Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          YX2S/n14YzIv1m/y4nA3bHRPgriTmVUvhNbCPhKQFNY=
Subject key identifier:   69:30:1D:9D:31:26:9E:DF:21:52:BC:E3:5E:77:15:09:A1:01:F8:06
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       75D0DD4BE9D0EF10EAA7ABD4D48C54C54D16B18A
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        201.49.52.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d0:dd:4b:e9:d0:ef:10:ea:a7:ab:d4:d4:8c:54:c5:4d:16:b1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=69301D9D31269EDF2152BCE35E771509A101F806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:b1:7a:a9:d9:35:68:c9:3c:a5:29:70:56:
                    ca:b3:57:e9:df:9b:ee:c0:01:7b:0a:97:14:bb:10:
                    37:6a:ea:08:f3:7c:d7:d9:b7:3c:31:d4:64:a4:ae:
                    ef:7e:1d:17:91:6b:c2:f6:db:00:a9:92:49:26:62:
                    35:91:ee:e5:c0:ae:26:c0:9a:5c:03:56:0e:97:d7:
                    e5:79:4c:4c:00:30:88:dd:2d:07:f5:ef:de:63:55:
                    00:66:fc:5c:5a:91:a6:79:3d:99:0f:8f:7c:f9:a4:
                    18:9b:4d:c4:c7:41:48:46:03:5d:15:13:71:aa:94:
                    4e:8c:84:90:dd:ff:be:29:55:4e:d4:7f:f3:18:76:
                    fd:eb:a2:18:d4:2a:57:0d:ad:aa:14:f8:98:2b:bb:
                    92:e0:b8:d3:62:09:01:a7:93:f7:95:2d:74:22:cc:
                    11:70:62:72:c0:29:a4:e7:e0:c9:db:b3:2e:8a:4b:
                    db:bc:44:a2:0e:7a:49:47:fa:e4:8e:41:67:df:dc:
                    45:e6:fe:a5:72:e4:2a:1e:73:7b:5e:d4:0a:fc:bc:
                    14:b0:f2:00:f7:0b:3d:37:84:9e:9f:ac:f5:b1:d4:
                    70:03:6d:4f:4f:89:6b:86:ce:75:e9:c8:b1:1e:b2:
                    5a:0c:32:8f:f4:67:74:59:7d:ad:a0:81:c9:36:17:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:30:1D:9D:31:26:9E:DF:21:52:BC:E3:5E:77:15:09:A1:01:F8:06
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:48:78:94:2b:5d:d5:5e:37:63:49:2c:e6:af:d2:f9:d8:a2:
         c3:da:62:ae:da:56:0f:57:e1:19:9b:4c:46:8d:18:0c:72:cf:
         1e:e0:9f:e1:49:88:93:9b:2c:4c:96:58:db:19:ff:16:05:5d:
         99:9f:dc:2e:6a:44:87:a0:1a:05:26:2e:d3:27:cf:5f:c2:bf:
         56:be:df:77:c1:78:e0:00:70:36:4e:e4:0b:d6:30:55:c6:a7:
         bf:0f:bc:46:36:47:4f:27:58:57:c8:1e:9e:29:88:3b:cb:c0:
         55:fb:9f:1e:ff:83:c2:9d:eb:ce:32:27:5e:70:49:8b:91:3e:
         3a:b3:c9:43:8e:08:c1:05:43:60:22:66:84:b6:fb:c8:ab:18:
         6c:65:11:97:aa:0a:a3:40:33:b5:a0:a7:4b:dc:56:e7:7b:ef:
         4b:df:8e:02:1b:46:24:e6:28:7e:db:5f:9c:68:8d:93:b8:25:
         54:cd:5f:01:ba:5e:5b:f9:b0:76:6c:13:16:34:cb:ca:9e:ec:
         c6:49:67:f9:4a:24:30:4b:0c:e3:37:8a:86:97:92:44:29:72:
         57:e7:67:60:3d:81:e6:41:c1:b2:f9:1c:a4:07:31:17:f2:eb:
         38:8c:e8:55:b8:a7:9f:ca:60:98:14:93:b9:f6:3d:b5:70:80:
         b2:c2:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org