Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134312e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3134312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          tX9PV4drKxA572Ql4yLZ/JTIHMzNkuZivYGuL1P7vAc=
Subject key identifier:   1C:E3:AE:27:B7:42:0C:FC:7C:5A:77:25:D4:32:7D:FC:1A:84:06:F2
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       5FFBF891E70A943E8A94F47F8A82213A1837B973
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134312e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:37:41 +0000
ROA not before:           Wed 31 Jul 2024 13:32:41 +0000
ROA not after:            Wed 30 Jul 2025 13:37:41 +0000
asID:                     11921
IP address blocks:        200.150.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fb:f8:91:e7:0a:94:3e:8a:94:f4:7f:8a:82:21:3a:18:37:b9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:32:41 2024 GMT
            Not After : Jul 30 13:37:41 2025 GMT
        Subject: CN=1CE3AE27B7420CFC7C5A7725D4327DFC1A8406F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:2c:29:8e:95:0e:0e:f9:6c:8b:e1:eb:d6:
                    a4:9b:ac:a5:c4:b6:99:28:ec:13:20:64:7a:81:bb:
                    19:39:3c:a7:83:0f:82:a5:08:be:ec:ae:96:df:f6:
                    c9:ee:d4:1a:4e:fb:77:ca:a5:66:46:28:84:72:ae:
                    b8:9f:fd:35:2c:10:93:fe:d4:fe:28:6b:6c:36:6f:
                    27:2d:3a:4e:45:3b:67:2d:d7:78:a8:d6:51:6f:6a:
                    db:7e:3c:a3:0b:18:cc:45:d1:30:32:7b:ac:38:ce:
                    b9:a7:18:d9:8a:b3:fb:a6:fa:cf:70:da:b6:55:91:
                    01:72:ae:0f:49:ad:5b:83:aa:42:29:82:e2:53:d0:
                    96:b6:1e:64:16:c1:4b:36:6d:6a:69:c1:2e:a6:84:
                    44:7c:16:ed:af:95:3e:48:3d:24:0f:80:7a:6e:06:
                    73:58:9a:ce:02:d8:f4:f5:f9:e4:d7:42:9d:a7:b3:
                    92:5c:61:4b:1c:09:e3:60:68:0b:96:f4:1e:80:d6:
                    fb:d0:0e:47:2d:ea:49:f3:41:33:b9:1b:e5:fd:39:
                    01:01:0f:ec:ff:d7:15:46:ac:54:74:99:2f:ff:2a:
                    2c:4d:fd:75:2c:ba:0c:93:a6:18:7a:56:30:09:80:
                    f8:c4:5b:67:3b:5b:81:4b:46:fb:fa:01:25:d7:8f:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E3:AE:27:B7:42:0C:FC:7C:5A:77:25:D4:32:7D:FC:1A:84:06:F2
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134312e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:58:de:32:b3:dc:df:a0:67:8a:a5:ba:87:d3:b8:e5:8c:
         5e:f4:5c:75:25:cd:f0:98:62:8b:74:dd:a0:6a:9f:c5:c3:d4:
         ee:7c:00:c4:e9:54:80:76:66:d5:8b:79:e8:13:7b:b6:29:4e:
         4e:2a:94:1c:44:61:05:fa:a0:9f:1c:4b:a6:92:8a:f2:ca:29:
         72:a4:3f:84:52:26:68:50:cd:8d:2d:35:e8:9c:f1:a6:a4:21:
         79:31:85:9f:5e:08:6e:df:45:49:5e:0e:f0:32:b0:de:ef:64:
         ea:64:ba:51:48:84:3f:1f:b4:38:d3:45:04:26:cd:a2:a5:e8:
         99:45:f2:14:f5:dd:f5:d4:72:76:7e:6b:c2:d6:8d:0e:72:ae:
         61:ef:8e:ce:ee:42:c1:98:f7:0a:ff:84:f8:83:d8:c3:ad:6a:
         13:8f:a8:10:05:1d:b2:a3:7d:d9:23:1c:de:9c:de:bc:a8:c4:
         be:de:e4:91:67:c5:29:d7:3c:d8:42:7b:81:17:78:13:de:76:
         82:7e:c1:b8:8d:74:6c:d2:8a:1b:33:b4:ca:5f:15:24:3a:1b:
         8a:c1:f6:65:7c:91:e4:d4:e7:16:c2:cb:de:31:87:4e:67:60:
         1e:8d:e8:ac:a5:06:ab:14:3d:d5:fb:40:e9:be:4a:68:4d:3a:
         d1:95:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net