Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          R6s5bRlCvnl3fwlUEMRcWy01or2PsA1jlVjZcKOHS+o=
Subject key identifier:   5E:7F:A0:0D:9D:C4:DC:8D:3C:8A:6D:CE:5A:6A:15:25:CF:D0:8B:C5
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       2F1FDC0CA7F1024A980C038E943D6D1E030CC866
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:39:15 +0000
ROA not before:           Wed 31 Jul 2024 13:34:15 +0000
ROA not after:            Wed 30 Jul 2025 13:39:15 +0000
asID:                     11921
IP address blocks:        200.233.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1f:dc:0c:a7:f1:02:4a:98:0c:03:8e:94:3d:6d:1e:03:0c:c8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:34:15 2024 GMT
            Not After : Jul 30 13:39:15 2025 GMT
        Subject: CN=5E7FA00D9DC4DC8D3C8A6DCE5A6A1525CFD08BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:56:fd:55:ef:be:0a:ea:c5:83:b6:74:a0:
                    4d:85:e0:f7:0c:22:4b:c4:38:62:79:10:46:4f:2a:
                    31:f3:d4:e0:04:48:b9:d9:d2:e5:f8:79:30:40:00:
                    9f:11:26:a6:95:29:45:81:32:5e:c5:6d:a4:75:32:
                    ac:9d:3c:e2:4a:0e:d4:fa:07:af:45:29:6f:15:06:
                    06:ff:b4:9a:e3:f6:b7:32:fb:6e:d0:aa:68:2e:6a:
                    96:2f:64:46:4a:7e:ab:2d:3c:7c:93:7a:38:1f:b7:
                    86:cc:2e:18:62:28:c4:9e:cf:d8:b4:5b:ce:26:54:
                    fe:cc:f9:f8:d4:8b:1b:84:af:38:0d:21:f2:b5:29:
                    31:cc:af:1c:f8:af:a4:87:4b:71:68:18:90:44:3f:
                    3f:20:39:1d:8d:5a:22:9c:39:06:74:c1:42:48:2c:
                    7d:8f:1d:c8:fa:08:29:e4:6b:c5:40:1d:01:aa:f7:
                    d0:99:75:c9:e7:0b:7e:65:7a:f0:22:68:b0:a0:62:
                    f3:70:81:0d:36:c5:a1:51:6b:f1:ef:78:04:22:ce:
                    be:6a:3f:6d:f2:f2:ab:f5:db:f2:12:e4:ce:03:fe:
                    ad:7d:e0:ad:7d:30:13:6b:4f:a1:d5:54:08:63:d8:
                    08:fa:16:22:7e:9e:60:f9:e1:ca:a3:f3:e5:9f:7b:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:A0:0D:9D:C4:DC:8D:3C:8A:6D:CE:5A:6A:15:25:CF:D0:8B:C5
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:e7:2e:05:3d:c3:f0:ee:21:c7:d9:ab:95:f2:d2:49:d4:
         cf:a6:fd:b7:02:55:6a:a3:12:da:0d:3a:a7:ab:82:58:25:4f:
         2a:13:38:7f:c6:ea:c5:3f:8d:24:a2:64:67:41:95:dd:24:19:
         43:a1:2b:99:54:68:1e:9c:ce:b0:81:0a:26:62:0c:34:0b:c7:
         8c:ed:18:63:19:6e:e4:d2:e8:96:1f:3c:9d:89:c7:93:22:b0:
         df:28:3d:e6:a4:9c:4a:c9:bb:34:e4:f8:5b:4f:f0:d2:cf:54:
         03:4e:26:01:64:17:42:62:da:ed:ed:ab:10:62:88:f8:52:09:
         f8:49:e0:95:ea:98:be:78:b7:83:ca:4c:63:ed:37:59:2a:9a:
         02:5a:26:a2:0f:35:ce:9b:39:e7:34:c9:2e:c6:15:8a:4d:a0:
         84:c5:8c:03:3b:cb:58:5e:99:16:e1:3b:f5:c1:6a:87:6c:14:
         48:eb:6e:0f:9e:53:eb:89:ae:e6:91:85:7c:86:89:c4:00:04:
         fe:57:84:eb:da:05:44:78:9f:a3:59:cf:04:d4:5b:27:fc:cd:
         bf:08:61:4b:ee:21:83:3a:cf:41:13:03:ff:f6:b1:0f:dc:9f:
         4c:bf:68:75:c1:f3:66:bc:09:77:b4:4e:8d:b4:bd:69:6e:be:
         91:e2:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net