Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31352e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e31352e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          01AcDIZnR+RMwJTDViE4RaSG+93ETdC3W4qMBme16OY=
Subject key identifier:   44:EF:97:54:11:97:68:46:4A:0F:B8:23:F0:D8:45:EA:21:3E:55:16
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       0B17A5A32995A4545CF0EF973DDFF462CD1CB9B5
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31352e302f32342d3234203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        201.49.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:17:a5:a3:29:95:a4:54:5c:f0:ef:97:3d:df:f4:62:cd:1c:b9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=44EF9754119768464A0FB823F0D845EA213E5516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:26:b2:cf:f7:11:28:19:c0:37:c2:6e:d9:
                    c1:18:92:1f:66:18:be:66:a3:7d:2d:2f:30:b7:27:
                    8f:aa:fb:59:ce:cd:5e:bc:1a:52:6c:93:e7:54:2a:
                    73:4d:6c:0e:ce:b3:57:38:37:04:d1:ef:0d:c4:cc:
                    7c:bb:07:e2:23:70:bc:bc:c6:6d:3c:0b:9a:c6:8c:
                    52:af:1b:90:b1:6a:26:9d:df:ec:df:08:c2:76:db:
                    74:02:4d:bc:c0:33:2e:b8:d6:d4:af:6c:44:fd:47:
                    66:00:96:4d:40:c5:6c:f6:5b:8a:77:50:7d:79:4d:
                    0f:e4:d9:88:3a:c2:e0:ea:29:12:8e:f5:0e:0e:72:
                    e8:37:16:3a:69:94:eb:b1:1c:75:08:7f:89:bd:1b:
                    49:9b:fd:f2:33:7e:24:6f:08:30:0c:e7:e9:7c:f3:
                    9e:f4:08:5e:10:fd:ef:33:c9:ec:b3:05:d1:01:61:
                    06:1c:70:f4:a8:d2:1e:b3:04:3d:3c:e4:7e:16:23:
                    2d:59:1b:4f:ac:6c:7e:78:28:9b:e9:38:d5:5e:93:
                    47:53:93:23:5c:54:10:7f:35:bb:f8:2c:89:92:70:
                    04:b8:39:7b:b0:4b:b1:c6:15:c0:54:19:6c:8e:93:
                    b6:1a:eb:ed:ca:d2:38:d9:b5:c8:e9:30:c1:0a:59:
                    cb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EF:97:54:11:97:68:46:4A:0F:B8:23:F0:D8:45:EA:21:3E:55:16
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31352e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:bf:f4:15:f0:ea:b8:19:2d:4e:d0:5c:e5:f0:16:19:25:
         30:8e:f1:c5:d6:32:c6:53:cb:91:0e:a9:bf:27:14:b9:73:97:
         50:ad:f7:c4:e1:41:fb:25:a5:19:d2:65:41:de:be:42:e4:e6:
         73:6e:21:02:4f:75:16:50:f5:c1:8b:18:3d:81:94:1c:ec:f9:
         27:e5:64:37:56:7d:58:32:80:5a:5c:5a:90:bb:82:99:41:ea:
         43:68:4e:02:ad:ef:5b:b9:d7:11:e9:fa:7f:61:31:85:b8:e0:
         3e:3d:ec:9a:fc:61:26:88:f3:c8:df:4e:c3:7e:3e:02:57:79:
         a7:3f:27:93:e6:9a:d7:86:d7:26:45:92:b7:27:56:63:67:1e:
         ca:e2:0e:18:8b:11:c2:33:e1:43:d0:b0:ab:96:3b:e4:4c:67:
         4a:6d:f5:05:fb:08:dd:a3:4e:bb:ab:02:83:69:c4:d2:82:95:
         c5:2c:3d:57:91:12:d1:b3:0c:c2:6d:44:1c:cf:7e:9d:ec:b0:
         71:ef:75:77:a4:2c:17:77:31:f8:f9:72:0f:59:f3:95:8d:24:
         bb:fd:ac:df:e7:8d:97:32:69:f4:1b:2b:b5:39:c1:ca:79:6d:
         af:95:f7:f8:72:26:6e:75:ec:9e:9e:32:c1:2a:67:b5:f4:77:
         01:4f:d2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org