Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          2Kt+jMubcMl6x/NXnCnhaxoUhbiQApRg2fnVlzDcbuo=
Subject key identifier:   B3:EC:B5:9C:D2:11:B2:F3:35:6A:01:61:12:29:39:A4:27:B2:21:3C
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       0D19691D3FA91731127506B00FAE479AE931B3AE
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 04 Apr 2024 23:21:42 +0000
ROA not before:           Thu 04 Apr 2024 23:16:42 +0000
ROA not after:            Thu 03 Apr 2025 23:21:42 +0000
asID:                     11921
IP address blocks:        201.49.8.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:19:69:1d:3f:a9:17:31:12:75:06:b0:0f:ae:47:9a:e9:31:b3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Apr  4 23:16:42 2024 GMT
            Not After : Apr  3 23:21:42 2025 GMT
        Subject: CN=B3ECB59CD211B2F3356A0161122939A427B2213C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:d3:59:20:fb:01:28:16:f2:34:3b:03:25:
                    3a:a3:e1:03:52:e6:56:78:01:55:27:fe:19:fe:54:
                    c1:ee:a4:60:df:9d:83:a6:6e:3e:06:89:c8:91:b6:
                    39:a4:36:f7:e8:f6:98:57:f6:dd:29:f1:2e:f4:96:
                    19:b8:98:0f:95:a8:e7:2b:ca:7a:1d:8b:7d:26:a9:
                    c0:1c:bd:e1:d6:f1:24:ff:65:2a:6c:b0:c8:5e:f0:
                    d7:2c:5f:59:23:7c:69:32:e3:aa:2c:fb:d0:a3:8b:
                    1c:af:08:c3:43:87:4a:83:f7:d4:8b:81:0f:0f:cc:
                    29:7c:a3:c1:e9:58:cb:b0:17:cf:43:7b:50:1a:81:
                    65:66:f8:e6:c0:de:56:12:ce:49:8b:a0:cc:ac:eb:
                    9c:34:83:a4:72:03:47:4e:d2:6f:c2:00:d5:ae:1e:
                    76:0a:16:c9:24:39:7b:f0:a7:47:88:fc:2f:38:cf:
                    86:c0:68:52:b7:33:45:08:3a:a1:b4:b6:07:8e:36:
                    00:56:0e:59:24:26:c0:be:c2:3a:dd:81:07:8b:75:
                    b9:1c:a4:35:95:5b:fb:84:8a:b4:c6:d7:3e:06:e2:
                    03:54:e6:db:f2:cf:13:8b:cd:6b:69:90:61:fb:38:
                    1b:db:60:5a:ef:24:c7:33:51:b3:1d:ba:75:24:9d:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:B5:9C:D2:11:B2:F3:35:6A:01:61:12:29:39:A4:27:B2:21:3C
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:3b:82:96:1f:e2:27:f6:9d:b9:0c:d3:04:9e:8c:af:e0:90:
         a3:f7:9b:8d:fb:21:ce:a5:15:be:e5:8a:88:99:bc:bd:f4:fe:
         8d:e4:5e:08:65:8d:00:25:8d:0d:6c:c5:49:ce:d6:f4:70:f9:
         63:37:23:5a:ae:6e:3f:85:b9:89:05:c0:2c:69:df:f8:db:6e:
         ce:93:94:c0:c4:40:ff:91:dd:b1:a4:8b:d9:74:0c:0a:06:2d:
         ec:12:92:2c:fa:c6:14:af:1e:b3:b5:df:68:c5:b4:15:a8:73:
         4b:fa:80:a6:00:06:6d:a5:38:49:a2:8f:6f:8b:72:90:40:7b:
         9e:a2:dc:5c:11:a2:03:34:20:4b:7d:f2:2a:8e:85:0e:4c:26:
         97:bd:3e:8a:ef:af:be:19:05:d5:ec:e2:1b:ad:6e:03:b0:9c:
         8b:84:4f:55:19:f9:3f:7f:19:55:ec:2d:32:48:c7:61:ae:e0:
         8e:68:45:26:b9:ab:40:41:71:b0:f6:1c:0a:44:3c:87:1c:83:
         96:98:95:95:50:ed:f0:1e:4a:18:a6:0d:5b:48:a4:69:c8:85:
         d3:fa:e2:09:9d:2c:5d:81:06:4c:6a:18:ed:24:43:9f:11:2d:
         44:9c:83:26:d5:da:2f:c9:e7:b5:67:e1:1d:1d:95:f0:b1:f3:
         5d:e3:f0:62
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUDRlpHT+pFzESdQawD65Hmukxs64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA0MDQyMzE2NDJaFw0yNTA0MDMyMzIxNDJaMDMxMTAvBgNV
BAMTKEIzRUNCNTlDRDIxMUIyRjMzNTZBMDE2MTEyMjkzOUE0MjdCMjIxM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ONNZIPsBKBbyNDsDJTqj4QNS
5lZ4AVUn/hn+VMHupGDfnYOmbj4GiciRtjmkNvfo9phX9t0p8S70lhm4mA+VqOcr
ynodi30mqcAcveHW8ST/ZSpssMhe8NcsX1kjfGky46os+9CjixyvCMNDh0qD99SL
gQ8PzCl8o8HpWMuwF89De1AagWVm+ObA3lYSzkmLoMys65w0g6RyA0dO0m/CANWu
HnYKFskkOXvwp0eI/C84z4bAaFK3M0UIOqG0tgeONgBWDlkkJsC+wjrdgQeLdbkc
pDWVW/uEirTG1z4G4gNU5tvyzxOLzWtpkGH7OBvbYFrvJMczUbMdunUknW59AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUs+y1nNIRsvM1agFhEik5pCeyITwwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzEzOTMy
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHJMQgwDQYJKoZIhvcNAQELBQADggEBAC87gpYf4if2nbkM
0wSejK/gkKP3m437Ic6lFb7lioiZvL30/o3kXghljQAljQ1sxUnO1vRw+WM3I1qu
bj+FuYkFwCxp3/jbbs6TlMDEQP+R3bGki9l0DAoGLewSkiz6xhSvHrO132jFtBWo
c0v6gKYABm2lOEmij2+LcpBAe56i3FwRogM0IEt98iqOhQ5MJpe9Porvr74ZBdXs
4hutbgOwnIuET1UZ+T9/GVXsLTJIx2Gu4I5oRSa5q0BBcbD2HApEPIccg5aYlZVQ
7fAeShimDVtIpGnIhdP64gmdLF2BBkxqGO0kQ58RLUScgybV2i/J57Vn4R0dlfCx
813j8GI=
-----END CERTIFICATE-----
Generated at Sun Jun 9 20:33:25 2024 by rpki-client on console-ams.rpki-client.org