Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          NdWrFUAoQzrqhTNhEvFz6X4Tsns92MV0ZteCEnkySiA=
Subject key identifier:   D3:19:B7:01:B7:2C:15:F7:31:93:08:78:1E:64:9B:A9:22:CF:01:09
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       64F37E0EA0C5B68A798D8118F5B5BBA04E967B20
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        201.49.0.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f3:7e:0e:a0:c5:b6:8a:79:8d:81:18:f5:b5:bb:a0:4e:96:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=D319B701B72C15F7319308781E649BA922CF0109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:28:98:b4:34:1d:ed:68:24:63:9d:b2:eb:a4:
                    b4:68:ca:33:8e:84:9c:82:ce:df:67:1d:ff:e9:a3:
                    ac:c4:4e:25:7d:dd:41:70:07:59:65:fc:3c:62:1f:
                    0b:f1:dc:fc:3f:58:e9:54:1c:9f:2c:e5:df:ab:8c:
                    09:ab:ba:39:ee:6c:70:a0:d4:60:cb:3d:2e:f1:0e:
                    8d:04:2e:1b:b4:13:f9:82:be:0a:3b:db:70:d2:b0:
                    a9:46:84:91:8b:c9:16:1d:4c:56:e9:20:85:12:63:
                    45:15:0b:b3:82:1e:ce:60:31:05:f9:5a:ce:f2:9d:
                    56:4d:8d:79:0d:77:f1:d3:08:12:10:f1:cb:e5:40:
                    e1:c5:cc:97:cd:94:df:6a:24:de:d6:58:1a:cc:01:
                    1f:e6:05:32:1f:5f:19:3b:dc:e1:43:d8:9a:7b:4c:
                    0c:20:64:cb:ac:10:0c:3e:b1:17:c2:d2:f2:e7:c6:
                    e8:c4:bf:97:1a:b6:24:8a:d7:d0:7f:58:62:4b:40:
                    4a:6d:f8:36:26:bb:aa:e4:1a:b4:fa:d2:c3:ec:bc:
                    87:df:3a:45:61:48:7b:35:99:65:dc:d2:59:2f:39:
                    c9:6f:ce:42:ef:3f:24:9e:1e:64:3a:06:fb:96:58:
                    8a:30:db:72:08:5b:1a:1a:e0:0f:23:a1:81:d1:54:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:19:B7:01:B7:2C:15:F7:31:93:08:78:1E:64:9B:A9:22:CF:01:09
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:dc:a3:5b:76:c7:1b:17:9b:ff:93:1a:81:2e:48:28:bf:a8:
         ea:d4:04:a8:27:c8:cb:a5:25:e1:21:f0:b9:b4:38:73:a1:0f:
         c5:c6:0c:0b:ba:44:95:68:80:bf:28:06:b7:05:14:00:f3:36:
         79:70:e7:7d:1f:ec:6c:75:8c:e2:87:99:54:e6:6e:c4:c9:68:
         c9:41:74:0b:56:3a:c9:de:66:98:13:9e:bd:0f:5a:cc:0f:59:
         96:f4:1f:d7:71:e2:0c:77:d1:49:9b:34:bf:eb:38:80:be:f5:
         0b:07:ec:ea:b0:dd:d9:01:7e:b4:fa:dc:2a:fe:69:bd:9f:6d:
         54:c2:b7:1a:3b:a3:31:b7:db:6c:d5:52:2c:ec:29:6b:5c:f0:
         91:01:19:4c:3e:30:92:bf:70:88:c2:71:71:af:2e:3b:63:e5:
         45:7b:8d:8b:54:c0:28:df:c0:73:5e:7d:49:c8:58:66:47:bc:
         0b:08:2d:97:e5:2d:eb:75:06:f1:35:1c:66:f1:3f:38:74:7f:
         75:b1:e8:cd:32:64:70:cb:bc:64:11:b8:ec:cb:90:dc:8c:1f:
         72:00:54:2a:9c:66:57:0f:4c:ab:85:b8:e2:b8:a1:eb:31:37:
         69:cb:0e:9a:82:01:d5:d3:ad:68:fb:bc:a4:fc:68:7d:06:ac:
         be:e4:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org