Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37392e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37392e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          PB7Q3xa2oC0jOx3ynsPhZVXsJLXY/XCF8R72J1wfJW8=
Subject key identifier:   F5:98:62:03:FB:B7:27:53:0D:A5:D2:6F:19:86:70:86:A9:4D:87:7C
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       7BD81E575A93A3609ADC6253B6D13DB631C2CACC
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37392e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:40:31 +0000
ROA not before:           Wed 31 Jul 2024 13:35:31 +0000
ROA not after:            Wed 30 Jul 2025 13:40:31 +0000
asID:                     11921
IP address blocks:        200.233.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d8:1e:57:5a:93:a3:60:9a:dc:62:53:b6:d1:3d:b6:31:c2:ca:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:35:31 2024 GMT
            Not After : Jul 30 13:40:31 2025 GMT
        Subject: CN=F5986203FBB727530DA5D26F19867086A94D877C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:57:1d:a7:4c:3a:6c:92:f2:40:ff:ac:b5:
                    7e:d9:82:a5:d9:4b:d9:89:33:7d:9b:ec:e2:34:7c:
                    b2:9d:89:78:91:c2:97:e9:2a:ca:63:8b:7e:0a:ff:
                    cf:b2:29:42:07:21:fc:af:0f:da:df:37:72:23:95:
                    da:fa:c1:70:17:20:ec:44:bf:19:6e:ce:1f:3a:96:
                    3f:4e:b6:07:24:ac:ee:eb:59:e4:e1:70:76:6f:2c:
                    5a:b1:2f:b3:65:0d:a4:7a:93:02:06:2d:68:2a:6b:
                    bf:cb:cf:6b:04:1a:fd:72:f6:2f:18:3c:8b:39:e5:
                    52:e7:3a:25:5b:a3:1e:12:ce:50:47:e1:c5:b3:0a:
                    fd:85:2a:fa:c4:31:96:bb:ad:66:9a:e7:ee:43:8e:
                    ef:60:f7:93:c4:e7:4f:82:4f:80:14:9b:32:60:e0:
                    d8:10:97:07:92:8e:af:30:50:9d:a4:62:6c:f1:9f:
                    06:7b:26:df:22:de:8b:c1:38:73:61:c5:75:09:ab:
                    f8:66:2d:d9:04:6b:94:81:33:fd:2f:7d:2b:1c:c7:
                    75:6c:7d:48:4f:8a:28:40:1d:03:cc:7d:f4:9b:1e:
                    cc:f9:94:6e:2c:fb:c8:91:ba:5b:a6:5b:fe:5d:62:
                    de:4a:89:04:96:67:f4:e0:98:63:f3:b6:1f:f0:3a:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:98:62:03:FB:B7:27:53:0D:A5:D2:6F:19:86:70:86:A9:4D:87:7C
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37392e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:88:11:56:ce:69:d5:4b:d2:27:4a:79:8a:29:81:d5:7e:
         4b:21:4f:be:0a:bc:e4:4c:10:0c:aa:42:bd:87:ad:80:6f:3b:
         22:d5:5c:0c:68:a8:95:e1:5a:57:a6:d1:10:10:55:f5:93:34:
         24:a6:42:d0:e8:ce:41:77:97:85:0e:e2:b9:34:53:b2:8a:a7:
         d0:07:39:b0:83:4d:a6:f8:e1:cd:00:9e:89:6a:a4:1a:42:f4:
         09:ff:67:ce:6c:d6:88:6c:1b:e1:b9:97:08:da:42:06:2c:0e:
         bc:8c:8a:3d:c4:c1:68:24:67:36:60:b7:ae:70:e1:2f:e1:05:
         b8:28:1b:93:36:e9:8c:ff:54:0e:15:2b:19:a6:37:be:0d:6e:
         ce:22:87:83:fc:a5:6e:fc:db:5b:41:93:73:7b:50:1b:3e:5e:
         cb:0f:a0:ba:94:6e:92:32:39:29:39:21:93:6e:b2:a0:88:6c:
         66:dc:37:e6:22:fd:3b:7f:ab:bd:24:e1:d2:77:90:3b:a0:fc:
         64:d3:ad:57:df:26:1f:b3:96:14:79:7e:3b:b3:ea:cc:e8:54:
         14:cd:11:e9:7d:4b:26:aa:8d:a9:f6:70:72:7f:85:a0:57:8e:
         4f:c4:d8:85:51:f0:4a:e8:2f:b5:4b:0c:fc:82:68:84:e4:9f:
         f7:79:b5:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe9geV1qTo2Ca3GJTttE9tjHCyswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA3MzExMzM1MzFaFw0yNTA3MzAxMzQwMzFaMDMxMTAvBgNV
BAMTKEY1OTg2MjAzRkJCNzI3NTMwREE1RDI2RjE5ODY3MDg2QTk0RDg3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLolcdp0w6bJLyQP+stX7ZgqXZ
S9mJM32b7OI0fLKdiXiRwpfpKspji34K/8+yKUIHIfyvD9rfN3Ijldr6wXAXIOxE
vxluzh86lj9OtgckrO7rWeThcHZvLFqxL7NlDaR6kwIGLWgqa7/Lz2sEGv1y9i8Y
PIs55VLnOiVbox4SzlBH4cWzCv2FKvrEMZa7rWaa5+5Dju9g95PE50+CT4AUmzJg
4NgQlweSjq8wUJ2kYmzxnwZ7Jt8i3ovBOHNhxXUJq/hmLdkEa5SBM/0vfSscx3Vs
fUhPiihAHQPMffSbHsz5lG4s+8iRulumW/5dYt5KiQSWZ/TgmGPzth/wOqCZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9ZhiA/u3J1MNpdJvGYZwhqlNh3wwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMjMzMzMyZTM3MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyOlPMA0GCSqGSIb3DQEBCwUAA4IBAQBhyYgRVs5p
1UvSJ0p5iimB1X5LIU++CrzkTBAMqkK9h62Abzsi1VwMaKiV4VpXptEQEFX1kzQk
pkLQ6M5Bd5eFDuK5NFOyiqfQBzmwg02m+OHNAJ6JaqQaQvQJ/2fObNaIbBvhuZcI
2kIGLA68jIo9xMFoJGc2YLeucOEv4QW4KBuTNumM/1QOFSsZpje+DW7OIoeD/KVu
/NtbQZNze1AbPl7LD6C6lG6SMjkpOSGTbrKgiGxm3DfmIv07f6u9JOHSd5A7oPxk
061X3yYfs5YUeX47s+rM6FQUzRHpfUsmqo2p9nByf4WgV45PxNiFUfBK6C+1Swz8
gmiE5J/3ebUY
-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net