Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          EOz6fcaRQCJ750wtwX8yYoRil2ka/nma1VEXaPnR8zk=
Subject key identifier:   45:AB:48:DE:6C:88:76:0A:7A:A3:57:BD:0B:3E:12:AC:5F:36:B1:44
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       17C3963FCD1A814402F215ACC289E95738DD96ED
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        201.49.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c3:96:3f:cd:1a:81:44:02:f2:15:ac:c2:89:e9:57:38:dd:96:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=45AB48DE6C88760A7AA357BD0B3E12AC5F36B144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:52:68:16:ac:08:6a:8e:af:cb:2e:c8:ce:09:
                    66:87:26:64:2a:66:16:42:2a:ed:59:24:81:6a:43:
                    f2:22:4c:aa:38:4e:96:03:11:c7:e2:3f:40:8c:1c:
                    9c:94:1f:3d:07:21:3d:12:80:71:70:bf:2f:bd:f3:
                    ab:23:8b:cb:a8:24:da:83:1e:c5:8f:8e:91:97:78:
                    f0:d4:7f:2e:cf:1b:30:0d:e2:6d:a6:c9:3d:e6:e3:
                    6b:94:a9:2e:06:96:3c:e0:e7:bb:dc:9e:7d:05:24:
                    50:4d:f5:fa:a7:7e:87:15:ad:a5:ae:ec:83:d8:72:
                    2a:79:6b:d5:31:6c:37:fb:07:e6:9b:7a:2a:21:5d:
                    fc:a0:75:88:61:08:55:5b:86:33:02:6f:5d:5d:d4:
                    f1:67:7a:9d:e8:10:40:69:1a:9e:ac:20:eb:99:e7:
                    ca:e4:dc:65:e2:ce:78:cc:90:da:f4:c8:cf:08:52:
                    51:b4:4a:d0:f8:ea:68:1a:05:0b:3c:f8:c9:0e:68:
                    9c:fc:c5:9f:57:38:df:1b:df:9b:98:b2:f9:39:54:
                    75:d0:e0:2b:7a:f1:ee:7d:67:a3:09:70:97:92:40:
                    24:1c:90:18:6d:e7:23:53:4a:b1:63:26:40:bc:7c:
                    23:e6:0e:0b:cf:56:74:82:d0:94:75:b7:b8:ca:7a:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:48:DE:6C:88:76:0A:7A:A3:57:BD:0B:3E:12:AC:5F:36:B1:44
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:8d:43:f5:a8:f2:6a:b6:9e:67:7e:72:3a:95:2a:a9:5d:
         ce:ef:4f:cc:7d:21:96:5e:e8:3e:f1:b5:71:97:be:97:46:d0:
         50:91:4c:16:21:b2:63:25:c4:d3:07:7a:c1:14:76:42:e1:95:
         a8:dd:c9:a0:66:74:78:d5:a0:9c:8c:1b:4e:3b:c7:33:6b:24:
         af:f8:fb:4a:fb:d6:ec:69:82:4a:5a:aa:06:32:02:ab:80:1a:
         f5:2a:0b:fc:55:a6:e5:5c:bd:23:bd:d2:81:2f:0f:d9:b3:2e:
         99:73:ac:0a:f1:35:4a:5d:68:42:c0:d6:ad:8b:6c:b7:af:72:
         1d:0e:3d:61:64:28:d3:fb:03:82:04:4b:31:0d:5f:ac:10:95:
         ae:59:dc:62:23:e1:57:22:0a:29:a1:94:21:91:7e:5d:b4:91:
         0c:00:c8:8b:e2:b4:83:0a:77:9e:3d:53:8e:2a:d7:cd:34:d5:
         a9:34:43:4c:e0:04:3e:60:73:30:cb:11:a3:a8:8e:27:42:d6:
         85:06:01:b2:48:68:c8:b5:40:cd:78:17:4c:f4:01:a3:23:5e:
         05:26:9c:3a:9b:02:d6:45:f7:80:3c:0a:8d:cf:e0:6f:f6:53:
         33:35:cd:51:23:62:a6:21:d7:66:e6:fa:b2:2a:e1:8b:43:16:
         4c:f1:f8:5e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUF8OWP80agUQC8hWswonpVzjdlu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDNaFw0yNTA0MDMyMzIxNDNaMDMxMTAvBgNV
BAMTKDQ1QUI0OERFNkM4ODc2MEE3QUEzNTdCRDBCM0UxMkFDNUYzNkIxNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUmgWrAhqjq/LLsjOCWaHJmQq
ZhZCKu1ZJIFqQ/IiTKo4TpYDEcfiP0CMHJyUHz0HIT0SgHFwvy+986sji8uoJNqD
HsWPjpGXePDUfy7PGzAN4m2myT3m42uUqS4Gljzg57vcnn0FJFBN9fqnfocVraWu
7IPYcip5a9UxbDf7B+abeiohXfygdYhhCFVbhjMCb11d1PFnep3oEEBpGp6sIOuZ
58rk3GXiznjMkNr0yM8IUlG0StD46mgaBQs8+MkOaJz8xZ9XON8b35uYsvk5VHXQ
4Ct68e59Z6MJcJeSQCQckBht5yNTSrFjJkC8fCPmDgvPVnSC0JR1t7jKerSJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQURatI3myIdgp6o1e9Cz4SrF82sUQwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzMzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAckxHjANBgkqhkiG9w0BAQsFAAOCAQEAm8+NQ/Wo8mq2
nmd+cjqVKqldzu9PzH0hll7oPvG1cZe+l0bQUJFMFiGyYyXE0wd6wRR2QuGVqN3J
oGZ0eNWgnIwbTjvHM2skr/j7SvvW7GmCSlqqBjICq4Aa9SoL/FWm5Vy9I73SgS8P
2bMumXOsCvE1Sl1oQsDWrYtst69yHQ49YWQo0/sDggRLMQ1frBCVrlncYiPhVyIK
KaGUIZF+XbSRDADIi+K0gwp3nj1TjirXzTTVqTRDTOAEPmBzMMsRo6iOJ0LWhQYB
skhoyLVAzXgXTPQBoyNeBSacOpsC1kX3gDwKjc/gb/ZTMzXNUSNipiHXZub6sirh
i0MWTPH4Xg==
-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org