Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31342e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e31342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          f/UGKWzH7RObspuOK+9j+uHA7KYSC6m5Yy3PVdsAslw=
Subject key identifier:   36:A0:0E:31:F9:3B:4E:F2:16:12:43:D7:5A:3A:31:39:E4:F4:52:34
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       19890D8A11221508D6D32B04CD89DD20522C5FCC
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        201.49.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:89:0d:8a:11:22:15:08:d6:d3:2b:04:cd:89:dd:20:52:2c:5f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=36A00E31F93B4EF2161243D75A3A3139E4F45234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:d7:13:eb:07:fe:c2:94:0d:93:7b:cb:4d:
                    08:19:25:f0:62:2a:f0:ed:bd:1e:42:a8:cf:f4:1f:
                    65:15:a4:9b:41:64:c6:a9:4a:56:c7:14:fb:5f:15:
                    06:09:67:8b:7a:00:18:4d:e3:c6:dc:6b:8f:76:b9:
                    34:f2:f5:4a:86:f7:c2:91:9d:85:01:45:6b:fa:38:
                    9b:d4:ae:95:6d:26:05:d3:ae:3c:18:26:e4:63:dd:
                    17:d2:bb:d1:28:57:78:2d:cb:b5:39:8d:1c:04:3f:
                    69:ab:7c:43:58:ae:05:72:0e:97:be:d3:a9:7e:a3:
                    2e:4b:cb:a5:d1:b3:ca:43:b8:7a:22:71:7a:c6:4f:
                    6e:69:24:f1:c2:e0:a2:fb:1d:84:de:84:8d:27:7a:
                    54:18:c2:d8:37:69:a2:3e:88:61:4c:f8:a1:31:07:
                    e8:69:2c:3e:1e:b7:89:d7:8e:d5:65:09:d9:41:78:
                    9c:bc:42:dd:82:4f:20:55:62:b3:77:ee:55:9a:1a:
                    e2:c9:a4:56:ef:9d:f1:58:d8:a8:f8:4e:9a:b5:36:
                    3c:c5:0c:94:a7:b2:89:dc:aa:19:d5:18:83:31:68:
                    3e:3b:b1:fc:b8:9c:9c:4e:64:1f:b9:27:bb:03:58:
                    76:74:cb:9b:aa:dd:64:4e:f9:b7:03:9d:b4:f0:27:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A0:0E:31:F9:3B:4E:F2:16:12:43:D7:5A:3A:31:39:E4:F4:52:34
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:f6:2b:66:a4:c0:1f:5f:f7:69:38:51:2f:54:ae:a3:6e:e0:
         cf:05:0c:ec:68:8e:7a:7e:07:ef:76:71:c6:45:50:ea:04:08:
         b7:af:6f:4b:3e:7a:60:5e:c5:22:ef:a5:89:78:e7:ad:0b:11:
         e0:7a:95:ea:0c:ee:4f:23:5b:e0:e0:48:ef:e4:02:da:75:38:
         26:70:e0:ab:a9:59:ae:70:1b:f6:89:39:f9:69:6d:3f:6c:7e:
         bf:69:05:13:c5:ef:41:36:36:05:f3:e8:f1:a5:a0:02:7d:3c:
         ed:a4:d8:bd:c1:5f:72:b5:e5:fa:0e:e6:3f:e5:64:a3:8e:c0:
         51:d3:20:3a:73:82:46:38:8f:99:de:ab:83:1f:b2:58:63:b8:
         48:48:fd:00:85:2d:27:ca:97:9a:ad:38:77:a1:79:02:9e:89:
         50:2f:4a:ff:00:c6:34:fb:bb:77:5b:24:64:c0:79:ea:93:c5:
         23:dd:43:53:77:13:49:f3:fe:bd:52:66:01:98:23:54:c5:24:
         d2:88:c6:7d:2e:e6:68:3e:05:62:e5:bd:d6:48:46:57:c2:41:
         31:ca:83:61:1f:d5:61:e5:ee:70:b1:2f:4d:95:10:50:31:36:
         e0:96:d1:46:a2:d9:7c:62:86:26:54:cc:6f:4e:6b:20:f9:36:
         09:82:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org