Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37342e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          TRWBRUEhTGP9taLZbxPiR2hAjUq1iII0sfBW3XiPB9s=
Subject key identifier:   04:DB:8D:1E:E8:11:B6:F2:11:76:5A:F0:16:9E:0D:5F:26:08:D9:55
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       2ED15B054A1855DB717025232A9F315690E0D4CA
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        200.233.74.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d1:5b:05:4a:18:55:db:71:70:25:23:2a:9f:31:56:90:e0:d4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=04DB8D1EE811B6F211765AF0169E0D5F2608D955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:f2:8d:c9:0b:b5:e7:3f:17:12:c3:ba:3e:
                    75:06:c4:df:ac:65:e2:60:c0:4c:cb:9b:37:61:f1:
                    6e:ea:8e:af:6e:8b:c4:ac:60:fe:e3:ea:f2:39:d3:
                    e6:1c:cd:92:d1:24:fd:5f:dc:4a:22:c7:9c:c6:21:
                    56:4d:91:02:f4:68:15:22:64:84:f2:66:7e:6a:66:
                    e5:93:6d:f9:ec:e0:80:2a:f3:0e:4f:ab:ab:c5:ff:
                    a3:62:1f:1b:f2:08:b8:8d:ad:70:2d:d5:c2:fd:03:
                    5a:f7:b1:61:c3:b4:80:37:56:8a:8c:fa:5c:ae:31:
                    0f:2f:8f:b8:0b:b5:87:39:f1:ad:63:d0:17:93:8b:
                    1e:e8:25:7b:5b:31:70:57:0f:9e:68:10:e5:45:f3:
                    12:41:4b:7e:33:65:4a:19:7a:a1:40:4f:71:f1:c5:
                    0d:6c:03:86:f4:80:de:ce:cc:c3:ad:7a:6e:2a:bc:
                    a9:23:fa:4e:6e:e9:be:78:00:29:7f:8e:10:2b:35:
                    26:96:22:8f:ac:d2:af:74:22:67:b5:83:4d:5e:52:
                    db:1b:11:1f:c7:70:21:96:e0:6d:cc:f7:5b:49:75:
                    a2:da:a0:63:a5:4f:c3:fc:79:6e:15:a4:9a:75:ce:
                    07:6f:23:e6:26:d0:84:6a:4e:fc:63:85:6e:e8:ff:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:8D:1E:E8:11:B6:F2:11:76:5A:F0:16:9E:0D:5F:26:08:D9:55
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:37:1e:58:e1:1c:d0:18:f7:12:80:00:eb:96:1c:08:f5:
         61:79:0f:8b:38:a7:0f:8d:66:e0:0f:89:08:ac:db:06:f1:c8:
         05:92:44:37:3e:1d:cc:80:c3:8c:e1:5f:68:4d:49:50:a0:e0:
         36:72:53:b7:66:6a:9a:a3:a7:dc:db:1c:20:26:e3:31:4b:6b:
         68:61:01:8a:a9:fb:0c:87:ba:ef:5c:db:a3:c5:56:c4:a6:04:
         ca:09:f1:52:1b:9e:c2:b1:ed:ac:96:d7:b0:c1:36:08:80:4d:
         b1:cb:a2:81:fe:7b:0b:30:9a:7e:d4:27:a5:8e:f7:f1:88:64:
         82:16:7e:79:42:ab:03:89:bb:08:8d:7b:64:93:1d:ed:9e:a8:
         9c:f8:d6:52:4b:ce:db:72:ef:0d:7f:44:d1:f6:83:c6:46:c9:
         cf:b6:b6:84:38:4d:46:43:50:94:79:88:e1:8e:9c:c5:ab:96:
         9f:65:63:e6:11:65:bc:eb:9b:8b:be:44:fd:3f:75:69:90:ee:
         c9:dc:2c:49:1c:66:24:53:9b:f1:3d:36:88:d7:6c:c7:ed:19:
         34:54:6e:6d:61:2c:9c:c3:56:00:a0:5e:c1:19:3c:f3:07:36:
         7d:55:51:d3:9f:18:80:28:b3:16:76:52:49:2b:a5:e4:95:1c:
         12:d4:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org