Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33342e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          MDKoydgs9rul4vXD9f3QciimBBfv0DFdmZ+noHg7tlY=
Subject key identifier:   09:BC:A3:08:9C:0C:DB:06:EE:92:9E:31:2C:A9:E3:58:80:77:06:DD
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7735D2DFF142A1C2F74CC89D95959EA43A9D053A
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        201.49.34.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:d2:df:f1:42:a1:c2:f7:4c:c8:9d:95:95:9e:a4:3a:9d:05:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=09BCA3089C0CDB06EE929E312CA9E358807706DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:2e:ef:08:4f:d5:bc:02:26:b5:f8:b0:50:
                    80:ce:99:53:43:76:9d:21:88:cd:bb:a5:0c:c4:de:
                    a1:f0:2d:d3:0e:5c:9c:e1:3c:8f:82:c2:f9:8e:2e:
                    73:4b:e2:ee:94:a3:1f:f6:86:78:6d:dd:34:20:61:
                    84:13:eb:22:a0:08:f6:28:4e:19:6d:b8:f8:1d:86:
                    75:63:b8:cc:40:e9:dc:84:ae:b3:8b:8f:34:2d:1a:
                    e6:1c:b5:d9:c9:9e:4b:8d:6e:99:19:30:09:22:0f:
                    47:09:e2:0d:c4:89:95:65:74:c7:be:7e:11:54:a1:
                    ed:6a:38:19:5e:58:80:4d:fd:89:8a:8d:ca:6b:96:
                    cb:8e:17:3a:4f:c5:85:0c:b4:19:5e:af:60:ed:19:
                    e0:ae:1a:26:48:35:1f:fe:d8:bf:a9:fa:01:81:98:
                    ed:19:2b:6a:8a:2a:ae:67:5d:0e:1a:48:2c:91:ab:
                    c1:f4:fe:34:e4:d2:12:2e:b8:ec:88:1c:a9:37:d9:
                    90:25:6d:09:ed:21:10:59:80:9e:a8:96:d1:00:cd:
                    dc:a2:19:b0:00:c1:1d:0b:4b:9f:58:d6:b2:65:ae:
                    e6:b7:3d:f4:a6:b2:96:df:73:6c:97:82:b6:a1:bb:
                    ec:a7:8b:9c:48:f1:af:48:5e:99:cf:ef:a7:c5:5e:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BC:A3:08:9C:0C:DB:06:EE:92:9E:31:2C:A9:E3:58:80:77:06:DD
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:1e:14:5f:e6:d3:e8:16:74:31:24:2d:67:d1:e0:08:99:
         a6:d1:ce:92:b1:13:e3:dc:5b:67:7f:61:3e:9b:bd:90:d4:7d:
         5e:8e:dc:5c:5d:07:7f:21:16:4e:e1:17:24:db:b4:84:d6:da:
         c5:64:78:3a:0e:81:05:f9:bd:ae:24:ea:ad:d2:02:a7:df:97:
         d8:7b:08:bd:1f:bd:b8:15:49:3a:03:61:73:98:39:1a:02:b7:
         df:fc:05:11:15:29:3f:de:39:25:04:28:30:ef:9c:83:19:9c:
         5d:ad:be:33:ec:0e:6b:01:f8:89:70:82:48:a0:8c:35:08:59:
         25:01:4d:40:68:fe:cc:b1:15:70:f0:f4:c5:57:aa:72:1b:2f:
         1c:68:9f:41:4c:1b:7d:68:54:28:77:bd:7a:84:8c:6e:e4:7f:
         7f:ea:6f:12:48:f3:a4:3f:23:b6:b2:33:ec:6a:d9:a2:30:4c:
         d9:e8:85:aa:51:c6:f3:df:98:c5:f1:de:2d:7e:b4:3e:99:37:
         d0:08:f8:95:f2:cc:59:d0:b5:65:fa:1d:b5:96:a8:6f:c6:75:
         49:a0:da:94:08:42:87:19:46:bb:c2:ab:10:95:c4:63:5c:fb:
         49:0c:52:37:27:f1:7c:32:9d:7c:b2:c6:80:b7:e7:92:f0:4a:
         6d:68:38:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdzXS3/FCocL3TMidlZWepDqdBTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDRaFw0yNTA0MDMyMzIxNDRaMDMxMTAvBgNV
BAMTKDA5QkNBMzA4OUMwQ0RCMDZFRTkyOUUzMTJDQTlFMzU4ODA3NzA2REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4i7vCE/VvAImtfiwUIDOmVND
dp0hiM27pQzE3qHwLdMOXJzhPI+CwvmOLnNL4u6Uox/2hnht3TQgYYQT6yKgCPYo
ThltuPgdhnVjuMxA6dyErrOLjzQtGuYctdnJnkuNbpkZMAkiD0cJ4g3EiZVldMe+
fhFUoe1qOBleWIBN/YmKjcprlsuOFzpPxYUMtBler2DtGeCuGiZINR/+2L+p+gGB
mO0ZK2qKKq5nXQ4aSCyRq8H0/jTk0hIuuOyIHKk32ZAlbQntIRBZgJ6oltEAzdyi
GbAAwR0LS59Y1rJlrua3PfSmspbfc2yXgrahu+yni5xI8a9IXpnP76fFXtbLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCbyjCJwM2wbukp4xLKnjWIB3Bt0wHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzMzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAckxIjANBgkqhkiG9w0BAQsFAAOCAQEAeF0eFF/m0+gW
dDEkLWfR4AiZptHOkrET49xbZ39hPpu9kNR9Xo7cXF0HfyEWTuEXJNu0hNbaxWR4
Og6BBfm9riTqrdICp9+X2HsIvR+9uBVJOgNhc5g5GgK33/wFERUpP945JQQoMO+c
gxmcXa2+M+wOawH4iXCCSKCMNQhZJQFNQGj+zLEVcPD0xVeqchsvHGifQUwbfWhU
KHe9eoSMbuR/f+pvEkjzpD8jtrIz7GrZojBM2eiFqlHG89+YxfHeLX60Ppk30Aj4
lfLMWdC1ZfodtZaob8Z1SaDalAhChxlGu8KrEJXEY1z7SQxSNyfxfDKdfLLGgLfn
kvBKbWg4QA==
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org