Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          ZXtXIvn7mRSPUQz6xLyJWs89DJ7G/yq5GMOE1AutNdo=
Subject key identifier:   E1:56:F9:DE:EE:F9:DA:D6:AB:00:38:BF:CE:65:FA:17:57:F8:F6:7D
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       26732E2340CA68B206361E0C0F10758F94CD8DBE
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        201.49.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:73:2e:23:40:ca:68:b2:06:36:1e:0c:0f:10:75:8f:94:cd:8d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=E156F9DEEEF9DAD6AB0038BFCE65FA1757F8F67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:fa:c7:5f:31:42:f6:77:e5:88:b2:03:aa:
                    e8:54:d0:64:47:11:44:3d:ef:54:54:eb:1e:34:55:
                    c1:84:3f:d6:c5:29:f9:17:aa:9c:d1:43:2d:32:c0:
                    b3:ff:9a:24:38:e6:40:0c:1d:f8:4b:59:6c:2f:31:
                    fa:b3:39:c5:5c:0f:2f:f9:23:51:fd:12:54:b9:df:
                    05:6c:30:d9:e8:a2:f4:05:60:fd:0f:84:f8:39:d3:
                    31:0c:3a:a9:cf:67:6a:48:f4:c0:d4:1d:ba:d2:6d:
                    e5:b7:35:cc:53:cd:1c:e0:aa:28:5b:f6:e1:63:a5:
                    07:92:e4:c2:8b:c5:8a:e4:87:21:8a:c7:4d:4c:bb:
                    60:85:3f:59:10:50:84:05:15:72:47:de:18:04:8c:
                    7e:7e:f1:6f:e4:80:35:bb:3c:31:b2:13:43:15:9b:
                    3a:3e:ea:0b:cb:99:2e:c9:69:26:b0:20:fb:85:d3:
                    59:8a:58:77:77:6a:50:b4:3d:d4:f2:74:5a:e7:ba:
                    a0:cc:7d:60:a3:41:d3:10:ca:9b:6b:f8:0c:a8:eb:
                    ae:8b:70:2a:9c:46:d5:c6:30:b3:24:b5:5b:2b:fa:
                    13:f8:c5:39:72:f2:ad:b1:33:5d:b8:86:87:69:30:
                    2d:60:81:4a:a2:c7:d0:34:7b:f6:f8:68:80:f4:a9:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:F9:DE:EE:F9:DA:D6:AB:00:38:BF:CE:65:FA:17:57:F8:F6:7D
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:ee:61:f3:9d:40:cb:8b:69:97:c9:09:d5:dd:a7:5a:b2:
         7c:0a:cb:34:e0:74:47:3b:94:8b:a8:88:13:7e:e8:a1:c8:87:
         dc:7a:f3:f6:1b:14:59:52:ae:e9:6d:2f:82:d5:9c:ee:b2:c9:
         fa:1c:40:e6:29:9a:4c:fc:a4:09:63:f5:c8:6f:f7:20:3b:a2:
         2c:2f:17:04:dd:47:1a:9a:a1:45:7d:1f:e8:16:32:ef:4d:be:
         f1:db:0c:99:6d:17:68:b3:84:90:b7:c8:50:2d:39:09:a2:8c:
         e8:5e:72:f8:49:21:85:65:92:36:8a:e1:3e:53:39:be:96:5a:
         3f:02:1a:65:fb:fa:0b:ef:6b:49:14:c5:49:e2:f4:44:23:a3:
         e6:6a:be:08:a4:7d:12:b3:ac:aa:ed:0b:13:1d:ac:d5:77:72:
         f1:72:f9:09:6e:79:8d:8c:15:d6:02:3a:27:85:03:a4:83:a6:
         64:c4:e4:2f:cb:22:2e:2b:5a:bb:b6:00:36:a1:cd:f0:3f:fd:
         ba:7b:3f:67:47:6d:00:7d:45:fb:bc:56:8b:ab:0d:e2:0e:9c:
         d6:38:5f:41:6f:d4:40:12:d6:5c:c0:d4:7b:86:6a:36:61:37:
         29:71:25:98:ee:79:4b:71:cc:13:00:9d:e2:f8:2a:8f:a0:4c:
         a7:6c:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org