Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa
File:                     3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          9CokDJZ/vGaKuJtey7Dpj3hGmv5hN+inkwBJoEwbGA8=
Subject key identifier:   D7:C4:37:B8:CE:E8:BB:5F:A7:5C:49:20:DE:C4:2D:17:4F:E6:9D:A3
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       557A72688A095C4FC0300578126E88D2EC983BBD
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:33:38 +0000
ROA not before:           Wed 31 Jul 2024 13:28:38 +0000
ROA not after:            Wed 30 Jul 2025 13:33:38 +0000
asID:                     11921
IP address blocks:        200.194.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7a:72:68:8a:09:5c:4f:c0:30:05:78:12:6e:88:d2:ec:98:3b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:28:38 2024 GMT
            Not After : Jul 30 13:33:38 2025 GMT
        Subject: CN=D7C437B8CEE8BB5FA75C4920DEC42D174FE69DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:47:84:d4:64:59:8a:6e:ef:9c:53:6a:55:
                    11:56:b0:74:16:b7:33:be:69:45:e8:c5:6d:7d:84:
                    b8:d7:af:51:5c:01:98:eb:1d:04:7b:8d:35:7a:83:
                    8a:b7:48:04:cd:65:b7:ec:93:7e:bd:1b:56:f4:72:
                    b0:ca:27:c3:c9:a1:5c:33:e2:92:7e:11:39:da:da:
                    21:0c:dc:d2:c3:6b:aa:e3:20:9f:93:0a:81:56:af:
                    0f:32:84:df:48:70:ae:dd:41:fa:e2:e2:fb:62:c3:
                    34:b1:1d:05:21:f4:9e:68:6e:47:fb:8b:20:07:1e:
                    0c:38:0d:04:f1:a4:2e:ba:e8:fb:81:c9:9c:ef:21:
                    00:18:1a:fc:2a:73:7a:df:6f:0e:25:e9:39:49:05:
                    37:c9:c7:07:b1:d1:19:c1:ad:52:12:49:c4:c0:80:
                    50:cb:b8:29:88:63:e7:c0:f1:00:fa:a2:bd:0c:89:
                    f6:f4:9e:e1:09:d3:b2:bc:c2:b8:70:43:6f:27:bb:
                    3a:78:7f:ea:f6:b9:9f:24:5e:fc:fe:d9:76:3e:38:
                    ee:f5:10:5c:da:76:5b:fe:1d:a8:6c:c3:3f:d0:37:
                    86:11:be:6b:76:1e:61:03:f5:74:fb:d1:ac:86:f5:
                    b3:db:50:33:90:19:03:69:b6:c6:7e:39:23:62:70:
                    58:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:37:B8:CE:E8:BB:5F:A7:5C:49:20:DE:C4:2D:17:4F:E6:9D:A3
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:8f:14:18:44:1c:ac:3e:40:ab:be:5e:7c:62:36:fa:bd:d7:
         d1:73:72:36:eb:02:58:2d:a9:b3:d8:ba:40:51:32:0d:8e:0d:
         a2:7a:55:5a:5c:93:1c:02:a2:ae:79:c7:1a:87:48:8f:8a:de:
         90:8e:5d:09:b5:52:93:a2:74:2e:49:cc:a0:c6:9a:e8:de:b1:
         27:be:ff:d8:ab:ab:6d:62:50:20:a6:b6:d7:95:af:02:d3:b3:
         59:83:e7:58:9b:ec:80:34:66:17:a1:85:8d:5f:31:58:46:8c:
         f9:57:f2:0a:57:a3:08:1c:e0:8f:7c:5b:a8:b7:3d:b0:05:01:
         11:84:55:43:0a:2d:99:dc:40:3c:7a:bd:24:48:b1:7d:be:9d:
         89:75:f5:c9:71:1c:3b:4a:90:eb:03:4a:33:07:3c:ac:70:39:
         cc:07:b7:d3:53:1d:dc:ae:5e:21:46:99:f6:d2:96:40:37:82:
         56:e6:8e:a2:9c:44:68:47:27:96:bc:9a:d1:06:23:49:98:75:
         ed:24:fe:ff:1a:86:17:e3:42:71:01:1c:fe:d1:a7:e9:78:ce:
         1b:72:d1:62:99:30:cc:0c:3a:3d:85:2f:50:22:22:f3:7b:bd:
         7f:d3:64:fd:fa:42:17:1b:86:41:97:7e:46:82:49:eb:17:61:
         1e:3b:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net