Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33322e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e33322e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          QqVhVMOKDo755/X9d4qKHfr929RNechyCXP5vX8fsWc=
Subject key identifier:   DB:4B:EE:AB:A1:E9:02:2A:21:47:25:B6:DF:77:67:0E:83:EC:4E:94
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       B8B57231C2396DD28D2F0F9FD4C370CC88A207
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33322e302f32342d3234203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        201.49.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:b5:72:31:c2:39:6d:d2:8d:2f:0f:9f:d4:c3:70:cc:88:a2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=DB4BEEABA1E9022A214725B6DF77670E83EC4E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:b6:1d:47:d5:b7:50:c3:6d:5e:21:a3:79:
                    d1:d5:4f:c6:2a:09:fd:d3:06:20:20:91:2a:9a:7f:
                    d4:dd:d2:2e:8e:b9:02:bf:bc:10:ad:25:93:cf:57:
                    95:b3:f5:0e:65:50:9b:55:da:3a:8a:44:c7:32:91:
                    fd:34:1c:f6:7d:a1:70:00:8d:38:45:73:b0:41:14:
                    d1:5b:d4:57:29:cb:50:f1:a8:d0:5d:43:2a:eb:e5:
                    60:f5:8f:18:31:35:60:41:54:43:a0:7f:e1:d2:20:
                    e4:dd:9d:f6:ec:fa:11:fd:ce:60:3c:b3:9e:52:53:
                    d9:62:7a:84:0c:ce:b5:80:73:07:9f:80:db:ea:52:
                    c6:8c:57:d2:cf:74:e8:4c:1d:0b:43:bf:8e:ee:45:
                    f2:72:e5:ec:10:3f:a6:a4:bc:93:98:7f:b7:2a:27:
                    d5:55:94:0a:b4:f9:40:f9:09:52:dc:cf:48:75:70:
                    e9:eb:b9:1b:00:f7:a2:61:bb:e0:20:35:51:ff:56:
                    e9:8c:96:87:04:c3:3f:f5:59:14:21:9e:7c:94:56:
                    5f:e5:04:0d:71:14:0a:7d:e6:e2:ec:3e:a3:77:ae:
                    d8:ed:db:d1:45:fc:e7:46:44:85:7e:6b:dc:88:e8:
                    e0:62:be:de:60:5b:ee:66:e6:ba:79:96:20:d7:26:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:EE:AB:A1:E9:02:2A:21:47:25:B6:DF:77:67:0E:83:EC:4E:94
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33322e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:36:33:4b:1d:1a:71:16:a1:47:a0:2a:47:82:6b:fe:21:
         5b:b9:1c:62:00:60:b8:47:b6:1c:23:6b:5a:c1:8b:92:ba:26:
         a8:2e:9a:93:b7:f3:07:32:9f:0b:20:ce:ef:c4:ff:6e:f0:23:
         e8:d7:10:9b:19:a6:22:f8:14:3f:23:d3:22:61:5d:44:f3:1a:
         7f:49:77:3b:7e:7b:5a:c9:e2:16:60:e0:c5:32:4e:02:19:e1:
         cd:72:15:a1:ef:67:b1:5a:4c:ba:e7:a4:9b:60:66:a9:73:1d:
         8a:d3:6a:70:0d:e9:b6:3c:80:a1:94:c7:68:c3:a2:d4:c9:a8:
         33:0f:77:d6:e1:50:8d:98:b1:17:0f:ec:ac:7e:95:3c:be:c3:
         15:fe:97:89:32:72:59:89:23:61:1b:9b:77:10:4e:89:1a:78:
         a5:7c:9b:47:27:3e:6c:40:12:ac:ac:f3:23:a4:cc:ef:63:52:
         dd:7c:7b:68:ee:6b:e1:b0:94:68:5f:64:36:43:11:cc:c9:a9:
         3d:3a:e9:ab:62:1e:52:32:f1:2f:4e:6e:ae:aa:d4:f7:42:96:
         ce:34:20:ac:28:f4:83:26:b6:a9:42:eb:61:3b:dc:00:c0:b4:
         1e:0d:66:40:97:1b:03:5d:ef:2b:18:07:08:39:07:a5:5e:3f:
         52:80:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org