad:d3:79:b9:27:
                    93:c9:6d:8e:59:d7:d9:d6:f4:8d:07:bb:8a:94:0b:
                    ce:15:6a:f9:8f:3b:27:c0:34:99:81:d6:33:5c:96:
                    83:b8:c4:b5:1b:35:5a:b6:3f:bd:1c:92:f0:89:bf:
                    35:00:13:2e:9a:cc:8e:a7:aa:43:1a:ff:58:8c:dc:
                    cd:55:26:5c:17:77:3e:3a:7b:b6:af:0e:0b:34:96:
                    84:bc:43:0f:44:ac:98:e3:c0:df:9d:d8:fa:30:23:
                    9e:5d:78:90:d5:74:53:16:72:a7:21:22:be:6c:90:
                    85:35:ca:8b:fe:64:08:f8:b7:bf:81:8b:e2:a0:9c:
                    20:50:93:d8:a9:11:84:54:2f:e6:4e:9b:4a:18:bd:
                    6a:70:ea:fc:8c:2e:59:ae:40:0d:82:b0:f3:4f:9d:
                    7e:d5:fb:e7:37:80:38:c5:de:b0:1c:61:d2:be:45:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E7:1D:1C:BF:CC:4F:07:AA:DD:28:15:C0:B0:37:47:E9:79:54:98
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37332e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:85:4a:83:c5:ee:88:6e:5a:51:e3:c2:4f:c8:14:5a:12:
         63:eb:2b:25:9b:1d:22:27:a8:70:00:e7:08:a3:ef:35:62:55:
         cd:4e:f7:44:ae:18:b9:3b:fa:d5:2c:0c:08:d9:4e:32:26:c9:
         50:8a:29:99:65:e3:59:8d:b9:42:8c:59:76:53:38:61:32:85:
         cd:98:a0:a1:4a:62:1d:90:a7:7f:12:ac:d4:04:4d:ac:3d:d2:
         6d:b6:8f:08:19:6a:eb:a4:d7:2e:e3:4f:f1:0b:ef:22:91:92:
         66:36:a1:99:69:90:a6:b1:bc:df:d0:88:1e:2b:e2:cd:46:8b:
         01:19:2c:44:ea:5f:d6:cd:a4:69:0e:c8:d4:f3:ec:ed:f1:b2:
         8f:f5:ea:d6:50:96:8a:b5:df:29:f2:35:81:97:7f:a5:dc:ea:
         55:af:f0:bc:3c:56:9b:18:e3:e0:a8:bb:b8:7a:dd:2a:e4:31:
         a9:23:92:d3:c3:d3:2f:37:99:65:a9:a9:46:9d:bd:81:cb:e7:
         ed:8c:42:07:69:78:d7:85:98:80:ba:8b:5f:20:c0:5c:04:53:
         13:5a:f2:28:e4:69:1d:c5:ff:77:9e:ec:d5:73:fa:80:b1:81:
         f4:83:48:10:75:7c:15:9d:47:3a:e2:ad:72:c0:c7:a7:8e:e7:
         61:f1:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:34:39 2025 by rpki-client