Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130332e302f32342d3234203d3e203131393231.roa
File:                     3230302e3139342e3130332e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          axHVYQaDTmFi18M1YeKt2GmDWre4ae8SWH2NxWOFDx4=
Subject key identifier:   AB:F0:37:56:F7:50:31:FD:99:8D:D4:57:E8:A7:34:BC:8D:59:0C:7B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       1DD528C5C76584FDA3C7F9F744DB5C891AD4FA98
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130332e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:33:39 +0000
ROA not before:           Wed 31 Jul 2024 13:28:39 +0000
ROA not after:            Wed 30 Jul 2025 13:33:39 +0000
asID:                     11921
IP address blocks:        200.194.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d5:28:c5:c7:65:84:fd:a3:c7:f9:f7:44:db:5c:89:1a:d4:fa:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:28:39 2024 GMT
            Not After : Jul 30 13:33:39 2025 GMT
        Subject: CN=ABF03756F75031FD998DD457E8A734BC8D590C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:3c:f6:ab:df:58:9b:6c:45:43:04:fd:5c:
                    36:b0:e8:e9:75:49:81:14:84:5b:09:a3:44:f6:64:
                    ba:76:7d:f6:5e:5c:fb:8f:c7:8c:51:8e:71:3f:d9:
                    5b:13:b4:81:7f:92:02:90:c0:e3:9a:c8:8c:cd:9a:
                    0e:86:1c:00:43:f7:b1:46:c5:a1:1b:30:b0:88:fb:
                    4c:9b:bc:ea:3e:63:cc:cc:18:c2:0a:7c:12:8d:d6:
                    fb:72:9b:d0:8a:4c:54:cc:6b:b8:58:56:01:21:aa:
                    bf:ae:1e:5f:09:a0:1b:4e:52:6f:5e:26:46:16:d1:
                    7b:a2:08:2b:21:a0:5c:dd:fb:36:3b:ac:f5:6b:63:
                    12:31:18:03:dd:20:da:ce:eb:7c:11:ba:2e:90:19:
                    15:7b:c3:37:9b:4d:af:d3:aa:e1:07:53:3a:26:33:
                    e3:21:8c:b4:61:15:c5:12:d6:f5:58:8e:08:bb:4b:
                    68:99:a1:1a:16:b8:1c:5c:63:cb:74:b4:d1:66:3a:
                    16:8f:00:75:17:d7:68:a3:ab:f4:13:60:2f:85:ac:
                    39:c6:91:4c:ad:8e:5b:c7:f5:aa:c1:44:54:68:8c:
                    88:78:a1:d1:69:8d:11:d3:56:b7:88:07:99:03:b2:
                    ff:e2:a7:13:66:9d:87:62:fe:8f:5b:2b:c9:93:b5:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:37:56:F7:50:31:FD:99:8D:D4:57:E8:A7:34:BC:8D:59:0C:7B
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130332e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:ab:c2:7f:54:72:1c:7f:04:3c:d8:ae:8e:29:59:8c:49:
         d4:d6:0c:98:68:ae:94:08:69:b3:f4:2f:0b:7e:7c:f6:c7:09:
         6a:54:22:fb:ac:19:3a:62:f7:26:02:db:85:0f:87:35:36:63:
         f5:88:41:7f:81:b8:09:4c:fe:ee:b8:f7:58:99:e0:20:a8:21:
         17:30:f1:54:57:46:96:48:44:e8:e8:8b:5b:07:22:25:4e:1d:
         3b:7f:9c:6e:6b:c3:8b:aa:6b:3b:85:bd:ef:1e:b7:f1:e0:2f:
         54:ed:69:c1:96:c9:7b:51:88:e7:2d:1a:f4:c6:e1:4c:0e:5f:
         0a:ed:93:c6:56:9a:ea:af:46:f1:2a:e9:43:c7:a2:85:a2:b8:
         6a:9c:d3:36:b7:56:36:23:99:13:58:de:b1:6f:6b:9c:0f:21:
         84:2d:1e:32:92:b6:b6:f7:43:96:d3:c2:11:da:32:e1:0c:5a:
         1c:a0:0f:80:db:03:35:bd:d1:a6:ac:2f:3e:cd:97:d9:f6:df:
         60:03:77:87:77:af:c8:ef:e6:c1:3f:6c:21:ff:1e:20:79:c2:
         ab:e6:a1:7c:f0:e1:36:6e:7d:d4:5a:e4:e9:32:dc:45:49:3d:
         82:68:2b:54:28:cb:f4:c9:82:39:f5:83:79:9e:91:25:e4:d4:
         c3:31:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net