Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31382e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e31382e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          y5qQbM6i9Hze8mduqqOs8mVQbeF797vZBsRnDiXqxx4=
Subject key identifier:   C4:4E:AF:30:31:18:8D:F0:17:CC:27:30:50:98:F1:6C:2C:26:A9:15
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       26FFA5FE3862A21C542F6712417D8ABEAC522860
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31382e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:56 +0000
ROA not before:           Wed 31 Jul 2024 13:37:56 +0000
ROA not after:            Wed 30 Jul 2025 13:42:56 +0000
asID:                     11921
IP address blocks:        201.49.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ff:a5:fe:38:62:a2:1c:54:2f:67:12:41:7d:8a:be:ac:52:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:56 2024 GMT
            Not After : Jul 30 13:42:56 2025 GMT
        Subject: CN=C44EAF3031188DF017CC27305098F16C2C26A915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:19:a6:e2:90:b1:4d:f8:d8:c9:f2:e5:ac:
                    b7:cd:f6:95:fa:35:65:2e:ad:25:62:36:5a:3d:ac:
                    77:79:6a:04:6f:01:22:61:8d:5f:ea:c7:12:95:e7:
                    69:64:1f:0c:4b:f1:4a:b4:6e:4f:a8:f2:72:20:37:
                    26:62:0f:81:ba:c0:40:30:d1:29:ad:5b:eb:67:59:
                    a9:71:4f:90:20:6f:08:18:17:41:8b:f9:85:25:5d:
                    3d:bf:71:4d:e8:57:32:33:c3:38:a4:6b:00:b0:a9:
                    4b:4d:39:08:65:a5:d6:41:3c:ca:31:19:7c:b2:b4:
                    df:80:18:0f:8f:72:87:55:90:9b:79:f3:fa:bc:99:
                    30:8a:ab:e2:fb:f0:60:01:2a:e5:54:32:f4:05:ba:
                    2c:e5:03:63:b8:39:90:ca:08:bc:b7:ad:a6:a5:54:
                    53:a3:a1:7e:33:5a:b1:d6:9f:30:93:98:ab:56:4c:
                    2d:12:ab:b6:91:b2:aa:d1:6b:a2:c7:ee:a1:a1:f6:
                    88:db:03:3d:5e:41:72:95:90:67:03:54:25:b1:38:
                    c7:54:d4:e6:51:a5:92:a1:cf:5f:da:dc:ef:58:ed:
                    64:26:78:ba:82:48:84:9b:16:f8:bf:0a:f1:eb:ff:
                    d7:6e:c5:62:69:9f:b0:70:1b:48:be:89:89:5c:b0:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4E:AF:30:31:18:8D:F0:17:CC:27:30:50:98:F1:6C:2C:26:A9:15
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31382e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b0:5f:5c:e6:72:f8:3c:18:1e:86:99:2b:54:6a:59:c2:9c:
         18:76:2d:8f:ad:f8:76:6e:96:be:b4:0a:84:08:95:25:eb:ab:
         52:33:78:fb:21:72:1a:26:0e:4b:24:d4:f8:70:de:40:27:2d:
         f0:80:f1:10:0a:16:15:84:d5:d1:90:fb:d7:d2:ae:b7:5e:fe:
         30:e7:aa:85:fc:c5:3c:3a:a0:7a:5a:e5:fd:4a:2d:8b:85:fa:
         52:27:2b:c0:13:f5:75:e3:e5:31:94:2b:67:3f:f0:34:c4:85:
         c8:2e:b1:3f:39:60:dc:41:f7:39:67:b2:fc:20:8b:4a:56:83:
         59:3f:9c:68:8c:b4:15:6b:42:64:bc:c1:52:2e:59:47:7f:2c:
         c4:e3:85:33:90:64:c6:e2:eb:76:a6:bb:fc:19:44:d3:18:6a:
         3d:ec:77:ce:6d:46:c4:26:84:1c:05:23:51:66:1f:a7:23:48:
         e9:81:c2:61:81:ab:5e:ee:2a:bf:08:c7:25:e8:ce:20:ef:f5:
         9a:bb:a0:a1:1d:c5:b3:12:19:d0:eb:0a:2f:2e:55:d6:57:87:
         56:59:5e:74:3f:c2:8d:07:f3:17:22:3f:0b:cc:c2:86:e2:ff:
         44:9d:0e:04:67:b2:68:5c:ae:f4:19:f7:d2:13:2b:ba:34:59:
         a1:df:16:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net