Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36362e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e36362e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          1SqA7Kz985cQGQUa0gqQpynnNlB205Ld2NgYaIj9w8s=
Subject key identifier:   C8:5F:34:D3:A6:AA:7A:23:F4:89:1A:05:FC:A7:32:D9:28:FB:0E:46
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       1CD386B484BCBE063B396A32CA4A75619744A505
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36362e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:39:13 +0000
ROA not before:           Wed 31 Jul 2024 13:34:13 +0000
ROA not after:            Wed 30 Jul 2025 13:39:13 +0000
asID:                     11921
IP address blocks:        200.233.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d3:86:b4:84:bc:be:06:3b:39:6a:32:ca:4a:75:61:97:44:a5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:34:13 2024 GMT
            Not After : Jul 30 13:39:13 2025 GMT
        Subject: CN=C85F34D3A6AA7A23F4891A05FCA732D928FB0E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:4e:95:c8:4c:ee:b9:81:ef:c4:3f:72:4e:
                    26:ba:db:5b:8d:99:b8:d2:7c:dd:df:85:e5:30:dc:
                    9d:12:57:2d:db:4f:a1:8d:e7:85:02:ec:b1:d6:98:
                    ab:7d:ee:49:7e:1f:37:0f:fe:31:65:c8:4d:33:34:
                    ee:d8:84:2e:48:dd:95:25:26:fe:d0:f8:df:40:42:
                    e2:b1:a8:57:cc:36:aa:5e:13:79:68:46:1e:8a:98:
                    34:89:e3:1e:83:f8:1b:d6:44:16:07:7b:4f:61:31:
                    bd:a0:17:e9:ed:d2:67:56:66:f4:d0:f7:a8:14:e0:
                    af:83:22:d1:8e:cc:44:7a:ed:dd:dc:ca:a4:f6:34:
                    d4:ac:12:3c:8d:c9:23:26:24:d6:0e:f0:85:45:23:
                    66:16:65:e8:6a:71:d0:9c:f2:79:76:fa:c9:41:d2:
                    49:c3:0c:18:9b:3c:e2:0e:ac:b5:d3:f2:2a:27:8e:
                    06:29:7a:84:5a:12:d2:4a:f7:60:18:a6:ba:62:22:
                    8b:20:60:c1:b4:5f:4f:a4:a5:5b:48:31:4f:6f:f3:
                    45:94:46:1a:27:07:90:75:65:59:4d:54:18:b8:75:
                    87:53:e9:29:37:aa:05:80:29:18:a8:fd:93:74:bf:
                    c0:b0:05:66:ad:90:c8:eb:a2:ae:95:ae:d4:db:cf:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5F:34:D3:A6:AA:7A:23:F4:89:1A:05:FC:A7:32:D9:28:FB:0E:46
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36362e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:d5:07:7c:ac:dc:5d:e5:70:b5:03:9a:33:3d:6c:d5:f9:
         5f:ab:ed:c3:9f:80:a0:36:cc:23:dd:66:68:05:21:3a:a9:84:
         c4:ef:4a:ec:62:ec:c3:79:e4:6a:ab:c2:04:74:0d:7d:8c:2b:
         ed:5a:02:c8:7d:2f:05:79:e0:6a:df:2b:21:b7:04:5c:f7:25:
         b9:48:c9:c1:9c:a4:0a:bc:af:6f:b7:fa:cf:69:10:84:90:b7:
         c5:c3:60:0a:f7:55:a1:89:f5:7a:79:56:5f:aa:e4:47:06:30:
         50:9e:9c:9f:18:5c:55:a0:52:8a:c4:61:62:d9:41:b5:84:cd:
         67:f8:82:80:ed:59:62:82:63:0c:f6:05:55:49:a4:0e:cb:95:
         5e:49:1b:7a:07:69:72:37:d7:ae:98:ee:c3:49:0f:b8:cc:04:
         b2:d6:55:20:09:4b:71:6e:5e:ae:79:ec:5c:77:de:8d:62:30:
         5a:32:fb:5a:99:57:b8:28:c5:58:48:ed:49:62:64:6b:68:19:
         27:b5:6e:c2:a0:2c:c2:d2:c2:aa:d8:82:44:55:2d:63:89:45:
         fc:13:dc:0e:b0:c2:93:4f:d5:90:c2:49:44:06:4b:6f:de:e6:
         db:eb:04:45:0d:61:4a:b8:2f:db:2f:52:b1:88:3e:ec:b1:bd:
         af:6f:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net