Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130312e302f32342d3234203d3e203131393231.roa
File:                     3230302e3139342e3130312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          0jICTsiZboh6Q2QI5/t/JHe+uEQpvamCr82eOsKwCa0=
Subject key identifier:   36:A6:7A:BD:A2:11:3E:7A:BC:04:E8:CF:52:DF:DC:99:21:7C:30:02
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       79A45C395D9A10274AD7C0377BB9BE8B1CBD4FD1
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130312e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:33:00 +0000
ROA not before:           Wed 31 Jul 2024 13:28:00 +0000
ROA not after:            Wed 30 Jul 2025 13:33:00 +0000
asID:                     11921
IP address blocks:        200.194.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a4:5c:39:5d:9a:10:27:4a:d7:c0:37:7b:b9:be:8b:1c:bd:4f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:28:00 2024 GMT
            Not After : Jul 30 13:33:00 2025 GMT
        Subject: CN=36A67ABDA2113E7ABC04E8CF52DFDC99217C3002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:db:e6:74:5c:3f:6e:87:14:b6:9a:bb:b3:
                    80:9e:09:f8:99:e6:30:1f:81:78:fc:81:42:93:b2:
                    ab:68:a5:44:7d:7b:da:99:1d:f7:dd:4d:5d:2a:8b:
                    48:1b:9c:39:36:43:f6:34:af:f4:65:f3:91:ef:d6:
                    b5:8b:d8:00:15:43:aa:1b:b2:96:52:43:6e:ca:22:
                    f7:ea:af:67:02:8d:07:af:e6:14:bf:13:b9:6b:c9:
                    fb:d5:f5:f3:40:8b:19:c8:10:39:58:10:c2:3f:29:
                    b4:06:98:e6:6f:da:0e:99:da:13:ed:d3:cc:7b:76:
                    dd:98:22:84:51:43:cd:4a:42:bf:39:5d:1f:41:f8:
                    1a:ef:5f:d1:ee:ff:44:42:eb:e4:91:58:d3:a3:21:
                    ae:1e:39:1b:cf:e4:0e:ba:e5:35:da:6c:55:cc:65:
                    d8:b9:22:0e:d6:b9:39:aa:1c:ff:37:e6:c0:60:91:
                    b0:e2:e0:19:4c:5f:f1:f3:db:e1:6f:66:10:40:42:
                    3e:c5:6c:03:02:a4:b6:c5:d5:bf:56:30:ff:b6:7d:
                    85:0d:a1:2a:50:ee:e0:07:d6:34:b7:82:0b:b1:2d:
                    26:2b:d8:93:e0:f5:2f:bc:d9:34:ad:f3:d9:8a:91:
                    e9:cc:b2:f4:d0:f3:16:30:9d:1d:1a:3f:c9:90:cf:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A6:7A:BD:A2:11:3E:7A:BC:04:E8:CF:52:DF:DC:99:21:7C:30:02
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130312e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:b8:76:04:c7:82:05:98:b2:d8:e0:86:03:d9:ba:9c:4b:
         8e:30:e9:43:4b:10:c5:6f:89:01:be:fd:32:a6:d6:ad:2f:76:
         16:6d:69:da:02:74:27:2c:d5:da:80:56:96:6c:14:a2:cd:20:
         f3:35:a9:59:8d:f6:31:03:1b:1d:0a:14:21:6b:93:82:62:92:
         b2:d3:c0:50:32:b3:65:0d:47:26:16:8b:4c:0f:48:98:6c:bb:
         71:41:58:4c:2f:ff:14:02:62:3f:ae:e4:cb:9f:a4:8a:88:0e:
         76:d1:9b:79:6f:25:10:be:a6:8b:58:8c:2f:6f:f0:4f:5c:1e:
         3e:f8:a1:40:33:29:59:49:f7:0c:34:23:36:65:a6:86:56:11:
         4f:02:03:14:ea:8e:da:c7:7a:49:d8:2e:80:91:68:a7:5f:46:
         be:6a:14:84:98:9b:c0:9d:31:c1:74:d2:57:58:d0:97:03:ca:
         56:80:14:74:45:90:3b:98:be:30:8b:90:2a:2c:dc:8e:60:d0:
         5a:af:c3:d9:96:20:c4:b1:de:3c:95:b5:cd:c4:f3:36:45:d7:
         08:d9:74:a7:92:54:56:7c:e5:02:a5:b3:56:a1:30:af:ec:74:
         19:66:f2:c2:48:17:a3:d2:7c:3c:bd:cc:3d:bf:6c:32:7e:9f:
         68:b8:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net