Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e32382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          5sUwZTO/GrXLMQ3niT0MEKKyAufIsVG0aDdWnQS4mTM=
Subject key identifier:   AB:36:67:06:BA:1B:75:31:34:66:C2:97:DE:6F:A3:44:3C:AD:44:80
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       5A9D4F829998946D72ADE3CD8C0AA8FC3A474E23
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        201.49.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9d:4f:82:99:98:94:6d:72:ad:e3:cd:8c:0a:a8:fc:3a:47:4e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=AB366706BA1B75313466C297DE6FA3443CAD4480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:28:cc:e6:5e:28:67:8e:21:7f:53:95:d3:
                    42:d1:87:16:d3:59:df:36:b2:e5:41:33:6a:d3:04:
                    26:c9:4b:8f:48:dd:6d:e9:82:69:1d:6b:0b:f6:8b:
                    f5:fd:b4:6a:43:23:cd:53:46:d8:f7:e2:93:e9:c6:
                    1d:bd:06:b5:23:3e:0e:2d:81:ec:8c:e9:1c:04:79:
                    e7:66:62:57:72:62:fd:aa:7e:a4:bc:5e:06:91:45:
                    b6:93:d1:ca:9d:af:2e:ae:1c:af:00:2e:eb:5b:15:
                    c7:fd:19:02:af:55:ff:77:52:f3:16:7b:f5:b7:09:
                    c0:31:65:97:12:14:fb:3a:64:34:fa:4f:a7:e4:84:
                    1b:ad:54:99:bc:b7:b0:71:b6:59:dc:9d:1a:2a:e3:
                    21:61:bf:7e:7a:e2:19:1e:de:50:0f:42:ad:97:15:
                    a0:a4:77:f5:1e:03:3a:fe:7d:0a:8c:6b:11:a2:fe:
                    75:8b:08:5a:b6:79:d5:64:f2:fb:d8:b4:29:66:48:
                    7a:f8:37:b3:5a:48:5d:dd:2a:1d:d2:cc:b4:d8:22:
                    39:a3:c4:2d:eb:1b:d6:91:95:e0:ea:64:66:c7:d3:
                    1f:81:b5:42:bc:5e:3a:9e:ef:db:5a:49:2c:14:35:
                    cb:ef:33:2d:b3:48:d0:ed:c7:b2:aa:8a:64:bc:77:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:36:67:06:BA:1B:75:31:34:66:C2:97:DE:6F:A3:44:3C:AD:44:80
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:ad:23:55:6f:af:b4:43:f4:13:3d:dc:b3:67:54:33:83:46:
         ef:c8:59:0c:e0:5b:4e:c7:88:22:04:67:39:a8:2f:2a:f9:b3:
         49:e9:5d:7e:92:90:29:3f:ad:4b:f0:89:2b:3e:b7:95:c1:ad:
         71:8a:32:5f:15:43:66:83:2b:74:73:b9:08:f9:cd:c9:58:a6:
         50:93:6f:5c:aa:01:98:41:05:97:8d:0f:b9:2d:63:a8:79:ea:
         52:f9:19:b8:f0:82:56:be:dd:fb:04:1a:3b:ac:92:3b:21:53:
         21:fc:9a:54:65:4c:af:f4:08:64:55:df:1e:3f:7c:f2:46:63:
         73:9d:f0:41:19:65:16:da:e0:be:74:aa:17:b0:9f:d7:04:ab:
         66:80:b8:f6:be:bc:51:e4:7f:71:e8:e6:0f:2c:75:82:ad:c7:
         68:63:18:4e:b5:ce:38:56:e0:3f:74:dd:c5:32:63:a2:fb:31:
         50:3e:52:e8:77:8a:db:9d:12:76:85:b0:31:cd:6b:1d:fc:45:
         9e:dd:ce:7c:c7:af:01:7c:09:47:5e:6e:dc:3e:14:f7:ae:b5:
         f2:62:68:f7:c1:0e:c4:da:bf:ca:41:0c:df:fa:5e:98:13:28:
         0b:6a:b2:d9:23:4d:32:4b:31:13:72:59:77:98:a8:d2:49:be:
         be:8d:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org