Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e352e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e352e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          hCuJ2e3kvXEJqf4PtIqB282r/Lg37uVqjlHv/EXX4z8=
Subject key identifier:   02:4B:90:8F:E2:01:B9:55:76:E8:CB:96:D6:35:3E:01:3A:4E:10:54
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       1A522D1EC2F237DE83DCA99874B1612D328246A9
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e352e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:50 +0000
ROA not before:           Wed 31 Jul 2024 13:37:50 +0000
ROA not after:            Wed 30 Jul 2025 13:42:50 +0000
asID:                     11921
IP address blocks:        201.49.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:52:2d:1e:c2:f2:37:de:83:dc:a9:98:74:b1:61:2d:32:82:46:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:50 2024 GMT
            Not After : Jul 30 13:42:50 2025 GMT
        Subject: CN=024B908FE201B95576E8CB96D6353E013A4E1054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:f7:04:21:46:99:4d:60:80:3e:cc:cb:a0:
                    b8:77:2c:b6:e4:c9:e0:fc:a4:65:70:50:6d:b0:b2:
                    b9:75:03:07:4b:07:ae:bd:bc:99:9c:30:90:8f:45:
                    98:c9:e5:b9:79:90:4a:48:c6:e3:5a:ba:26:b9:03:
                    f9:af:73:ee:38:9a:ef:91:bb:ba:68:ef:02:e8:ef:
                    72:33:12:99:c2:e2:b1:7f:58:51:54:32:7e:fd:00:
                    5f:b6:cf:26:f9:13:e3:0c:7a:84:ae:0e:4c:ce:da:
                    ef:a9:3a:39:3e:bf:07:a1:e4:52:8a:e0:14:23:07:
                    ca:fd:9f:37:a0:db:0b:c4:b3:79:fa:3c:1a:da:36:
                    f9:94:0b:0a:8d:db:51:8c:5c:fc:4a:6d:92:bd:8f:
                    10:4b:0b:7d:50:7b:87:a5:6e:ad:b8:6a:12:f4:01:
                    b4:85:18:34:b8:41:09:b9:29:fe:ff:a6:1f:0c:6e:
                    0d:c3:65:39:4c:be:41:3c:a6:c2:2c:73:70:6d:5d:
                    63:5f:17:a1:ca:79:6e:30:82:91:fd:ee:9e:6d:d9:
                    6f:ea:74:9d:19:72:e9:c8:67:b3:b8:b7:46:2a:3d:
                    81:93:ff:2b:9f:1f:38:9b:7c:50:2c:20:89:e8:6e:
                    48:8f:c2:79:d7:b2:82:c9:ce:9b:9d:12:23:2d:7f:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4B:90:8F:E2:01:B9:55:76:E8:CB:96:D6:35:3E:01:3A:4E:10:54
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e352e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f2:93:59:58:8a:71:55:f4:f0:53:64:89:70:f1:a8:04:db:
         14:8b:c7:0d:db:75:ae:4a:70:65:2d:d6:a6:fa:78:2f:4a:83:
         5f:65:98:fa:7a:1b:b4:96:aa:3d:02:24:28:23:e7:fd:2b:12:
         99:c6:4d:42:17:47:f7:ee:18:29:70:c7:3e:7d:9a:0b:ad:db:
         33:a1:30:f0:15:96:c4:21:88:bf:7b:4e:24:78:46:a1:d8:d8:
         d4:2e:33:2e:d7:09:67:16:ff:04:41:04:88:fa:7e:4c:4e:c4:
         f5:d8:d4:d6:8d:75:07:29:50:92:f2:90:f1:ef:37:d2:81:33:
         62:7e:0c:81:db:32:45:a0:e8:3c:da:50:74:99:5f:12:7b:2c:
         60:09:73:68:6d:92:1d:86:7c:46:34:ca:a5:45:1c:69:cc:09:
         d1:b7:d1:d1:68:ad:54:c1:ce:2a:a9:11:c2:15:67:aa:a1:74:
         69:ed:79:fe:c6:3a:43:ca:45:d4:b2:61:1e:fa:ea:cb:01:6e:
         c5:0f:b0:cb:ca:0a:f7:54:fb:66:30:52:e9:3e:1f:3d:87:44:
         45:2d:df:cf:08:b6:cb:b6:44:3c:fb:a2:14:70:51:92:6a:ae:
         d4:e2:73:36:e5:96:b6:fc:b7:98:01:46:30:15:a5:31:b7:d7:
         dd:9c:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net