Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32342d3234203d3e203131393231.roa
File:                     3230302e3139342e3130342e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          0KXC0gEDFKGrd9DQ8zEXwnhIHoROBmWqqrYYHoE5tLo=
Subject key identifier:   61:94:80:DD:D4:EF:4B:C7:66:FF:24:B6:B8:53:A1:97:56:2D:00:09
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       14301B6C476CBE9AE3BD7F118F1584ED91B4C18F
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:32:25 +0000
ROA not before:           Wed 31 Jul 2024 13:27:25 +0000
ROA not after:            Wed 30 Jul 2025 13:32:25 +0000
asID:                     11921
IP address blocks:        200.194.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:1b:6c:47:6c:be:9a:e3:bd:7f:11:8f:15:84:ed:91:b4:c1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:27:25 2024 GMT
            Not After : Jul 30 13:32:25 2025 GMT
        Subject: CN=619480DDD4EF4BC766FF24B6B853A197562D0009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3e:c1:b3:f2:1a:28:bf:d2:b8:4d:49:3f:26:
                    6f:a3:04:a8:10:99:81:cf:45:a5:47:8c:3d:57:2f:
                    df:d4:59:a2:78:5d:3a:6d:80:bd:49:fb:42:b0:8d:
                    a9:f6:8e:b1:6f:9f:c7:7a:7e:5d:22:e3:ef:75:70:
                    66:60:f9:0d:dc:d0:e6:d3:cf:75:fc:27:55:35:6b:
                    ad:83:cd:d6:cd:de:b7:38:48:09:39:43:85:22:54:
                    1c:14:00:ef:ef:6a:a2:ee:5e:ac:df:58:23:6b:86:
                    94:16:50:0b:eb:b9:37:00:1c:97:b3:ee:47:63:23:
                    35:dd:fd:87:2c:2f:5a:22:46:9f:e7:88:72:35:2a:
                    ab:16:04:29:32:0c:11:6e:99:90:70:5c:2c:93:df:
                    30:7d:8a:78:fa:1b:fa:ed:b9:c2:98:b0:00:20:2c:
                    77:86:62:42:b3:c8:92:e1:be:d8:1e:c6:cb:99:ca:
                    8b:5e:a2:2e:10:84:63:75:c3:af:1b:72:d8:09:31:
                    fd:ee:a6:7f:0b:67:b6:b6:f9:9d:af:80:0f:f9:50:
                    18:ce:82:c7:9e:e7:a5:1f:ad:21:ae:f0:1f:5f:7a:
                    5b:59:cc:87:ee:6a:2a:cd:67:68:93:35:42:0d:1b:
                    55:b0:65:fd:98:69:43:92:38:7b:85:19:68:55:aa:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:80:DD:D4:EF:4B:C7:66:FF:24:B6:B8:53:A1:97:56:2D:00:09
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:c1:fa:59:58:81:ea:d9:20:a3:aa:0c:a2:87:2b:f0:b4:
         39:bb:3f:8f:14:ce:bf:94:2e:52:c0:e4:bf:60:a9:7b:2e:da:
         15:e8:05:72:2e:08:dd:5d:2a:fe:5c:71:4c:6e:c0:2a:5e:b5:
         0e:31:1d:eb:da:a1:bc:54:7c:52:ad:39:8f:3a:c3:77:5b:30:
         16:71:2a:73:a2:d3:0b:f5:d0:00:4b:d9:25:1d:2e:38:fb:d8:
         cd:5a:e6:43:3d:3f:7c:40:d3:ab:b6:65:c4:01:05:7d:93:aa:
         fe:50:81:f7:7a:d9:b4:d8:80:93:91:28:df:ca:aa:2e:d6:c9:
         e1:a5:4d:44:91:6b:10:e8:17:05:8f:b1:9e:87:3c:71:e2:f5:
         ee:20:7a:c3:be:f5:9c:d1:5c:e4:18:ae:ce:b8:7f:00:52:e8:
         c3:d1:d1:a1:ca:ab:a2:fc:44:41:90:c6:79:3b:d4:c6:1f:4e:
         3c:1e:cb:47:47:31:ad:4e:04:9b:25:32:65:68:ee:e3:32:3a:
         1c:1d:84:79:d1:a3:91:5f:ca:57:2b:6a:99:54:97:5f:6a:69:
         b0:ca:49:bb:0c:2e:f6:e8:91:7e:ef:6c:d2:f0:a5:d5:58:1c:
         9d:8e:c3:52:13:f9:9a:d1:06:9f:d7:65:67:f9:f9:c1:7d:e8:
         46:12:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net