Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134332e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3134332e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          ZO4ft/qs1G68ot9MGAjospUdNCpzViYRRPCKlhIeYNc=
Subject key identifier:   C2:14:BB:68:7A:D8:11:05:6B:B3:8F:72:A7:E0:9F:6E:36:20:E0:2A
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7FD6AE545E9CED956F329DC77E1383B028C8407A
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134332e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:37:42 +0000
ROA not before:           Wed 31 Jul 2024 13:32:42 +0000
ROA not after:            Wed 30 Jul 2025 13:37:42 +0000
asID:                     11921
IP address blocks:        200.150.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d6:ae:54:5e:9c:ed:95:6f:32:9d:c7:7e:13:83:b0:28:c8:40:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:32:42 2024 GMT
            Not After : Jul 30 13:37:42 2025 GMT
        Subject: CN=C214BB687AD811056BB38F72A7E09F6E3620E02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:89:be:9a:b0:f1:a8:41:4b:03:86:17:65:
                    f1:ae:f6:51:8f:7e:55:d6:ce:24:d7:b6:a5:31:9f:
                    b2:a6:42:4f:2f:ce:fe:a4:13:a9:40:3e:3f:24:f6:
                    e1:72:6c:56:18:5e:99:34:b7:7f:8a:0f:d8:2a:f2:
                    59:6a:1e:6a:60:bf:e3:0d:4a:73:dd:65:ee:b3:f0:
                    2e:8e:a1:e2:5d:a9:52:f5:ca:e9:51:17:1a:f0:49:
                    57:b5:fd:48:f5:d1:77:22:62:33:58:0e:2c:a6:9d:
                    1c:2c:18:58:2d:52:95:31:aa:72:0b:8d:49:e4:cb:
                    12:db:83:b0:ad:67:b7:f3:5b:3e:07:52:6a:7c:22:
                    03:d7:ef:8e:1e:31:9e:1b:77:2e:f9:0c:3e:2b:68:
                    49:1b:1f:66:76:19:23:76:f5:b8:8d:81:9f:b2:1b:
                    e6:e1:e2:de:ff:78:75:e4:a9:f7:9e:d4:4b:67:a9:
                    46:94:52:c3:dd:0f:15:14:de:f7:a3:28:bd:cd:54:
                    15:2c:08:a9:20:e5:42:be:33:47:fa:69:af:45:ce:
                    87:2f:ff:15:cc:15:85:57:95:16:63:bf:2d:35:a7:
                    80:54:2e:ff:14:e3:0f:25:83:44:4f:a2:0f:ee:fd:
                    ea:2e:a8:cb:ce:be:c1:bd:a6:fd:79:e4:c6:69:a1:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:14:BB:68:7A:D8:11:05:6B:B3:8F:72:A7:E0:9F:6E:36:20:E0:2A
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3134332e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:3b:fa:df:5b:c1:f7:17:2b:54:84:bc:7a:da:b7:d4:c4:c1:
         d5:0f:1d:4a:35:37:e8:dc:dc:11:52:cc:4f:79:8d:97:c6:dd:
         bd:e0:d3:db:9a:90:d1:ce:17:df:0a:f5:58:de:de:4a:c9:5b:
         34:59:09:17:99:7c:1e:de:24:fe:b0:e6:f1:15:73:7a:0b:09:
         af:20:ae:1e:77:bc:b4:db:c3:d0:6a:83:bd:d9:a8:88:dc:f0:
         b5:de:f3:0d:04:01:6f:03:f8:98:89:c4:b7:ad:78:3a:dd:8d:
         bd:bd:49:3e:8c:2b:16:5f:e9:6b:d2:e6:b0:cc:f0:26:7a:46:
         2a:19:5a:32:2b:ba:60:74:41:8d:3e:6c:38:79:ab:44:c7:61:
         bc:19:0d:62:08:b3:52:85:cc:2d:4f:c7:a7:90:a3:3e:0d:13:
         e7:3d:5b:3e:51:93:9d:b6:0e:3d:a2:27:9a:77:7f:4e:de:ab:
         76:37:3f:a7:9b:12:26:3a:05:ba:3e:fb:58:fe:e6:69:fd:17:
         27:3a:1c:1b:6d:d1:b3:46:5a:39:97:c7:9b:2f:8f:41:f8:38:
         2c:ec:05:b3:65:06:e0:c1:c2:fd:11:84:d7:67:5c:0c:11:2e:
         aa:13:01:d3:c7:02:16:76:c5:48:6c:c1:4c:f7:75:75:3d:fc:
         be:7f:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net