Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e34322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          DEP4qSSggUFbM6hb8/qMfeQOIE1Xmfolv18SQlZZ0s0=
Subject key identifier:   12:B1:EE:62:0B:00:A6:48:00:03:7B:5B:AA:CD:E3:4E:0F:8E:74:C9
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       6FC39EC7931A483B3CC42A0614EFDB96A2C6C307
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        201.49.42.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c3:9e:c7:93:1a:48:3b:3c:c4:2a:06:14:ef:db:96:a2:c6:c3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=12B1EE620B00A64800037B5BAACDE34E0F8E74C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:59:57:2b:89:c0:4e:48:03:1f:c9:5c:62:
                    bb:be:11:91:bb:59:f4:ba:51:08:00:c3:aa:59:1d:
                    c8:47:92:6b:c1:bc:7b:80:39:8c:d8:8e:ac:dd:b3:
                    45:f5:8b:63:31:e2:b4:e3:c0:84:62:af:bc:07:32:
                    c9:25:f3:d7:40:34:8b:6f:f8:f1:6f:ba:2a:a5:3d:
                    24:4c:50:b4:86:4f:14:2e:6b:81:a8:2e:2d:00:1e:
                    23:f0:16:c2:f1:1b:8f:f5:08:9c:1b:4f:ec:b4:f1:
                    08:e3:b3:95:1f:75:06:b5:b2:fa:b2:d3:9e:1e:cf:
                    5f:16:81:19:26:8d:98:ca:0a:60:37:29:79:16:40:
                    b0:07:9d:02:84:6d:f1:cc:56:db:b8:fd:77:37:b0:
                    98:e3:6b:8c:f3:82:f5:da:03:fc:db:a1:54:b1:de:
                    df:62:0a:fb:10:3a:c4:b8:60:35:15:0c:ed:31:ba:
                    10:e4:b0:c4:e9:20:3c:57:82:a6:3e:c7:97:4f:b8:
                    48:2b:66:77:04:a8:08:2a:fa:e8:19:3f:96:98:cb:
                    19:0e:c2:ea:fa:3f:52:3f:e6:5c:7e:20:5e:65:a0:
                    e4:5f:7e:54:01:ef:ce:3c:4f:8f:11:54:ea:79:83:
                    f1:bd:99:82:22:82:fb:ff:37:30:c1:ca:19:e1:f8:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B1:EE:62:0B:00:A6:48:00:03:7B:5B:AA:CD:E3:4E:0F:8E:74:C9
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:48:3f:68:1a:d8:82:92:3c:a4:26:af:9d:b0:cc:b2:1f:e5:
         51:57:20:18:0a:f8:d7:7a:ae:3a:24:79:11:3b:f1:97:de:e4:
         45:34:52:fc:16:97:87:6a:e2:69:18:47:81:6d:b2:55:23:f0:
         d4:d1:71:a8:36:9a:16:fc:1e:d9:0e:b2:ce:f9:90:fe:1f:31:
         03:b5:4d:b1:f6:19:99:04:0f:ae:e6:fb:2d:15:ce:2c:91:7d:
         87:49:18:cd:8f:e8:34:1c:59:7c:5b:9d:53:3e:2d:fe:c4:24:
         6c:41:74:8b:c4:f3:ea:d7:1e:5a:2f:9d:6c:44:36:b3:30:fa:
         98:74:3e:00:78:f2:e1:16:52:f8:f8:02:b8:2b:35:74:15:b4:
         86:4c:c3:87:0e:f8:d6:8b:21:8b:c8:48:dd:0d:cc:ed:ad:dc:
         2d:ba:20:a9:83:f5:9e:ea:c8:d9:af:44:fa:42:13:8d:3d:df:
         c4:9e:51:ca:8a:43:d3:84:18:8b:5e:45:ec:34:2d:8e:91:bd:
         b5:14:ca:4c:87:b2:a8:27:b6:67:f1:80:5d:e8:60:ec:65:53:
         32:7c:55:cb:3e:41:92:9c:67:80:a0:a1:71:d5:55:cc:c2:57:
         b6:29:da:24:87:d0:68:5f:2b:9d:4a:a8:98:2a:5c:4c:76:fb:
         9a:4d:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org