Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          5CJJSdBzs8xRToynIm8/WGIPmtEhTPraJemZHURik48=
Subject key identifier:   59:83:92:6C:8D:97:F9:2E:1E:BB:19:31:82:77:E7:52:86:59:1D:B4
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       2A80EBAC64A23E85F01AB2BBCF338BCC5DAB9516
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:44 +0000
ROA not before:           Thu 04 Apr 2024 23:16:44 +0000
ROA not after:            Thu 03 Apr 2025 23:21:44 +0000
asID:                     11921
IP address blocks:        201.49.58.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:80:eb:ac:64:a2:3e:85:f0:1a:b2:bb:cf:33:8b:cc:5d:ab:95:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:44 2024 GMT
            Not After : Apr  3 23:21:44 2025 GMT
        Subject: CN=5983926C8D97F92E1EBB19318277E75286591DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:7f:df:2f:1a:38:2b:64:64:cd:11:96:02:
                    ae:7d:a7:0e:6e:38:54:fe:9c:a0:e0:c7:43:01:ba:
                    2e:ae:ee:a4:13:58:47:db:83:a4:28:84:34:19:a7:
                    cc:08:dd:e7:a9:97:04:60:8e:d8:55:06:9d:9d:c7:
                    4b:25:c8:76:df:bc:79:07:e0:dc:8c:f1:a2:eb:56:
                    74:6d:ab:8c:ae:19:81:c3:18:3c:65:8a:71:82:4b:
                    2e:9e:8f:bb:68:ab:0a:58:fb:45:e3:29:6a:7f:c2:
                    2f:bc:9f:a2:ae:95:a5:a3:01:b4:e2:74:d7:ae:d7:
                    08:84:d4:c6:ef:74:cd:dc:ff:04:67:45:8f:d7:0c:
                    ce:91:5b:95:ec:6b:90:14:a6:2a:89:a9:98:75:0d:
                    88:94:8b:04:54:db:0e:37:6f:87:a1:45:9f:50:8f:
                    26:e5:d4:81:8f:ec:0e:32:60:9c:6e:13:00:df:73:
                    c1:dc:21:f6:8f:c3:65:14:06:3b:a1:8c:53:0c:69:
                    f1:12:a6:fb:c3:9a:5b:ee:23:f0:a8:69:d3:cd:3c:
                    40:e4:04:67:93:78:df:1c:85:fe:6a:86:9c:77:f5:
                    df:2a:2c:f6:93:ce:88:d3:7d:9c:fc:1a:b1:c5:ed:
                    d8:3d:bf:0c:2f:74:7c:e8:2d:ab:cf:b0:84:ac:84:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:92:6C:8D:97:F9:2E:1E:BB:19:31:82:77:E7:52:86:59:1D:B4
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e35382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:e6:4a:8f:31:68:4e:85:ab:1a:c9:c6:dc:c8:f0:b5:4c:
         86:a5:87:50:de:2b:c2:d7:b7:e2:c2:af:72:20:ec:68:41:5f:
         70:20:f0:ee:ca:8c:1d:b3:f5:4b:cb:9a:14:44:20:33:c4:d3:
         52:ae:5b:b7:0c:30:e0:06:1e:3c:fc:41:41:21:7c:9d:66:dd:
         9c:2e:33:ec:8a:5e:e5:6a:98:5d:b2:73:33:df:6c:61:d1:ec:
         97:51:e7:88:0a:ca:2e:1d:a8:c5:db:08:66:b3:e3:c2:36:1d:
         16:33:eb:db:4c:f8:18:91:09:02:1e:b8:ff:59:b6:0c:15:29:
         e5:d0:b3:11:f0:56:99:54:66:6f:5c:6a:09:1e:76:26:ee:61:
         d7:fa:79:81:c0:fd:68:95:14:15:d9:c5:f2:8f:d6:1a:4d:56:
         70:67:13:04:6b:7f:2b:db:84:d3:02:bc:47:c1:ed:d6:ee:35:
         32:82:6d:8b:26:95:a9:ba:54:6e:42:ee:51:a3:34:da:63:a7:
         a5:fb:93:e6:6b:70:4a:be:8d:a3:c1:b1:5c:ca:93:86:ea:50:
         e6:79:fd:c6:bb:82:e9:ab:dc:61:e4:9a:ff:df:0d:98:a5:78:
         a5:c9:c7:77:f5:27:67:a0:0e:32:8d:8f:db:2f:dd:14:a8:a8:
         01:71:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org