Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e32302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          tAookXEMtadiAfARnGxQPDhDY+saEn6SB7ydP9tVb2I=
Subject key identifier:   1E:59:93:8E:E2:16:38:78:8C:EE:08:2E:1E:F6:31:DB:A6:5E:25:B5
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       6CF36B35C61C0A7950F81FE8B8090CB99207312F
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        201.49.20.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f3:6b:35:c6:1c:0a:79:50:f8:1f:e8:b8:09:0c:b9:92:07:31:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=1E59938EE21638788CEE082E1EF631DBA65E25B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:c9:fd:c0:5b:0c:ec:30:35:61:cc:f9:4d:
                    ec:f6:42:06:93:e1:b7:f8:17:e2:d1:d3:bb:d1:7e:
                    27:04:e1:de:ab:21:d5:02:2e:d2:d9:4c:0e:ed:5b:
                    84:01:a9:b4:31:76:ba:7c:63:56:ae:be:b0:62:fa:
                    84:45:1a:4f:21:8b:ee:5a:d7:94:79:28:7d:fd:19:
                    7f:16:e1:b5:47:64:fd:0a:67:99:60:46:6e:8e:34:
                    b4:91:eb:a7:cd:79:3f:25:5d:78:5f:97:83:19:a9:
                    3d:9b:55:21:24:0c:f5:62:30:e6:d3:5c:0e:36:26:
                    05:af:b9:aa:f0:58:18:ad:f3:4f:a5:22:96:4b:0a:
                    37:99:0e:92:1e:17:2f:25:4e:3e:d1:ef:e9:7c:4a:
                    d9:7b:6b:37:b2:95:41:9f:db:8a:a3:fc:e8:a1:1f:
                    bc:2a:6e:db:62:85:6d:93:c4:39:d3:76:5f:2d:b7:
                    a3:b4:41:f4:e8:54:ea:38:87:90:e3:b0:71:66:a6:
                    f6:44:f7:fe:e1:55:7a:fa:49:6a:47:91:7c:65:c6:
                    52:1c:86:9a:e2:da:c1:b4:cd:0d:12:01:08:5e:05:
                    2d:ad:0a:d8:3b:28:4d:2e:5c:a2:b2:9c:fb:84:6b:
                    9e:dc:81:58:53:b1:38:72:29:56:ed:0d:fa:36:97:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:93:8E:E2:16:38:78:8C:EE:08:2E:1E:F6:31:DB:A6:5E:25:B5
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:cf:dc:98:30:22:05:05:13:ab:e8:f8:ae:39:05:2d:5c:
         de:c0:9e:91:9a:53:04:24:eb:9a:35:55:c5:84:a3:94:d0:20:
         8b:23:f5:e7:00:6b:b7:67:54:b8:c5:40:53:cb:bd:53:fb:6e:
         82:21:92:75:56:2f:32:87:ad:3a:a7:67:0b:b7:36:65:e1:55:
         d9:87:21:dc:d6:6e:1e:fa:0d:53:cb:7f:bd:26:f1:51:54:47:
         0e:d2:72:2e:0a:04:8a:e6:2f:d1:e0:6f:fc:5a:1c:ea:83:be:
         85:8b:88:b5:ed:6f:d5:08:3d:78:3b:a6:75:9d:46:32:c0:83:
         ff:74:25:a9:04:71:9a:25:cf:62:b8:86:4c:fe:51:49:a6:bb:
         77:4f:6c:e1:63:bb:2f:6d:9f:76:ee:41:f1:10:ba:36:51:fc:
         59:bc:1b:88:c3:08:4b:7f:d9:85:51:60:89:47:31:86:d1:51:
         f2:a0:09:11:d4:68:fa:11:7e:71:b9:95:e4:29:15:58:4f:15:
         eb:33:0e:c8:50:85:99:ae:c4:1a:06:25:d2:3d:e6:e0:9c:ca:
         d5:2e:84:dd:63:8f:98:97:19:5e:03:f1:78:ec:71:a1:e8:b4:
         bc:a7:a1:d8:37:9a:b6:91:4c:be:80:97:ac:f5:bf:fd:35:80:
         25:7a:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org