Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          k3tgmYFYyr6Nz3bWylhi3rtYhnyZmQ8VenxwUstrNtw=
Subject key identifier:   40:B4:B0:56:C5:60:11:20:7D:4D:E1:8F:91:E2:69:89:C0:EE:A4:B3
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       53D489041DA02410B870350B8290B174290C4E7B
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:41 +0000
ROA not before:           Thu 04 Apr 2024 23:16:41 +0000
ROA not after:            Thu 03 Apr 2025 23:21:41 +0000
asID:                     11921
IP address blocks:        201.49.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d4:89:04:1d:a0:24:10:b8:70:35:0b:82:90:b1:74:29:0c:4e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:41 2024 GMT
            Not After : Apr  3 23:21:41 2025 GMT
        Subject: CN=40B4B056C56011207D4DE18F91E26989C0EEA4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:f2:e2:72:67:c8:7d:63:ea:72:34:28:71:
                    71:d4:f6:89:99:3a:9f:5f:5f:3c:ca:a6:e0:d9:84:
                    a7:de:1b:dd:a5:18:31:27:1b:3a:30:11:43:1b:c3:
                    3f:7a:03:39:0c:6b:04:d8:ce:63:c2:1c:39:f1:4f:
                    e1:a3:84:77:17:42:b7:da:58:cd:1c:ca:fc:59:12:
                    44:2a:2d:f7:70:d6:34:21:bc:b5:53:71:c4:df:5a:
                    6b:8b:0b:2c:cd:b8:3d:a7:31:a0:b9:33:bd:cf:be:
                    94:8c:b1:d0:f4:6f:e1:88:b2:39:5b:7c:61:f1:53:
                    86:e0:20:95:a5:b4:a5:05:88:5b:5e:46:e1:10:ba:
                    af:d5:96:e6:dd:14:03:cd:98:75:ea:17:65:de:78:
                    6b:1b:d8:b8:65:2c:dc:54:00:c6:d4:d2:86:4f:f2:
                    fd:2c:03:3c:6f:32:56:cb:60:8f:53:64:da:04:46:
                    4a:5c:64:31:f3:aa:61:52:33:85:56:95:69:03:99:
                    7f:9b:b9:12:30:ad:71:e9:ce:5d:62:30:49:d2:27:
                    7e:5e:8d:c5:2b:c3:a2:e5:af:2a:34:1f:b7:35:ea:
                    7e:61:9a:51:94:26:36:e7:2e:db:d9:10:7a:62:8b:
                    9a:a6:aa:47:bc:b5:34:7c:7f:b1:e4:37:53:1f:fa:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:B0:56:C5:60:11:20:7D:4D:E1:8F:91:E2:69:89:C0:EE:A4:B3
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:66:85:44:71:00:c9:8b:fa:6c:bb:9a:01:5a:11:a5:03:65:
         b9:76:45:10:d8:7b:64:85:77:88:1e:83:08:37:fa:ac:06:03:
         4d:94:67:b1:61:12:82:47:67:7e:6b:2d:cc:d9:3b:17:19:7c:
         c9:95:0a:7c:15:ed:0d:32:e9:5b:4a:c7:a6:17:0f:01:d2:ac:
         2d:e1:37:4a:bf:c6:62:6b:8f:52:6e:ca:7a:e4:9d:c3:f5:06:
         c0:af:c9:75:ca:e0:6d:67:b7:d3:2b:fa:13:78:a0:0a:1b:a9:
         64:03:16:9d:90:6d:bf:41:d2:50:95:38:55:e0:e1:10:8e:40:
         3b:4f:01:c2:2b:f4:fc:8b:e0:23:50:0f:27:46:e5:90:4e:9f:
         24:2b:3c:d9:a4:76:1d:51:7f:51:73:ea:e3:3e:71:77:ca:6d:
         ec:c0:09:80:0d:21:cc:e8:c0:19:5b:ab:16:13:8a:c7:36:a7:
         df:3f:ca:e2:12:c0:c1:e3:b1:ba:e1:fd:46:b0:64:9c:92:b6:
         9d:5b:16:49:41:1b:c8:7f:d6:2e:23:06:5c:d5:9f:65:ab:3a:
         09:01:20:d6:49:13:07:c2:cf:ba:c5:3a:01:02:7f:10:2e:d2:
         85:da:52:d8:eb:91:65:70:4f:64:1b:28:57:c0:4c:47:e1:77:
         aa:9f:ed:8f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUU9SJBB2gJBC4cDULgpCxdCkMTnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDFaFw0yNTA0MDMyMzIxNDFaMDMxMTAvBgNV
BAMTKDQwQjRCMDU2QzU2MDExMjA3RDRERTE4RjkxRTI2OTg5QzBFRUE0QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENvLicmfIfWPqcjQocXHU9omZ
Op9fXzzKpuDZhKfeG92lGDEnGzowEUMbwz96AzkMawTYzmPCHDnxT+GjhHcXQrfa
WM0cyvxZEkQqLfdw1jQhvLVTccTfWmuLCyzNuD2nMaC5M73PvpSMsdD0b+GIsjlb
fGHxU4bgIJWltKUFiFteRuEQuq/VlubdFAPNmHXqF2XeeGsb2LhlLNxUAMbU0oZP
8v0sAzxvMlbLYI9TZNoERkpcZDHzqmFSM4VWlWkDmX+buRIwrXHpzl1iMEnSJ35e
jcUrw6Llryo0H7c16n5hmlGUJjbnLtvZEHpii5qmqke8tTR8f7HkN1Mf+lxfAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUQLSwVsVgESB9TeGPkeJpicDupLMwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzEzOTMy
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHJMQYwDQYJKoZIhvcNAQELBQADggEBABRmhURxAMmL+my7
mgFaEaUDZbl2RRDYe2SFd4gegwg3+qwGA02UZ7FhEoJHZ35rLczZOxcZfMmVCnwV
7Q0y6VtKx6YXDwHSrC3hN0q/xmJrj1JuynrkncP1BsCvyXXK4G1nt9Mr+hN4oAob
qWQDFp2Qbb9B0lCVOFXg4RCOQDtPAcIr9PyL4CNQDydG5ZBOnyQrPNmkdh1Rf1Fz
6uM+cXfKbezACYANIczowBlbqxYTisc2p98/yuISwMHjsbrh/UawZJyStp1bFklB
G8h/1i4jBlzVn2WrOgkBINZJEwfCz7rFOgECfxAu0oXaUtjrkWVwT2QbKFfATEfh
d6qf7Y8=
-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org