Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e34362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          LZplq2siurprSfnDO2C4sY2Q9HC/V4NO+pShmcCgMzU=
Subject key identifier:   0E:75:6E:97:06:CA:28:06:72:1B:22:FA:CA:F6:80:F7:56:0F:AD:11
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       12067C0ADD9A1E41D1419E33F0045AB6C8F66802
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        201.49.46.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:7c:0a:dd:9a:1e:41:d1:41:9e:33:f0:04:5a:b6:c8:f6:68:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=0E756E9706CA2806721B22FACAF680F7560FAD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:a1:af:98:49:d0:85:7a:f7:86:4b:1f:9b:
                    59:f5:a7:64:be:94:2d:8c:08:a0:d0:90:d4:c6:06:
                    d7:02:b6:50:4c:a7:27:98:cf:48:80:cb:3d:b3:da:
                    ae:d6:61:d6:7c:e6:01:20:ad:7f:6a:fc:d6:59:08:
                    96:1b:e2:fd:fc:4d:b7:4e:f3:c5:f4:b1:b7:f1:7f:
                    c1:54:9e:15:03:59:38:5e:39:dd:2e:62:5b:b8:a6:
                    79:fc:99:7e:99:90:05:cd:db:c6:6e:80:e3:b4:44:
                    83:47:9b:89:14:6a:c7:13:f9:85:91:38:e2:b1:0d:
                    b5:31:60:03:e8:29:27:d6:79:f5:4f:de:2c:63:d4:
                    bd:6f:9d:43:06:59:97:fa:aa:b6:ae:a4:ab:73:70:
                    71:80:46:8a:3a:fa:32:f8:8e:23:53:a7:83:f0:f8:
                    f9:81:c3:35:f2:48:24:64:62:20:e7:46:c6:5b:e5:
                    5c:77:fd:a6:e7:fa:6b:9c:c2:9d:7d:f0:b7:6e:84:
                    9b:1c:4c:c6:8c:0e:77:df:11:38:81:7e:fe:85:25:
                    80:89:0a:76:07:4a:60:a2:4d:f9:40:3b:4c:a0:6e:
                    e4:62:b9:ee:59:84:00:05:9f:c2:53:c5:37:f8:88:
                    ea:c2:a8:42:c6:19:48:2d:54:2d:2a:c3:ae:61:ea:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:75:6E:97:06:CA:28:06:72:1B:22:FA:CA:F6:80:F7:56:0F:AD:11
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:3b:fc:f1:69:e0:36:38:63:d3:c4:c0:8b:a9:aa:a0:ac:
         a7:97:ce:09:a8:b6:db:5e:fc:44:4d:18:7e:61:16:eb:4a:be:
         0b:d4:f2:13:fa:e7:22:3f:0d:fb:89:ce:37:62:e7:73:c4:e7:
         3b:d0:ae:6f:74:d0:89:b5:dc:81:bb:78:35:9f:11:5a:10:ea:
         d9:d0:0c:8a:b8:de:15:d7:c8:0f:ca:71:7f:3b:5f:4e:7c:95:
         98:be:37:54:67:7d:6a:7e:e7:34:bb:8d:a8:fe:0b:b4:cc:28:
         9c:8c:39:b6:8b:63:0d:a1:3f:95:02:f8:5c:e2:cd:d6:6f:e6:
         29:58:0f:3a:4d:8c:17:07:34:39:d2:1b:10:9f:f7:2f:02:d7:
         44:54:5d:b3:03:b8:8e:df:5e:41:82:f8:e2:d9:bd:82:6f:34:
         59:dd:da:9c:a4:a3:bd:2c:ba:ae:3b:cb:71:7f:58:c6:1d:d7:
         29:68:16:ea:bb:a9:63:39:c4:03:c8:aa:14:1c:6f:6c:72:7a:
         ca:b3:21:41:4b:e2:7a:1d:b8:5c:bd:66:62:1a:a2:81:66:4c:
         7c:e7:be:1e:7d:96:bb:ee:06:5b:29:ef:3f:70:0a:53:b7:8a:
         19:cd:77:82:61:37:cf:09:31:df:c1:f1:74:1b:90:8a:10:ed:
         30:34:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org