Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e34382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          kv1B2BPR2MBCr9Ivrd4Q2Ri5agKFLQaTr9ntqoMf0FQ=
Subject key identifier:   8B:2C:CA:C1:18:ED:DB:A8:6C:D1:15:4B:D6:0B:8E:7D:3A:9B:F5:5F
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7EB59C0C3D71F7331AD196EC61E7D1C62D065114
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:43 +0000
ROA not before:           Thu 04 Apr 2024 23:16:43 +0000
ROA not after:            Thu 03 Apr 2025 23:21:43 +0000
asID:                     11921
IP address blocks:        201.49.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b5:9c:0c:3d:71:f7:33:1a:d1:96:ec:61:e7:d1:c6:2d:06:51:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:43 2024 GMT
            Not After : Apr  3 23:21:43 2025 GMT
        Subject: CN=8B2CCAC118EDDBA86CD1154BD60B8E7D3A9BF55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:1c:4e:b3:f6:8a:4c:85:9b:e0:19:d2:d2:
                    6f:91:ea:4f:80:de:28:03:f7:68:47:97:fa:26:83:
                    da:3e:5a:6e:79:0b:4d:62:7b:18:b1:24:73:78:77:
                    82:39:21:35:22:be:37:5a:1e:18:cb:de:09:80:f8:
                    a9:99:23:df:11:bc:cb:81:69:84:e8:e7:3f:41:4f:
                    b5:45:25:31:60:cf:d9:68:65:12:3e:b9:db:a7:68:
                    c9:fd:01:6d:d1:f2:7d:17:02:cf:44:ab:96:19:3c:
                    f4:3f:5c:4f:0b:f3:14:00:3b:e7:cc:5c:ea:9c:c9:
                    61:e6:71:37:44:0d:0c:e1:d3:f3:15:e3:ef:a9:71:
                    54:96:6e:1a:91:be:a7:ff:b7:7c:37:ae:1c:bc:fd:
                    08:f4:1e:6e:a4:51:9f:50:81:3d:13:c3:b8:e9:a0:
                    de:a2:c7:c6:d5:eb:2f:11:c7:98:01:45:94:f0:06:
                    9b:68:d3:1c:10:15:33:4b:bf:d5:f0:0e:1a:63:9e:
                    a4:92:9f:86:aa:82:2e:f9:20:56:ae:d9:16:f1:7f:
                    0f:c0:95:72:37:d4:1f:cf:00:4d:9d:a7:58:80:30:
                    fb:e9:ca:85:36:8b:59:92:37:87:f0:b6:d6:86:c1:
                    54:b3:75:f7:6f:88:33:66:6d:7f:d5:d0:b8:c0:95:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2C:CA:C1:18:ED:DB:A8:6C:D1:15:4B:D6:0B:8E:7D:3A:9B:F5:5F
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e34382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:23:5b:21:db:14:9b:3d:d6:81:0e:f9:7f:e8:38:24:9e:e1:
         9f:3b:c5:a4:cf:c6:c4:f7:c3:a1:1d:fb:10:73:89:19:3a:0e:
         1d:94:2f:8f:25:a8:bc:8f:d4:e5:91:84:fa:a7:1c:ca:fe:17:
         d3:28:fb:7e:c4:c6:15:cd:2e:d6:69:79:d7:19:e5:66:29:c0:
         33:28:33:11:af:cc:d3:00:fd:b6:21:bf:c6:ef:47:d8:86:c1:
         0f:2b:39:cb:89:dd:3f:2c:a8:92:f1:0c:fd:4a:de:51:b2:04:
         5a:91:80:5a:a5:62:58:d9:4b:5d:bb:68:68:1a:19:ba:8a:c0:
         0c:ef:d7:35:70:51:6a:29:93:94:76:b3:6f:c1:24:f9:5f:93:
         0e:aa:01:7f:53:03:8c:76:32:be:47:04:ce:44:d7:f9:f6:f7:
         a9:81:a6:51:b7:68:ad:c5:63:b0:2e:9e:74:1a:2c:57:c4:58:
         c0:a7:22:b6:ad:0e:ae:c9:85:09:a7:b5:8f:d2:20:82:ec:59:
         96:be:37:e9:2d:ac:97:c8:f7:e0:36:9d:52:69:01:b7:9b:1f:
         83:c0:24:8e:99:4d:4e:9b:43:2e:0a:75:6f:59:07:88:db:9a:
         c1:79:d7:67:dc:6b:4f:c5:51:34:43:cf:40:19:5a:9a:fd:c7:
         10:10:96:48
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfrWcDD1x9zMa0ZbsYefRxi0GURQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDNaFw0yNTA0MDMyMzIxNDNaMDMxMTAvBgNV
BAMTKDhCMkNDQUMxMThFRERCQTg2Q0QxMTU0QkQ2MEI4RTdEM0E5QkY1NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6BxOs/aKTIWb4BnS0m+R6k+A
3igD92hHl/omg9o+Wm55C01iexixJHN4d4I5ITUivjdaHhjL3gmA+KmZI98RvMuB
aYTo5z9BT7VFJTFgz9loZRI+udunaMn9AW3R8n0XAs9Eq5YZPPQ/XE8L8xQAO+fM
XOqcyWHmcTdEDQzh0/MV4++pcVSWbhqRvqf/t3w3rhy8/Qj0Hm6kUZ9QgT0Tw7jp
oN6ix8bV6y8Rx5gBRZTwBpto0xwQFTNLv9XwDhpjnqSSn4aqgi75IFau2Rbxfw/A
lXI31B/PAE2dp1iAMPvpyoU2i1mSN4fwttaGwVSzdfdviDNmbX/V0LjAlRBxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiyzKwRjt26hs0RVL1guOfTqb9V8wHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAckxMDANBgkqhkiG9w0BAQsFAAOCAQEAmSNbIdsUmz3W
gQ75f+g4JJ7hnzvFpM/GxPfDoR37EHOJGToOHZQvjyWovI/U5ZGE+qccyv4X0yj7
fsTGFc0u1ml51xnlZinAMygzEa/M0wD9tiG/xu9H2IbBDys5y4ndPyyokvEM/Ure
UbIEWpGAWqViWNlLXbtoaBoZuorADO/XNXBRaimTlHazb8Ek+V+TDqoBf1MDjHYy
vkcEzkTX+fb3qYGmUbdorcVjsC6edBosV8RYwKcitq0OrsmFCae1j9IgguxZlr43
6S2sl8j34DadUmkBt5sfg8AkjplNTptDLgp1b1kHiNuawXnXZ9xrT8VRNEPPQBla
mv3HEBCWSA==
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org