Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e31362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          eFqUXVZOwdyb5tNGpNYeixF4/63vPsXsmhLx3KxrWuc=
Subject key identifier:   51:91:71:18:DD:FE:12:E6:D8:B1:A6:D3:40:B1:49:21:93:83:70:F6
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4B1808DA959976CB5466DE8EEEFED4723A6FFBDB
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        201.49.16.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:18:08:da:95:99:76:cb:54:66:de:8e:ee:fe:d4:72:3a:6f:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=51917118DDFE12E6D8B1A6D340B14921938370F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:60:58:42:00:32:67:07:8e:a6:3c:44:eb:
                    b3:7f:e1:6e:1f:df:07:39:7e:a6:98:d4:d4:34:13:
                    56:ea:6a:ae:94:5f:c1:bb:e1:3d:9c:23:2a:0a:d9:
                    ff:d2:8e:fe:96:1b:ab:69:15:af:c0:03:a7:74:63:
                    a8:99:30:44:66:de:5c:2b:44:08:af:79:cf:53:e7:
                    37:7c:22:fa:ce:5c:c4:02:42:10:88:34:6b:e6:ee:
                    30:bc:d0:8d:3e:22:5a:68:4b:5e:ce:b9:8d:53:0e:
                    da:eb:ba:8b:cf:6c:e2:46:30:f3:3f:71:b0:ef:ca:
                    79:b7:3f:56:b6:fe:03:b4:fc:32:85:2e:aa:36:99:
                    7d:b7:79:36:c2:8a:b0:b1:04:95:42:3f:a9:71:2f:
                    98:89:3d:23:ca:c3:bd:ed:24:aa:b4:cd:0b:f8:6c:
                    00:85:12:05:c5:49:c7:36:ac:9e:9c:98:c0:0e:41:
                    32:78:86:1f:f7:3f:8a:a1:b1:6e:1c:2a:65:1b:4d:
                    a4:9c:4e:b4:be:12:a0:7c:ee:d9:3a:b0:01:b9:f7:
                    10:dd:17:f2:8b:af:c0:04:2f:92:1a:a4:07:af:d2:
                    76:26:f2:f6:e5:f0:b8:0a:06:3d:70:d9:e3:ae:87:
                    e2:84:3a:78:93:2b:2c:2c:fc:92:6a:6d:0b:9a:6d:
                    4d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:71:18:DD:FE:12:E6:D8:B1:A6:D3:40:B1:49:21:93:83:70:F6
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:07:25:d6:09:b9:9c:dc:a9:52:18:65:24:ee:63:7a:ce:
         3f:1f:72:93:ae:96:d2:99:54:4d:1d:8d:f3:fd:28:4f:aa:99:
         19:6e:7e:d7:ee:58:79:6b:67:6c:22:93:d7:74:00:f1:70:22:
         93:d1:77:02:72:96:34:c8:90:d6:98:5d:15:2c:19:d3:c4:1c:
         c8:32:a9:84:5a:89:64:8d:f7:b1:5f:09:3d:5a:79:6f:7c:36:
         4f:0b:c0:29:54:be:c2:7c:9a:2e:97:75:3c:2f:47:04:40:df:
         ea:49:ed:01:7c:e3:80:92:dc:0a:79:c0:10:47:f3:d0:a7:50:
         4f:84:26:7d:0b:d4:e7:c4:25:6f:aa:92:60:f1:9b:ef:a8:b6:
         1d:0f:a8:6a:f2:72:59:f2:7e:e3:66:36:8e:aa:b5:a4:07:5a:
         c2:e2:8a:ef:76:67:10:82:99:32:13:e4:fa:ed:b9:95:21:69:
         70:90:84:2f:ed:a2:de:5b:b7:a5:44:e1:6f:19:0e:fa:3c:7b:
         07:38:a0:db:34:ef:05:38:b0:7d:eb:d3:2d:e4:72:4b:ed:93:
         0e:6e:e3:1e:34:bb:de:bc:a5:65:12:04:9a:33:3f:f2:e3:bb:
         bf:12:26:0a:d6:b3:c4:ae:4c:9d:15:58:e4:01:0f:b5:bc:c6:
         55:f2:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org