Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37362e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          SkBPsI0dgrL3h7Ry4YV32tTum4s20+NpaOBn12CxKEU=
Subject key identifier:   05:52:43:A2:4D:81:C1:4A:55:26:77:1B:D5:69:2D:B4:84:D2:A3:11
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       04AAA837452C9B8E956B67E3A06BE960686AF084
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        200.233.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:aa:a8:37:45:2c:9b:8e:95:6b:67:e3:a0:6b:e9:60:68:6a:f0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=055243A24D81C14A5526771BD5692DB484D2A311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:86:82:bd:fa:a8:6c:b8:04:26:2d:50:df:
                    81:6b:4c:5e:32:4b:ca:7f:43:e0:80:f5:a1:78:1a:
                    56:e5:4e:b0:a6:a7:48:08:42:3e:24:59:ff:97:a0:
                    b2:59:c4:f3:6e:cc:73:8d:0b:1f:0c:47:fc:e1:83:
                    8f:51:5d:0f:de:61:39:dd:e4:80:85:45:13:e4:c4:
                    9b:9a:cf:95:36:95:24:f9:1e:b9:ee:3b:c6:b4:08:
                    e6:95:10:b8:e0:9f:81:a7:01:03:4e:52:03:3d:1f:
                    ae:2a:41:55:f3:ac:db:02:11:f7:42:ee:ae:f1:0b:
                    63:b4:0b:4c:ca:3e:01:b8:b1:73:2f:62:fe:d7:8b:
                    84:0b:40:1d:dc:61:a4:88:eb:05:4b:e8:72:af:fa:
                    53:60:70:4c:fb:49:ff:0d:ce:1a:83:6d:a6:d5:85:
                    f1:e9:90:29:99:30:da:53:c3:fb:bf:7c:9d:0a:7b:
                    1b:6c:37:28:52:b3:28:96:08:0f:54:db:ff:ee:16:
                    76:06:0b:35:f5:30:5d:90:73:85:3b:34:bc:fe:76:
                    c7:d2:ee:fc:94:8d:88:4a:67:5c:f2:b6:d9:97:df:
                    9f:19:29:9e:e3:54:cd:67:e1:df:7b:52:61:4b:c6:
                    9d:08:32:d7:f3:38:c4:c9:0e:ba:60:10:18:19:7a:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:52:43:A2:4D:81:C1:4A:55:26:77:1B:D5:69:2D:B4:84:D2:A3:11
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:76:f6:4a:f7:82:9b:b6:cd:9b:37:e3:3a:30:9a:b1:c6:5a:
         74:85:bd:cf:9e:7e:73:46:8e:0c:49:fc:50:7d:a7:b1:c8:f1:
         98:93:2e:4a:9e:13:a6:c8:79:49:70:fe:d0:29:96:f6:a9:3a:
         20:33:5f:88:cc:1e:52:5c:33:9a:16:48:77:27:e6:cc:d7:14:
         e9:eb:01:bf:06:9f:4e:e2:f6:3e:f2:e6:27:e9:25:75:38:6f:
         c1:88:68:64:14:67:44:0b:6e:54:56:32:66:22:da:a1:dd:97:
         d5:a4:c9:fd:33:a1:04:6a:b2:dd:a9:04:ea:10:68:06:c5:4b:
         18:09:20:ef:19:c6:ca:b7:02:4b:b1:0d:43:8c:e7:59:a4:48:
         33:17:ea:41:72:c4:52:2f:80:97:74:45:96:ff:e0:68:31:a9:
         42:52:3e:0c:b7:3b:46:f0:85:d7:74:41:96:2a:15:d0:3f:76:
         ce:54:0d:bc:45:d1:d1:00:cc:2b:a0:b8:3e:94:5b:eb:13:70:
         1b:4e:be:17:0d:bb:a0:52:71:fc:1d:ad:76:9b:5a:dd:bb:81:
         0a:76:f4:0d:36:18:35:7a:df:00:1d:ad:f4:77:2d:6d:06:5a:
         62:bb:4c:23:8b:66:10:09:b5:25:3f:42:f3:fd:74:c4:e2:c1:
         76:97:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org