Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35342e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          /x+DE2+KkfJ1rHBesEuLcMnc7fYjLwwNNtVddQ7I+S8=
Subject key identifier:   A5:66:E0:04:5D:5F:5E:53:76:D7:EF:BC:5C:84:5F:01:AA:8F:CC:32
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       75CBF1572CC069B349AE13E2E1047AA8AA0A46D8
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:41 +0000
ROA not before:           Thu 04 Apr 2024 23:16:41 +0000
ROA not after:            Thu 03 Apr 2025 23:21:41 +0000
asID:                     11921
IP address blocks:        201.49.54.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cb:f1:57:2c:c0:69:b3:49:ae:13:e2:e1:04:7a:a8:aa:0a:46:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:41 2024 GMT
            Not After : Apr  3 23:21:41 2025 GMT
        Subject: CN=A566E0045D5F5E5376D7EFBC5C845F01AA8FCC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:20:78:a2:cb:7e:6a:16:09:11:2f:c4:f9:c9:
                    2c:2f:99:b6:04:ed:bb:77:64:0a:58:ba:01:21:91:
                    83:02:27:e0:c2:82:02:13:d5:ee:10:56:fb:b9:23:
                    0e:00:df:1a:52:62:2c:e2:d6:d0:0b:3f:d7:0d:c6:
                    58:e3:d2:e0:ba:1f:f0:e9:31:aa:30:d6:00:c3:21:
                    ee:a7:c2:83:21:27:5a:94:6b:a1:8a:71:2c:67:a7:
                    d0:06:64:c2:11:5b:7e:7f:f4:a9:28:1a:cd:3b:ae:
                    b7:bb:9e:9d:9d:8b:b0:87:a1:79:34:1f:d2:26:b7:
                    7d:3e:e4:db:e0:d3:73:07:22:ba:35:37:81:6a:6a:
                    e2:80:78:f6:86:b0:ca:6d:96:71:65:3b:e7:aa:11:
                    df:ec:aa:c1:8c:36:31:ce:38:ea:05:bc:26:a0:c5:
                    f6:ca:72:90:a1:17:44:19:1f:ec:80:2c:e3:dd:ca:
                    51:66:5c:0a:dc:84:9d:2b:13:76:ea:a8:dc:99:95:
                    67:1a:35:76:8c:d5:46:5c:64:a3:aa:ba:78:94:60:
                    87:a1:b5:dc:80:34:9a:d8:c3:52:86:57:8d:a3:86:
                    00:de:c3:20:06:4a:cd:0c:55:c4:73:b8:34:87:04:
                    42:2d:68:ee:f1:be:cf:65:d8:5f:bd:17:7d:be:b3:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:66:E0:04:5D:5F:5E:53:76:D7:EF:BC:5C:84:5F:01:AA:8F:CC:32
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:fe:c2:d3:0b:07:de:1e:92:86:5b:fa:06:f0:6b:1b:c4:
         32:66:ea:aa:a1:be:17:ab:c5:cd:ba:c1:ce:81:d1:0b:44:b2:
         c6:3b:5e:7c:d1:e4:d9:e2:aa:37:76:22:10:d0:64:c6:70:50:
         af:9e:ea:8f:36:c2:43:ae:c0:cc:59:2a:2b:9d:4d:c1:77:a2:
         93:33:f1:71:7e:b3:16:04:74:03:fc:94:b1:18:a7:f4:bc:8a:
         86:a0:64:a4:7a:e0:78:64:8d:3e:8d:17:fc:8e:fa:b3:c0:c0:
         e7:04:65:b3:dc:46:1c:1d:2d:d0:bc:af:02:9b:a9:fb:ef:bb:
         7e:25:26:13:ba:e4:c6:48:e8:9e:9e:47:87:c1:1b:8e:db:83:
         b4:9c:e3:76:89:d3:2e:5a:65:42:37:ed:df:20:ad:03:ec:d0:
         8c:89:85:23:9d:4a:ba:d1:1d:45:c4:a0:83:00:b8:e7:34:0d:
         13:83:35:6b:bf:91:f0:a5:82:72:ca:a1:5c:a5:db:72:ed:eb:
         2e:52:85:5e:df:63:d9:44:cd:6b:de:17:a3:e7:35:23:53:24:
         b6:c6:19:7f:5f:aa:b4:3b:1f:83:c0:ea:78:3d:ae:a6:5c:22:
         f2:dd:39:ea:dd:0b:a5:a0:da:30:b9:da:55:4a:38:d5:e0:ab:
         f9:d2:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org