Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          ONIYDWLuqbbVTYDg0T5Y4TdWJUbdSAf9FJBtoAgwafQ=
Subject key identifier:   62:09:2F:2E:B9:0A:59:D1:53:2D:7A:F2:F5:FD:66:B0:26:8C:3C:1D
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       086E1DBAAE66932FF52DA19C2EE6BCA15FC091D6
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        201.49.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6e:1d:ba:ae:66:93:2f:f5:2d:a1:9c:2e:e6:bc:a1:5f:c0:91:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=62092F2EB90A59D1532D7AF2F5FD66B0268C3C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:ca:27:50:3c:94:d7:5a:f1:c7:09:a8:75:
                    3a:a2:c4:94:90:c4:4f:e5:eb:de:0f:b7:2f:ff:7d:
                    3a:8a:c4:d8:95:a4:1c:5d:d1:df:12:14:26:61:f5:
                    39:f9:be:0e:c0:8e:e4:c6:02:b2:03:fc:97:ec:c9:
                    04:79:4b:7b:f0:a3:bc:26:02:65:30:eb:b6:67:07:
                    e7:f2:fa:5a:8d:86:f6:4e:e8:6b:ca:b3:e3:4f:e0:
                    be:39:25:2d:e6:09:8d:1a:1c:f2:de:1b:af:49:cf:
                    17:b4:29:04:61:62:ad:5b:ac:0e:37:ae:07:25:82:
                    1c:9a:6b:aa:da:45:cb:55:f7:ee:93:3b:5e:98:82:
                    64:18:6d:3e:ac:64:c0:d6:af:7a:ee:f3:3c:8a:95:
                    74:36:29:ad:ae:23:c4:f5:4e:8d:c1:14:3e:34:1f:
                    9a:85:02:53:0e:e0:d7:e5:39:81:a1:dc:ed:10:6e:
                    f3:14:70:20:c5:da:df:e3:48:b2:2b:e1:f3:d1:1b:
                    13:25:9b:07:0a:54:c9:59:da:91:65:7d:a3:e2:58:
                    21:93:8a:7e:3c:2e:dc:e9:66:a3:56:d1:b4:81:65:
                    a9:56:cd:8b:28:92:aa:f7:47:5b:38:85:6e:47:11:
                    94:91:94:2c:62:c7:ca:ce:70:1d:ce:63:25:20:f6:
                    0d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:2F:2E:B9:0A:59:D1:53:2D:7A:F2:F5:FD:66:B0:26:8C:3C:1D
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e33382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:91:c3:33:af:5d:2a:cb:55:36:35:6e:43:3b:d9:f5:56:bd:
         cd:a5:4a:45:e5:d5:d0:df:04:3b:cd:ce:96:bf:a9:5f:e6:c9:
         f3:71:5c:35:74:fd:92:e5:37:31:2b:5b:1b:cc:ec:fe:28:9b:
         96:cb:dd:b9:fb:8f:ab:08:36:e5:df:ee:22:61:76:b2:bc:fb:
         fa:52:47:13:69:0d:27:0e:b2:88:0d:81:d2:ab:6d:1a:30:45:
         58:06:df:84:ff:1c:50:ac:09:0a:8a:fe:fb:b1:62:1b:c7:72:
         2c:8c:d4:37:5f:04:63:df:f3:45:db:63:25:dc:f8:26:3c:69:
         84:5a:9b:7f:3a:86:2c:f3:fc:62:d6:97:4f:22:d8:fa:d4:0e:
         af:c7:2e:f4:62:4b:dc:ea:fc:a1:c2:29:fa:1e:d9:5c:88:ae:
         25:02:da:17:ac:a5:81:f8:80:ed:12:29:d8:2d:35:fd:d0:9f:
         bc:16:8e:e1:4f:a9:b9:ed:af:7b:30:48:d2:02:6a:73:2e:40:
         61:32:b4:44:c5:c0:c9:4a:24:b4:87:05:f4:93:de:00:90:58:
         8e:16:29:1b:f5:78:98:92:5a:37:5b:56:60:d2:4f:f7:1e:b3:
         b9:47:fa:fe:99:e6:99:aa:bc:f2:c5:ef:aa:d7:b7:03:30:44:
         4f:35:19:a8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCG4duq5mky/1LaGcLua8oV/AkdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDJaFw0yNTA0MDMyMzIxNDJaMDMxMTAvBgNV
BAMTKDYyMDkyRjJFQjkwQTU5RDE1MzJEN0FGMkY1RkQ2NkIwMjY4QzNDMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprsonUDyU11rxxwmodTqixJSQ
xE/l694Pty//fTqKxNiVpBxd0d8SFCZh9Tn5vg7AjuTGArID/JfsyQR5S3vwo7wm
AmUw67ZnB+fy+lqNhvZO6GvKs+NP4L45JS3mCY0aHPLeG69Jzxe0KQRhYq1brA43
rgclghyaa6raRctV9+6TO16YgmQYbT6sZMDWr3ru8zyKlXQ2Ka2uI8T1To3BFD40
H5qFAlMO4NflOYGh3O0QbvMUcCDF2t/jSLIr4fPRGxMlmwcKVMlZ2pFlfaPiWCGT
in48LtzpZqNW0bSBZalWzYsokqr3R1s4hW5HEZSRlCxix8rOcB3OYyUg9g3TAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUYgkvLrkKWdFTLXry9f1msCaMPB0wHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAckxJjANBgkqhkiG9w0BAQsFAAOCAQEAkZHDM69dKstV
NjVuQzvZ9Va9zaVKReXV0N8EO83Olr+pX+bJ83FcNXT9kuU3MStbG8zs/iiblsvd
ufuPqwg25d/uImF2srz7+lJHE2kNJw6yiA2B0qttGjBFWAbfhP8cUKwJCor++7Fi
G8dyLIzUN18EY9/zRdtjJdz4JjxphFqbfzqGLPP8YtaXTyLY+tQOr8cu9GJL3Or8
ocIp+h7ZXIiuJQLaF6ylgfiA7RIp2C01/dCfvBaO4U+pue2vezBI0gJqcy5AYTK0
RMXAyUoktIcF9JPeAJBYjhYpG/V4mJJaN1tWYNJP9x6zuUf6/pnmmaq88sXvqte3
AzBETzUZqA==
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org