Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e36322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e36322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          QOk7DAKgncRc8NGkPJo5+FFOqfXuVimrKJIiCOGfV/M=
Subject key identifier:   29:AB:9A:00:27:10:FF:ED:92:88:0D:4F:2B:8B:1E:A1:02:B4:F4:5E
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       36E1600E46F3F78362624E4EA906538BA1890EE2
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e36322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:40 +0000
ROA not before:           Thu 04 Apr 2024 23:16:40 +0000
ROA not after:            Thu 03 Apr 2025 23:21:40 +0000
asID:                     11921
IP address blocks:        201.49.62.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e1:60:0e:46:f3:f7:83:62:62:4e:4e:a9:06:53:8b:a1:89:0e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:40 2024 GMT
            Not After : Apr  3 23:21:40 2025 GMT
        Subject: CN=29AB9A002710FFED92880D4F2B8B1EA102B4F45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:af:16:43:1c:1b:90:88:b7:f4:1c:c6:34:
                    c5:76:f3:60:ef:d9:64:25:47:32:63:6b:18:c5:d9:
                    18:fd:99:b6:8b:f3:39:3a:9d:4a:c0:ac:e0:7b:d9:
                    93:b2:a9:f9:5d:93:e6:bd:da:c7:c9:bb:48:05:f9:
                    b5:26:0c:1e:8d:47:96:af:e0:b4:e7:98:4e:c0:6d:
                    6e:f6:85:c2:f3:d2:8f:11:ad:d6:fc:a0:b1:1b:71:
                    99:5e:48:bd:f8:78:a7:50:ee:01:d6:1a:6d:05:6c:
                    07:38:d7:36:ed:ce:3e:36:e2:d6:dd:18:a8:7f:59:
                    ce:61:c2:5a:3a:eb:9e:2f:fc:d2:17:55:0e:e1:ae:
                    cb:34:85:ad:bb:f6:b0:ae:7a:c2:e2:7e:d5:e6:2d:
                    a7:b8:a7:dd:86:13:51:3d:84:b2:ab:89:1a:2c:a9:
                    a1:4d:9a:fc:72:e4:ac:b6:ad:44:0b:b2:22:35:63:
                    9a:55:5a:d8:c7:38:fc:f7:bb:e2:73:ce:a3:6f:e1:
                    a7:f0:0c:91:34:6b:65:6c:fe:e1:6a:5d:9a:0f:2f:
                    10:88:c9:db:83:9d:2f:a7:d0:0a:9c:37:fd:72:e4:
                    37:b8:0c:69:c0:7a:66:c7:77:50:d8:03:d8:82:28:
                    06:77:d7:67:03:78:25:d4:04:75:6c:25:10:09:6f:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AB:9A:00:27:10:FF:ED:92:88:0D:4F:2B:8B:1E:A1:02:B4:F4:5E
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e36322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:6a:08:0a:f3:f4:dc:a0:b9:e7:2d:30:35:8e:f5:2d:ff:
         d3:b5:4c:14:9f:4d:fc:93:99:cd:2d:8c:27:e1:0f:02:af:1d:
         db:2c:2a:33:e7:5d:96:03:99:98:31:67:94:5c:ef:66:fa:e5:
         87:0b:e4:a8:23:3b:77:0a:ab:50:61:62:7b:b0:05:d4:83:d0:
         35:cd:d1:20:dd:ad:a5:02:b7:2c:65:e6:1e:23:0c:5d:2a:fb:
         a5:22:cb:12:57:fa:ed:ed:7f:05:67:03:73:12:f7:7e:28:4d:
         73:82:2d:1a:f7:6a:c9:75:f3:f5:c6:64:16:38:68:95:1c:73:
         c2:d3:25:ef:82:ce:da:45:cf:ff:ed:f5:74:a2:38:ba:e1:7f:
         40:ae:15:a6:d5:0a:34:9b:52:1c:79:a5:30:9b:f2:9e:32:3f:
         dd:af:12:8a:3e:30:bb:ce:81:26:3f:de:e6:48:0e:0c:b6:a9:
         45:f0:62:63:1e:f2:30:9b:91:66:63:eb:73:5c:65:e1:47:21:
         b5:b4:e8:3b:fb:8d:3e:70:02:e6:8b:59:2c:26:54:16:2f:7e:
         ae:6e:db:59:d5:a7:82:ab:ae:b6:c4:75:49:78:42:db:fc:b0:
         ce:17:83:e0:99:3e:2f:86:da:d1:1a:0c:04:05:a8:ee:e4:2c:
         ca:81:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org