Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f32302d3230203d3e203131393231.roa
File:                     3230312e34392e302e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          G98XOqYXWqdukjfFNwQqS8MbrrQzO0oA3i5HcBdzt0U=
Subject key identifier:   76:EB:07:B2:74:4F:40:AD:78:40:98:3D:62:44:C0:A9:EA:23:1D:B6
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       5C4F4CF55A8D0DAD1A8827E363E20C32356382E7
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f32302d3230203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:38:37 +0000
ROA not before:           Tue 06 Aug 2024 21:33:37 +0000
ROA not after:            Tue 05 Aug 2025 21:38:37 +0000
asID:                     11921
IP address blocks:        201.49.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4f:4c:f5:5a:8d:0d:ad:1a:88:27:e3:63:e2:0c:32:35:63:82:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:33:37 2024 GMT
            Not After : Aug  5 21:38:37 2025 GMT
        Subject: CN=76EB07B2744F40AD7840983D6244C0A9EA231DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:9c:73:5c:79:a8:7a:fd:a5:ef:e7:20:0b:
                    9c:6f:a0:fa:2a:8b:6b:61:ac:43:b5:83:29:10:b3:
                    b6:68:78:d9:3d:97:0d:7e:90:9b:12:35:df:2b:bf:
                    09:16:5a:01:b5:43:3a:60:6b:90:71:03:e7:1f:aa:
                    a6:3c:bf:45:d3:8f:06:e1:35:f1:3d:e0:0d:ee:a6:
                    6d:a6:2f:19:6d:97:eb:0b:80:b7:83:c3:26:51:1b:
                    ce:19:32:d1:d1:d6:01:70:ab:b1:46:c4:e9:22:e9:
                    41:f2:3e:2e:d9:f1:07:ca:07:c1:65:7d:86:0a:68:
                    64:91:fd:ed:67:f2:71:42:d3:6e:32:a0:86:25:a1:
                    3e:cc:ab:5e:b2:66:36:d8:41:64:f4:d3:53:9d:b9:
                    01:26:08:bd:16:13:fe:c0:be:e3:82:4e:ce:00:e5:
                    05:91:29:5b:cc:76:01:01:ff:10:95:eb:a1:44:3a:
                    6b:ca:7b:f1:1e:99:ce:ad:07:cc:c6:e9:58:50:84:
                    2e:17:76:4f:e8:b9:6e:88:ab:95:31:f6:f1:93:ef:
                    37:af:5a:09:d4:ac:eb:b4:69:34:9e:fe:96:3e:66:
                    47:f3:2d:98:fd:82:6c:de:78:d1:01:6f:ff:24:52:
                    f5:d8:a2:a0:65:ec:ca:b2:e0:41:86:f8:71:a9:63:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EB:07:B2:74:4F:40:AD:78:40:98:3D:62:44:C0:A9:EA:23:1D:B6
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:ca:4c:5a:38:df:2f:d0:83:93:15:a6:20:1a:74:ff:81:
         87:a1:a1:91:9a:9a:03:b5:ef:42:dd:d3:95:44:44:a1:64:1b:
         25:c5:40:40:9a:cd:77:2d:e9:9a:4e:e7:b9:73:9e:26:30:0a:
         46:3d:b0:47:60:55:85:08:8c:a7:3b:1a:7e:40:29:d8:2d:1e:
         d6:9b:da:a2:94:f6:d1:4f:dc:5e:5a:68:bf:d3:ce:2a:52:d8:
         a9:ee:c6:c6:c0:30:c4:c4:08:79:b6:9c:ce:e8:e6:5b:9c:fa:
         8c:b4:c9:e5:1c:48:c3:57:7c:98:01:95:fb:c2:11:8e:40:5b:
         5e:39:e6:2d:84:e2:f5:57:cf:80:c4:81:74:9b:8b:76:2f:49:
         cd:60:49:de:e7:39:6c:a0:a4:3b:fb:3c:e1:dc:55:04:a9:a6:
         b4:4c:14:89:60:ca:af:e5:ef:7f:6e:fe:2a:a8:f3:72:ea:66:
         f6:bc:13:78:2c:b5:46:22:0b:cf:dd:ce:1f:0f:c0:b5:b5:24:
         a5:7b:cd:86:57:90:1d:0b:7b:e5:bd:f5:21:eb:82:c2:00:45:
         bf:3d:54:1b:f8:cd:4c:6d:94:5d:96:bd:87:08:2f:70:4f:8a:
         68:9e:dd:c7:6a:a1:a7:6d:18:41:56:92:78:bc:85:a2:da:87:
         75:2c:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:34:07 2024 by rpki-client on console-ams.rpki-client.org