Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e36302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e36302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          PXzcggPU04rr6Pap9xYKyksKjq8GHz6I49to/noPHP8=
Subject key identifier:   CC:8C:AF:99:91:85:EA:5D:37:B0:91:3B:44:18:2A:93:4E:69:D0:3B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       44FA5A8530B6988CEA394A6BF573DF434C0279EB
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e36302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:41 +0000
ROA not before:           Thu 04 Apr 2024 23:16:41 +0000
ROA not after:            Thu 03 Apr 2025 23:21:41 +0000
asID:                     11921
IP address blocks:        201.49.60.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fa:5a:85:30:b6:98:8c:ea:39:4a:6b:f5:73:df:43:4c:02:79:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:41 2024 GMT
            Not After : Apr  3 23:21:41 2025 GMT
        Subject: CN=CC8CAF999185EA5D37B0913B44182A934E69D03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:2c:0a:bb:6b:82:b5:b5:47:24:7d:4e:71:
                    50:b9:1c:2d:43:89:37:61:3c:9d:84:06:18:49:91:
                    ec:f4:15:bd:e4:38:14:63:c2:a4:90:46:42:85:88:
                    0c:17:ac:19:d4:40:8a:b2:7c:46:5a:2a:31:98:29:
                    94:81:f7:d3:7e:c5:ad:cd:01:ce:5c:49:84:44:d1:
                    f7:ea:1a:dd:57:85:e6:96:b7:5c:4c:99:b2:2b:19:
                    51:76:9b:de:a2:f8:d2:a7:02:af:ba:bd:e9:44:2f:
                    e5:31:7e:7a:4a:a3:0e:37:c1:55:be:b5:71:ee:b3:
                    12:a4:21:9d:5b:a7:e4:fa:ff:66:e1:8b:fe:ba:e5:
                    b4:ca:c3:f6:e0:2e:1e:66:63:74:2e:43:56:d4:2b:
                    e7:93:99:c4:de:18:80:e2:b3:0e:fa:3d:11:9e:96:
                    04:1b:47:cf:56:ca:35:5b:ce:0d:4e:1e:fe:c7:03:
                    44:b5:68:5b:b4:29:04:3e:6c:09:d5:fc:15:e5:e8:
                    53:89:a0:2b:b7:c6:1b:8f:51:a8:67:77:1d:8f:56:
                    6b:da:86:9e:f8:95:55:98:fb:f1:f0:7b:80:97:3a:
                    5b:f3:35:94:68:94:cc:81:7d:be:91:6a:7a:63:df:
                    05:62:e2:8c:d6:f5:83:12:ef:9d:08:2d:8c:c2:fc:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8C:AF:99:91:85:EA:5D:37:B0:91:3B:44:18:2A:93:4E:69:D0:3B
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e36302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:16:60:ed:65:36:b1:df:16:46:94:ac:aa:f7:47:70:1e:92:
         de:a5:f2:d8:e7:53:5f:38:68:f5:e1:7b:e8:31:ae:84:39:ed:
         2c:f7:e3:6e:88:f7:ba:2d:b8:70:d7:34:da:66:10:21:c7:4b:
         7c:a9:4e:a9:a8:17:8b:5b:4a:89:57:f2:ab:02:e6:05:88:e9:
         c1:78:13:da:9f:44:76:9f:78:10:0d:f1:85:e4:07:eb:43:cf:
         c9:8f:0e:a0:00:c8:ab:1a:a6:96:23:51:60:b5:4c:f8:ac:91:
         17:7e:f7:9e:f6:2d:ce:32:73:16:32:a4:58:40:5e:d1:46:3b:
         46:a0:5d:cf:38:84:43:bf:9d:6a:7f:12:1a:bd:d1:39:36:30:
         f3:49:29:96:c8:d3:26:e0:69:73:9a:b2:a6:e7:21:bd:6e:7b:
         ea:30:de:8a:51:c8:9e:07:13:71:7b:48:df:69:87:c9:b8:30:
         85:24:19:b5:46:0d:5e:8c:b6:e0:65:5a:c8:f6:77:e6:38:cb:
         ca:2c:a6:f8:39:10:37:f7:b0:d0:3a:59:79:82:6f:c5:33:92:
         f2:b5:a2:a3:87:72:99:0f:b6:89:f7:a2:8d:57:2a:29:3a:83:
         72:ce:28:ad:03:29:d1:f6:c8:ce:64:99:8d:e3:f3:ca:c8:d2:
         31:28:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 19:12:47 2024 by rpki-client on console-fra.rpki-client.org