Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131382e302f32342d3234203d3e20323730373737.roa
File:                     3133312e3136312e3131382e302f32342d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          Kn0NmD+HWAQ3KX+FnVuICDBWuKsYsKJBnCqqlpOn7Mo=
Subject key identifier:   C5:49:FD:99:4F:F8:05:A1:39:0C:C0:31:86:9E:E3:D9:AC:53:30:80
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       4E9FE758EE39F442AF8C9562278BE7A2E9D7ED1D
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131382e302f32342d3234203d3e20323730373737.roa
Signing time:             Fri 06 Jun 2025 13:34:28 +0000
ROA not before:           Fri 06 Jun 2025 13:29:28 +0000
ROA not after:            Fri 05 Jun 2026 13:34:28 +0000
asID:                     270777
IP address blocks:        131.161.118.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Jun 2025 12:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9f:e7:58:ee:39:f4:42:af:8c:95:62:27:8b:e7:a2:e9:d7:ed:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  6 13:29:28 2025 GMT
            Not After : Jun  5 13:34:28 2026 GMT
        Subject: CN=C549FD994FF805A1390CC031869EE3D9AC533080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:7b:79:d9:1a:37:a0:70:e7:68:81:89:ac:
                    cb:69:b5:00:35:d3:e9:ac:41:53:35:ae:db:eb:ee:
                    5c:6d:bc:cb:0b:5d:c2:85:1b:80:72:5b:c6:7e:9b:
                    88:c3:76:c7:cc:2d:87:0a:39:a0:78:e0:7e:28:5b:
                    65:77:8e:1b:99:81:db:29:b4:28:d2:7f:df:7c:87:
                    da:e1:8a:62:0d:34:97:ed:e8:ae:3c:b2:72:aa:be:
                    7d:db:5d:f9:6d:ac:00:14:aa:67:35:da:dc:22:f2:
                    ca:2b:09:5a:de:90:0d:85:fd:b0:db:72:3b:d5:3a:
                    b9:ae:f2:13:e7:fd:72:bf:8f:36:93:bd:15:40:03:
                    15:f5:0a:f2:27:ed:3b:df:48:e9:44:15:0a:1e:30:
                    b7:2a:c2:fe:de:5f:0b:4d:95:77:28:2e:94:53:18:
                    bc:33:f9:2e:14:03:ed:22:cf:4e:63:d4:62:cc:0f:
                    19:98:df:8b:b2:d8:a7:37:16:93:53:28:8c:53:73:
                    60:eb:04:47:48:86:1d:14:04:35:13:3c:03:80:7f:
                    ff:a9:10:47:59:1a:2d:60:f2:cb:e4:d3:d2:8e:96:
                    bc:c2:54:c3:2f:80:77:52:cf:51:ea:c4:66:ce:8b:
                    1f:7b:76:18:fb:8a:bc:dc:a4:e5:57:7b:96:6a:e1:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:FD:99:4F:F8:05:A1:39:0C:C0:31:86:9E:E3:D9:AC:53:30:80
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131382e302f32342d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:6d:db:09:61:8b:58:b5:29:34:de:6b:5e:27:1f:81:32:
         94:ea:2a:21:8c:f0:6e:23:50:32:11:68:72:35:2a:a9:1a:b6:
         06:f3:0c:b5:7a:11:b7:28:92:97:43:f0:a4:fe:c1:ba:1a:8d:
         8b:1e:11:d7:a3:9b:3a:e5:f5:23:7d:d0:7c:e2:7a:77:f6:dd:
         47:87:ad:65:88:68:c3:22:c0:5a:22:e5:ad:c4:cb:7a:44:1c:
         6a:26:63:3f:74:cb:35:9f:01:e4:85:77:ec:0b:88:c5:3a:cf:
         e2:2b:75:0f:f9:f0:91:2f:54:45:9e:84:44:a9:8e:22:f6:9d:
         2e:a7:6a:b0:00:2b:c9:6d:8c:72:07:a1:fe:e0:0e:1f:66:24:
         31:4f:a6:ab:bd:a3:e3:55:df:f4:54:02:1c:17:3d:72:a4:e9:
         90:3b:77:c0:64:ed:a0:98:71:c8:f0:a3:89:4e:9b:30:aa:4c:
         fa:78:0e:a1:61:b1:6e:2b:52:f3:ea:4d:d7:93:bf:18:0d:c8:
         9f:2b:c6:be:ee:38:6b:ba:49:5d:e7:21:57:e6:b2:c7:2c:cb:
         be:87:19:1c:80:2d:79:40:81:6c:ff:93:9e:49:46:79:0d:28:
         79:4b:9b:53:ae:34:20:78:07:0e:59:36:02:81:93:12:a8:b0:
         33:56:45:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:59:12 2025 by rpki-client