Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e362e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e362e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          fPFjN7sHoD5Ax8BkyFPVrSlmhsRWLQN9dqUfEqjFl1E=
Subject key identifier:   2D:56:EA:4D:51:46:52:79:42:D3:4B:EA:83:10:BE:80:55:9C:10:D0
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       1C45503D1DDC9A48CBA61A0F447C35BFB9949C60
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e362e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:50 +0000
ROA not before:           Wed 31 Jul 2024 13:37:50 +0000
ROA not after:            Wed 30 Jul 2025 13:42:50 +0000
asID:                     11921
IP address blocks:        201.49.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:45:50:3d:1d:dc:9a:48:cb:a6:1a:0f:44:7c:35:bf:b9:94:9c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:50 2024 GMT
            Not After : Jul 30 13:42:50 2025 GMT
        Subject: CN=2D56EA4D5146527942D34BEA8310BE80559C10D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:01:f5:38:2b:83:2c:d5:d9:e6:3f:2d:cb:
                    43:ef:5b:08:70:85:b8:6c:a5:a6:66:d0:00:01:81:
                    f2:ea:c9:ea:79:2f:e5:8e:85:f1:3d:12:fa:13:41:
                    8e:b2:ec:60:f6:49:a5:4a:a8:94:a8:c6:06:94:29:
                    28:5d:f6:a7:8a:e0:2b:b7:cb:a5:be:df:bb:c9:1e:
                    d8:36:10:12:97:48:3c:53:83:33:b5:96:f7:47:60:
                    b2:9b:ad:36:f7:b6:f6:48:b2:29:97:bc:86:3d:da:
                    a3:f7:c7:c7:20:9a:eb:4a:3a:c0:ee:69:8a:ce:fd:
                    75:5e:ea:f6:f6:06:69:b9:99:cb:4a:b3:1d:d8:9a:
                    c0:ca:57:98:92:ba:28:b6:ca:ed:44:de:71:dd:9b:
                    cd:14:ef:82:5b:3b:55:41:ea:64:ad:e7:33:fc:07:
                    4c:ff:a3:f4:69:47:72:15:d9:af:fc:58:91:5e:a0:
                    b5:32:79:10:b6:f3:f4:22:6f:5f:5e:41:36:a0:2b:
                    4d:db:07:fa:88:3c:86:8b:e2:1d:aa:f4:69:44:0e:
                    76:a4:29:43:c2:b1:cf:48:00:74:6b:9a:02:c4:60:
                    c0:31:c2:a5:95:48:6a:35:9f:e1:6a:eb:78:51:71:
                    54:99:f8:e0:09:56:ce:e4:e7:50:5b:a9:3c:4e:21:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:56:EA:4D:51:46:52:79:42:D3:4B:EA:83:10:BE:80:55:9C:10:D0
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e362e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:83:5c:db:a3:5e:6f:8a:ff:14:f7:a3:3e:d8:af:d9:88:7e:
         01:e5:04:f2:6d:4a:a0:c1:2e:2c:01:d8:95:78:2f:d4:05:57:
         59:cb:ce:d7:39:af:61:f8:8e:33:c5:73:52:e5:f7:0a:d4:1f:
         24:70:a1:43:ae:79:7d:34:0d:91:c4:36:33:6b:4b:10:34:be:
         08:79:c6:4d:e8:09:8d:bb:10:be:95:94:e0:70:b1:18:cc:39:
         ef:50:74:74:8b:dc:f1:c8:c2:ac:7e:3c:24:85:f2:37:d3:4c:
         35:b3:16:f4:44:28:af:31:ca:a4:fd:5a:bd:a8:bc:f5:31:aa:
         68:bf:4e:19:2b:c5:6e:f3:48:05:50:99:c6:23:70:9c:a5:63:
         45:3e:43:72:0c:21:d3:97:5e:11:58:d0:47:fc:f9:8c:91:4e:
         8d:b5:1d:71:eb:75:79:14:06:ec:08:cb:ad:2a:d8:6a:30:f8:
         cf:4f:19:41:18:39:da:29:92:87:f9:87:ea:f0:33:63:64:74:
         2a:fa:9b:b8:6f:13:c9:e2:61:b7:c6:b2:c5:06:fd:8a:e4:3e:
         ae:8f:87:db:91:d0:b3:6c:83:61:b5:9f:6f:2d:59:f6:1f:6b:
         00:26:fe:74:e6:02:ac:66:81:d5:01:ba:65:e6:bd:ff:ec:e9:
         f5:c2:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 23:58:25 2024 by rpki-client on console.sobornost.net