Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33322e302f32302d3230203d3e203131393231.roa
File:                     3230312e34392e33322e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          n7I0YgZO4KyJUXGZTVNIESrjs5ZqRnSYWzP2KMFQYTk=
Subject key identifier:   5D:40:8C:2F:30:74:F3:F7:0E:B6:3D:4F:9E:B9:E8:84:B6:99:A6:06
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       56F84D06011536383E3BBB5E17C7D84CFD153EFA
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33322e302f32302d3230203d3e203131393231.roa
Signing time:             Tue 06 Aug 2024 21:38:50 +0000
ROA not before:           Tue 06 Aug 2024 21:33:50 +0000
ROA not after:            Tue 05 Aug 2025 21:38:50 +0000
asID:                     11921
IP address blocks:        201.49.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:4d:06:01:15:36:38:3e:3b:bb:5e:17:c7:d8:4c:fd:15:3e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug  6 21:33:50 2024 GMT
            Not After : Aug  5 21:38:50 2025 GMT
        Subject: CN=5D408C2F3074F3F70EB63D4F9EB9E884B699A606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:3d:11:07:f1:95:36:d4:d9:ef:74:49:fc:
                    fd:58:5f:65:e7:99:88:d9:64:e6:6f:f2:96:5c:71:
                    93:c4:1c:57:9c:73:29:fd:b1:bf:16:3b:2b:b1:ab:
                    b7:bc:0e:53:5e:2b:ca:76:22:45:ce:a0:67:74:c6:
                    61:58:4b:70:c1:8b:44:67:08:08:13:7c:f4:c7:b9:
                    4b:a3:19:cc:f5:8f:38:0c:36:fa:2a:aa:97:fe:9c:
                    9c:39:6c:71:f5:63:72:71:f4:3a:fd:a3:8e:82:70:
                    25:62:f1:74:71:16:e0:6d:80:01:4d:52:00:db:57:
                    c8:3b:9c:96:db:77:a1:bd:4e:72:97:06:16:28:23:
                    d6:a4:e4:64:e1:9a:ef:5e:34:85:76:25:1f:34:d0:
                    b6:1b:8e:fe:71:0b:e7:62:73:dc:37:ae:ed:8b:f0:
                    41:ff:b6:5c:e3:08:32:48:8f:bd:a5:20:1d:3f:67:
                    8a:2e:89:21:73:7e:64:c4:9e:ef:2d:55:05:08:58:
                    a2:44:27:29:90:4d:05:8f:2d:09:35:f7:f2:7c:38:
                    31:fc:66:21:ab:c0:d8:f8:e2:98:92:c7:0e:2a:cb:
                    ae:fc:35:05:21:8c:f5:93:50:4e:5d:dd:6f:7c:93:
                    fb:aa:9a:a1:79:76:e1:ae:f6:83:27:dd:35:6e:47:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:40:8C:2F:30:74:F3:F7:0E:B6:3D:4F:9E:B9:E8:84:B6:99:A6:06
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33322e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:a4:90:e6:0d:85:5b:43:fa:ec:4c:5a:d2:03:dd:7e:cd:
         9c:e3:67:ed:9f:cd:18:eb:ef:1b:1a:ef:0d:ed:6f:fc:07:57:
         f5:7a:6d:f0:de:08:bc:ff:16:31:2b:ba:6f:b8:33:d2:6b:bb:
         94:5c:2b:fa:a3:af:37:48:10:e2:be:9d:dc:67:61:e8:37:19:
         e0:4e:06:cc:b9:74:83:1d:4f:73:47:a7:d6:48:aa:2b:bc:90:
         1f:eb:f2:fe:a6:dc:0c:d0:8f:79:88:1c:7e:3e:28:4f:5b:2a:
         a8:33:d5:91:8d:e3:8a:50:34:23:61:00:2f:4d:01:0e:61:59:
         55:2b:86:4b:6c:62:2c:17:1a:d1:a6:b8:46:f7:c8:c2:5d:f0:
         ef:3b:86:92:26:05:78:41:34:49:8e:17:7b:6b:a4:6f:6b:0d:
         bc:32:62:d8:12:71:d4:ba:9c:59:ea:28:88:1c:e8:77:93:d6:
         3e:a6:22:89:57:bd:a7:6c:70:f8:d4:bd:46:e0:6a:94:32:73:
         83:fc:33:2a:e2:94:c7:4b:43:a5:a4:5b:46:78:c2:bc:82:93:
         75:e2:53:50:90:51:6d:21:52:6d:e5:46:58:45:c6:f0:7a:ea:
         f5:2b:35:9d:90:ed:24:d3:02:9e:3f:13:cc:ac:86:f2:41:b6:
         76:6f:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org