Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32302e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e32302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          Ky+dLZeFKt7HGQ4TN0eY1Cp9VFx7L66EqDxb2/im8j0=
Subject key identifier:   BA:58:77:67:05:15:C2:4E:5B:90:A6:2A:8E:EE:3D:F4:8F:BE:7A:06
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4D6104C37F27015A30B38468A19E89D6A09133FF
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32302e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:57 +0000
ROA not before:           Wed 31 Jul 2024 13:37:57 +0000
ROA not after:            Wed 30 Jul 2025 13:42:57 +0000
asID:                     11921
IP address blocks:        201.49.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:61:04:c3:7f:27:01:5a:30:b3:84:68:a1:9e:89:d6:a0:91:33:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:57 2024 GMT
            Not After : Jul 30 13:42:57 2025 GMT
        Subject: CN=BA5877670515C24E5B90A62A8EEE3DF48FBE7A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:1e:50:54:93:91:bf:3b:42:50:0e:ca:31:
                    16:20:c9:0d:83:bc:c6:3d:fa:a6:f0:40:93:32:36:
                    65:a9:d6:ae:57:27:df:43:6e:f7:9a:d3:0a:34:e4:
                    03:20:60:55:f3:fd:07:0e:2c:42:91:45:5c:90:4d:
                    3d:08:17:8d:b9:08:bc:53:c8:97:0a:fe:bc:b9:f2:
                    ce:36:39:bc:11:be:09:91:2a:65:1b:3e:6a:d0:a6:
                    12:b1:f7:07:77:b9:a6:8d:83:a7:8e:7c:83:6f:d7:
                    14:bd:71:9e:75:e6:35:22:13:b3:8a:16:35:f5:be:
                    e5:f0:42:b0:9f:3d:a4:e9:07:f0:1f:74:96:36:25:
                    cf:6f:ba:41:8c:40:44:47:cf:46:ee:1d:c7:64:4e:
                    c7:dc:28:01:32:ee:d8:68:2c:6e:6a:4b:b0:45:47:
                    bd:14:97:8e:9c:4e:02:13:78:86:9f:2e:50:79:da:
                    4d:bc:e3:e3:c2:be:21:d7:94:a0:fe:26:dc:71:85:
                    2c:88:06:20:4e:05:92:5d:6f:35:af:84:52:99:9d:
                    8d:75:e7:d7:cb:27:1f:ec:28:91:61:36:db:1c:3b:
                    76:91:01:87:22:65:3c:90:00:0a:43:24:3a:2c:ea:
                    38:6c:d9:71:28:83:c5:b0:89:5a:62:ce:ea:69:5d:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:58:77:67:05:15:C2:4E:5B:90:A6:2A:8E:EE:3D:F4:8F:BE:7A:06
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e32302e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:fc:ae:84:4c:7f:01:3d:b9:d4:4a:d8:a6:36:9c:db:77:
         06:54:60:12:4f:e9:ad:ec:f4:e6:81:9e:d0:3e:ed:a9:82:6f:
         18:e0:14:72:f4:bd:23:7e:37:bc:2b:d5:2d:f4:78:9a:9e:dc:
         39:75:78:2f:29:5b:63:0c:ef:d8:81:75:84:dc:e3:74:f5:68:
         7b:86:e2:a4:96:20:d0:0e:43:3d:87:1c:96:50:69:e6:ab:6c:
         c3:aa:a8:35:a6:86:90:99:fe:af:0c:bf:72:f2:0e:53:fb:45:
         69:ed:69:83:bb:1c:52:f3:ce:c7:f7:25:d2:d6:13:be:77:27:
         00:7d:86:62:e6:cf:2b:c5:38:2f:71:a6:c1:4e:e4:35:58:b5:
         00:6f:b9:59:ac:7d:65:42:95:3a:3b:ea:6c:21:86:19:96:8b:
         da:b9:55:6a:3f:63:ec:f2:bd:4a:43:59:34:0b:15:0d:78:44:
         bb:2a:f9:8a:f5:37:e2:2e:fd:7c:0b:b8:89:dc:25:79:fe:5a:
         23:cb:6c:d1:40:a9:78:e9:e1:f8:8b:9a:30:f9:95:a1:ba:6d:
         75:39:0b:fc:16:d1:03:26:56:c3:41:b1:01:21:20:5c:86:01:
         e6:ae:78:99:4b:ba:de:42:5c:92:ed:76:e3:2d:4b:f5:24:d6:
         ab:95:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net