Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131372e302f32342d3234203d3e20323730373737.roa
File:                     3133312e3136312e3131372e302f32342d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          W8Q2bUPJoMuRh2QI54XaixjOmiOECiNveUBNW6+BOcg=
Subject key identifier:   2E:7B:7C:EF:8D:01:81:B4:E1:9C:81:A2:5B:0C:90:69:05:4C:4F:19
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       0905C95758F33C42259C1A75E6D19510BFB117DC
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131372e302f32342d3234203d3e20323730373737.roa
Signing time:             Fri 06 Jun 2025 13:34:26 +0000
ROA not before:           Fri 06 Jun 2025 13:29:26 +0000
ROA not after:            Fri 05 Jun 2026 13:34:26 +0000
asID:                     270777
IP address blocks:        131.161.117.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Jun 2025 12:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:05:c9:57:58:f3:3c:42:25:9c:1a:75:e6:d1:95:10:bf:b1:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  6 13:29:26 2025 GMT
            Not After : Jun  5 13:34:26 2026 GMT
        Subject: CN=2E7B7CEF8D0181B4E19C81A25B0C9069054C4F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:e1:d0:28:90:d4:06:67:b7:a8:e6:76:aa:
                    77:58:fa:6e:d4:ca:bc:28:14:a7:cc:39:73:41:69:
                    42:6c:24:4f:29:79:88:cc:6b:0f:61:dd:75:da:a3:
                    b0:6b:50:d8:de:e8:3c:eb:57:c4:53:32:12:08:1d:
                    05:4f:e7:e4:76:2d:f2:81:73:f3:5f:4c:d4:21:67:
                    43:c4:e3:e0:0d:6f:a5:be:de:b3:31:55:a0:ee:48:
                    d3:10:2b:d0:5a:fd:76:5d:67:94:c5:20:0b:eb:af:
                    64:4c:64:2e:e0:f6:46:f9:98:a6:cf:4e:12:9b:ae:
                    98:07:9c:b5:84:5f:0a:eb:61:f7:a0:27:d5:b5:f0:
                    f5:6e:85:06:02:76:86:1c:de:37:1c:25:12:16:14:
                    35:0e:3a:8b:97:c9:c5:99:15:80:31:bc:61:dc:05:
                    76:4f:04:d7:67:d8:fc:f3:37:a5:31:94:56:ea:4d:
                    5f:b6:51:25:f2:07:b8:80:4c:26:32:be:47:5b:a4:
                    e7:ab:06:9d:bb:74:06:f2:48:df:4f:77:01:97:65:
                    cb:62:cd:cd:d2:37:af:3b:50:93:c0:70:86:be:ab:
                    d9:2f:02:44:cf:3d:41:69:78:2d:05:8a:3f:02:80:
                    4f:62:dd:d6:b8:20:cd:dd:c1:52:01:43:e3:50:27:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:7C:EF:8D:01:81:B4:E1:9C:81:A2:5B:0C:90:69:05:4C:4F:19
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131372e302f32342d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:7f:d0:61:b5:55:ab:e8:f3:56:27:30:d0:50:fa:8a:5f:26:
         9e:6b:c9:b9:4f:da:da:88:f1:cd:e0:51:13:73:6c:28:fd:c4:
         da:b7:fa:b8:1b:53:55:52:97:e1:4c:a2:17:87:ca:2b:1f:50:
         ed:96:e8:8b:da:db:5b:b7:24:78:be:c3:d2:2f:21:10:98:1b:
         b8:83:89:08:f7:0a:2b:ed:9d:1f:27:96:82:4b:e0:7e:ee:b3:
         c5:18:57:bb:9f:e8:a6:70:20:09:7e:5f:aa:e7:d8:4d:36:af:
         dd:ad:8d:97:d3:c4:71:7a:c2:50:e4:95:93:84:56:20:31:4e:
         c4:8e:ab:05:d7:b7:23:18:b8:07:bd:30:50:4f:20:f5:d3:6e:
         e3:12:05:8a:46:fa:11:74:a3:44:da:2d:78:de:5a:c8:ce:84:
         de:bb:18:02:0a:dd:ec:a9:48:0e:45:e8:4c:6a:a5:68:8c:67:
         3b:20:26:2e:63:00:10:1f:e8:8d:3d:e0:f0:9e:6b:ab:72:0a:
         de:9c:75:26:7b:93:12:36:67:a7:0b:95:8b:a1:78:b0:d6:14:
         af:02:1b:73:8b:a3:9d:5d:29:22:9a:fc:f0:31:d7:94:21:2e:
         c3:bf:c0:9b:71:7a:66:69:d7:3a:8f:25:39:30:ac:3d:5b:d7:
         ec:a0:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:23:03 2025 by rpki-client