Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          xXzBbcd7s/SmDoLkKNPdru43W7qBTH9k2REYiI/+JE4=
Subject key identifier:   31:CD:69:6C:7D:10:C8:A2:5E:70:3D:E6:B3:1D:01:CD:11:68:38:47
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       12E1C03074ED917DF370D5651F28C953B27F23ED
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:37:41 +0000
ROA not before:           Wed 31 Jul 2024 13:32:41 +0000
ROA not after:            Wed 30 Jul 2025 13:37:41 +0000
asID:                     11921
IP address blocks:        200.150.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e1:c0:30:74:ed:91:7d:f3:70:d5:65:1f:28:c9:53:b2:7f:23:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:32:41 2024 GMT
            Not After : Jul 30 13:37:41 2025 GMT
        Subject: CN=31CD696C7D10C8A25E703DE6B31D01CD11683847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:f5:25:0d:39:b8:53:59:c9:44:f2:e8:cb:
                    7a:1d:a3:52:9e:d0:9f:ae:e5:fa:f6:a4:ba:37:cd:
                    5e:44:9c:d6:3f:e9:4d:8c:97:81:26:9d:7e:73:f8:
                    4d:c5:75:96:53:7e:42:97:c2:e8:d2:ba:ea:11:a6:
                    fa:66:ce:03:a6:e7:a6:8a:03:23:ed:f8:e3:e5:52:
                    90:91:a7:15:35:bf:05:97:5b:9a:8c:9e:11:d1:0d:
                    20:75:38:64:7c:89:96:f4:6d:f0:cf:10:29:24:40:
                    f1:38:f0:95:bf:21:ab:c9:d2:cb:c7:9c:e7:b5:65:
                    55:a7:19:26:27:1f:04:b2:86:d5:82:38:b0:f5:47:
                    22:17:15:4c:ed:7c:ec:e9:32:23:1f:42:bd:67:1b:
                    9f:e8:30:3f:59:32:c3:f5:36:85:94:ce:9a:7f:42:
                    8a:d0:13:1b:b5:dc:31:ef:55:38:26:8a:16:64:66:
                    50:2c:99:18:6d:fd:77:af:43:8e:56:84:31:d0:01:
                    a2:dc:81:40:e5:32:ea:89:60:d0:ff:b9:a9:9a:3f:
                    0f:31:5b:4f:26:b3:9f:05:62:6c:2e:32:99:fa:e7:
                    88:d8:a8:31:65:60:a2:99:ad:f5:68:2a:44:63:b8:
                    46:e6:02:d3:ef:9e:2c:4b:38:ac:54:65:2a:33:70:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CD:69:6C:7D:10:C8:A2:5E:70:3D:E6:B3:1D:01:CD:11:68:38:47
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133392e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:f7:59:cc:be:eb:9c:de:b3:1a:70:41:4f:97:b2:c4:41:
         cc:0f:ca:82:45:1a:78:ae:ee:84:4f:7b:a1:cb:ff:f9:21:bc:
         97:0b:61:7b:3c:51:10:0d:fa:08:08:e3:79:f1:55:0e:6c:ed:
         80:93:a3:3a:82:77:02:90:23:39:5a:2e:5e:c3:be:21:70:c5:
         5d:7f:22:a4:72:b5:4e:87:1f:99:bd:f8:0e:3d:14:80:27:11:
         59:23:5b:3f:6a:2f:5d:b3:da:bc:21:d2:36:43:03:cc:0f:fd:
         20:29:19:d1:cf:ea:4f:99:43:c4:63:92:99:d9:d8:08:97:b9:
         dd:d8:ae:05:a0:0e:a0:06:f0:f8:46:57:bd:89:83:a7:6a:a2:
         57:33:61:e0:83:83:5f:fe:66:4f:5d:62:bb:73:f0:51:2d:24:
         4a:32:bc:d5:96:32:4b:14:a1:19:1d:5e:f6:52:56:3f:52:97:
         67:9f:32:ad:15:e7:0a:3b:1f:21:c6:06:43:76:4a:e2:85:9a:
         4b:99:5f:e3:0b:1f:ad:04:1b:ad:64:b9:e3:bb:70:24:c0:95:
         4e:74:12:7f:9e:cf:76:10:54:80:c0:91:98:6d:c5:59:f8:c0:
         ab:92:f2:aa:37:19:30:51:55:4a:64:3b:c5:42:43:03:82:6b:
         b0:ef:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net