Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          ASk5pHcns38KMltSI0sc44ENh2wJ2tcPDVQEVPEdo88=
Subject key identifier:   EE:A9:B1:46:A7:C5:EA:5F:DF:5F:FE:02:4E:33:AC:DD:4E:F3:12:CF
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       1A132D0759F8E41E159C3A82BBBABD0DAC57687F
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        201.49.50.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:13:2d:07:59:f8:e4:1e:15:9c:3a:82:bb:ba:bd:0d:ac:57:68:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=EEA9B146A7C5EA5FDF5FFE024E33ACDD4EF312CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:ab:ed:33:41:37:08:7d:7d:36:20:e6:fe:
                    c8:5f:e1:48:2e:a0:e3:75:10:5e:85:17:86:4c:46:
                    d3:c5:f1:29:fe:4a:36:2f:0f:ac:57:79:7d:27:72:
                    1b:e8:1d:42:d1:44:86:bb:16:ba:ba:c2:db:dd:20:
                    86:c4:2f:17:ed:07:36:08:c8:a6:b2:39:8a:61:1e:
                    8e:c9:e1:06:95:4c:5b:79:41:18:46:09:6c:75:7b:
                    76:77:d8:6d:6c:3d:85:3e:24:b5:07:16:a1:a8:6b:
                    63:28:fb:24:be:9d:ca:f9:f1:a6:a0:98:3a:20:0f:
                    35:31:5e:58:04:d0:42:79:96:9d:37:20:83:99:42:
                    1f:5a:e6:b3:cf:af:22:d7:91:43:3e:aa:12:42:0a:
                    ba:40:0c:1e:0f:52:36:0a:e3:86:df:75:e5:cd:a2:
                    a5:fe:e7:0a:33:ed:af:28:62:b4:5e:b1:7e:2b:4e:
                    05:04:08:9e:d7:01:12:75:1f:d7:4d:90:e7:6d:08:
                    92:f7:43:7b:fb:d6:87:89:14:b7:18:23:f6:56:9f:
                    76:1b:18:53:81:bf:0c:fa:ef:ba:42:b4:3b:8d:0f:
                    23:11:51:a6:fd:28:43:f5:5c:cf:ff:b7:56:b6:a0:
                    43:e9:a3:03:4c:78:30:c3:e4:0e:9d:3a:30:71:e8:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A9:B1:46:A7:C5:EA:5F:DF:5F:FE:02:4E:33:AC:DD:4E:F3:12:CF
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:95:3d:5b:16:9c:b8:ce:f1:3d:7f:18:01:57:a9:ef:59:98:
         99:72:db:0a:5e:1c:3c:53:b7:f9:be:dd:20:13:c9:87:fa:75:
         d9:2e:34:a2:d3:97:01:23:1c:60:39:c3:7b:c4:ca:bc:09:5b:
         4d:86:47:ad:b3:ec:58:47:90:0b:42:8a:95:e5:f7:33:0b:ad:
         86:99:ea:18:8f:35:e1:85:04:74:e3:f3:97:cb:aa:8d:92:ca:
         e7:ce:24:8a:11:ae:26:8b:7e:98:91:9b:65:e2:a5:48:22:f3:
         51:98:06:ea:64:af:93:0d:33:f1:7a:42:e6:02:8c:77:1b:b4:
         a0:b3:72:1e:24:a8:47:7a:35:fe:d0:12:8a:de:51:9e:bb:54:
         44:dc:d5:5f:f4:1d:d6:37:f7:d9:af:e4:aa:49:b1:ba:35:e7:
         c7:92:ee:45:cd:03:c5:00:ac:5e:54:e5:1f:80:d3:c9:0f:67:
         5f:f1:bc:7c:7c:f0:29:44:64:e2:86:fa:ba:74:31:d9:0c:b7:
         e2:50:6a:d4:2f:9c:c1:3b:be:6e:5c:1b:b2:39:9c:46:0f:8a:
         7a:fa:fd:fa:96:ca:85:c3:39:ac:99:7f:e5:65:6b:05:55:df:
         a2:1f:6f:45:f4:08:ef:90:17:fa:98:59:cb:48:40:a5:c4:3d:
         dc:63:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org