Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e31302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          QHh62YvAcr0NpZqgwk38opH7nUgzctZK68qeqL89vTs=
Subject key identifier:   D3:95:8A:B0:31:D5:42:65:F3:17:DF:D2:63:B8:68:AF:96:B0:C7:EA
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       18AFFD248AD00D186307DBB380FFFCB49AE3C662
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        201.49.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:af:fd:24:8a:d0:0d:18:63:07:db:b3:80:ff:fc:b4:9a:e3:c6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=D3958AB031D54265F317DFD263B868AF96B0C7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:33:1b:44:a4:14:ae:5a:82:98:e0:9a:58:
                    40:d8:7f:1e:90:79:5f:1d:42:7c:ba:3c:9b:7a:d7:
                    e8:b2:72:db:eb:1a:13:88:79:74:32:a8:71:93:35:
                    bb:ed:68:a9:b1:a7:45:9f:1f:71:43:0b:8e:4f:eb:
                    9a:9d:d9:93:59:91:00:9c:98:c5:48:60:2b:7f:4e:
                    d1:c2:78:c8:19:37:43:9e:1c:1c:95:d6:49:1b:fe:
                    e9:3a:10:fd:fc:5b:90:b2:34:04:29:1e:bd:d5:ee:
                    c2:66:9c:1a:60:dc:37:e3:74:cf:a7:bf:b1:5b:01:
                    5c:9f:6c:d3:82:20:3f:d6:07:6d:87:2a:c3:dc:de:
                    b6:6e:d5:c7:ca:e9:0e:79:12:af:89:14:22:c2:92:
                    3b:9a:8b:5e:7d:8e:da:1b:91:d2:c7:a0:ac:90:cd:
                    31:2e:8b:a9:ec:56:85:dc:f0:6c:da:58:03:0a:46:
                    6b:c5:0b:b5:67:88:2f:5b:11:30:9c:ba:7b:80:a0:
                    fc:67:70:6d:51:d9:a1:cf:3a:98:9a:d3:6f:71:6d:
                    3b:90:58:a5:87:fe:87:58:14:ff:ad:38:a9:cb:0b:
                    b0:c0:d0:96:d8:73:e1:cf:a7:9e:46:9e:25:0e:1b:
                    8e:3b:4c:19:29:b9:ed:63:6e:5d:65:d8:bb:d2:44:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:8A:B0:31:D5:42:65:F3:17:DF:D2:63:B8:68:AF:96:B0:C7:EA
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:6d:d2:68:19:9a:ad:7f:b5:81:be:d5:c8:2a:3e:82:a1:
         79:ff:6d:a2:28:c6:c2:25:f1:c7:01:ca:79:df:e9:73:83:b0:
         16:86:43:c7:30:e9:6f:60:8a:1c:15:a5:5e:74:a1:e4:23:98:
         42:9d:10:1f:d8:59:04:b3:c4:61:d4:c8:d9:32:1b:a4:0b:46:
         56:e4:b5:69:d0:66:27:9a:96:42:c4:c9:3b:7d:24:a5:0c:81:
         51:5a:9a:17:5c:fa:9c:c3:9a:16:57:23:8f:b8:78:8c:fa:39:
         9f:12:38:25:49:35:fd:31:4e:77:85:ca:b4:09:7e:87:5b:90:
         32:7a:cc:71:71:56:bb:2d:91:c6:ba:d4:07:1c:27:e8:77:e8:
         7f:13:4a:66:91:be:c0:68:25:91:96:30:bb:32:d1:4b:34:09:
         64:e6:4e:e9:34:2f:1f:ec:ed:8f:38:ef:f3:79:d6:72:a7:35:
         99:17:b1:f2:86:64:5e:9a:5d:89:6c:ea:37:7b:0d:7d:59:9e:
         b6:63:91:2b:29:d0:e0:d0:6f:b5:22:5e:12:73:8e:bf:ed:99:
         45:6a:93:f0:66:49:90:57:d8:6e:a8:bd:b2:26:89:31:8d:9c:
         e0:fa:d3:0c:ae:62:62:d9:8c:53:53:c2:2f:45:da:9b:66:4b:
         73:4b:a8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org