Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          gpUxLgo80XxNgGXqxUuADw1fEZBH0Qx/JT3ARfxX6Dg=
Subject key identifier:   A6:BC:A4:F0:38:C4:51:30:E1:A2:EB:FD:C6:A7:10:C2:46:F3:4F:E8
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       62B5AA27175DF183F38AAF4ED1865AEF082627FD
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:41 +0000
ROA not before:           Thu 04 Apr 2024 23:16:41 +0000
ROA not after:            Thu 03 Apr 2025 23:21:41 +0000
asID:                     11921
IP address blocks:        201.49.36.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b5:aa:27:17:5d:f1:83:f3:8a:af:4e:d1:86:5a:ef:08:26:27:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:41 2024 GMT
            Not After : Apr  3 23:21:41 2025 GMT
        Subject: CN=A6BCA4F038C45130E1A2EBFDC6A710C246F34FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:be:d3:4b:01:da:c5:66:41:d4:82:67:d9:
                    be:a4:ea:dd:f9:fa:0b:87:79:53:10:b6:a0:d7:f5:
                    82:7b:af:64:a4:c8:ea:f3:54:9b:7f:c8:bc:c1:40:
                    cd:28:76:82:57:9f:fa:de:03:f1:aa:a4:c0:77:22:
                    d0:dc:c1:49:ef:35:98:ec:8d:a9:9a:0a:8a:7b:10:
                    29:80:92:22:c3:7d:f5:ad:cc:3e:b1:a5:aa:21:b8:
                    30:a4:42:d5:b4:f7:88:20:d6:4b:7f:63:24:48:66:
                    64:63:ba:9b:44:a5:65:74:a1:62:33:a0:c6:5d:42:
                    d3:f9:0f:6b:96:75:df:25:cf:9f:b5:be:20:0e:47:
                    93:30:66:2c:9f:b4:0c:0e:ef:d2:5f:d3:99:4f:12:
                    d3:ea:3a:d3:87:61:ce:54:ec:74:9d:48:d7:a6:13:
                    6c:81:02:6e:02:e1:f7:55:0a:06:f5:ad:c6:b5:c1:
                    20:fa:f1:33:bd:8b:b3:4e:37:88:17:72:f7:5f:1d:
                    70:0b:8f:36:e5:ca:de:91:2b:f1:fa:ac:52:bd:5a:
                    93:3a:b0:3a:6e:d7:21:18:4e:12:3a:05:5b:b2:25:
                    d6:68:6a:60:f4:65:b9:40:ff:61:e9:b4:8c:b7:80:
                    48:28:29:49:82:ba:41:0a:27:2e:4d:6a:b8:31:55:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BC:A4:F0:38:C4:51:30:E1:A2:EB:FD:C6:A7:10:C2:46:F3:4F:E8
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:64:e4:78:e0:ae:08:85:9d:29:2c:fb:da:ef:ea:02:f1:07:
         2c:4e:e9:3a:52:99:0b:3f:5d:19:85:6f:0d:bd:6c:f4:0b:4a:
         33:14:ec:12:34:84:0d:45:b0:f6:32:90:44:6a:a6:ca:43:7c:
         98:ff:5a:38:3d:2a:88:a5:d8:65:0a:22:fb:20:43:f4:9b:fc:
         a1:3e:62:c9:b5:7a:fe:d2:3c:a1:6d:d2:7a:6a:6c:e7:7f:84:
         cd:05:0c:45:9e:ed:7c:4d:71:d9:f6:fc:ee:71:6b:38:eb:6e:
         1a:63:bb:41:f1:f3:6a:11:88:52:18:dc:84:fd:39:00:80:ca:
         90:4e:89:55:75:17:37:6f:8d:1e:bb:36:cb:25:13:03:d3:b3:
         f0:72:9a:1a:c7:c0:00:c4:49:4c:88:a8:5d:3c:3d:fd:91:11:
         0d:54:4f:80:43:03:c6:c3:02:98:b2:e9:62:1d:4f:c2:21:c7:
         83:82:32:4a:cb:4a:6b:57:9d:b8:da:4d:95:72:7a:4c:6d:b4:
         03:be:2b:0f:02:5e:fc:16:00:56:52:65:43:88:39:1c:be:86:
         b7:11:60:06:0c:8c:c9:02:ec:00:68:6c:5b:bf:96:46:b1:ee:
         72:dd:92:a7:95:e2:31:d3:0c:65:53:0d:1e:0d:69:a4:ae:de:
         d1:69:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org