Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e34392e302f32342d3234203d3e20323730373737.roa
File:                     3230312e37312e34392e302f32342d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          XL+HUGZtE0uwZRNBJWvPNIn5PGOnhXw+JUifR+vaF6I=
Subject key identifier:   FB:20:4C:4C:1E:A0:19:91:44:F4:B8:DC:1C:6F:F0:49:DF:30:74:CC
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       4F64EC99BAEF940173C6E9B1B983A864568C24C3
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e34392e302f32342d3234203d3e20323730373737.roa
Signing time:             Fri 06 Jun 2025 13:34:25 +0000
ROA not before:           Fri 06 Jun 2025 13:29:25 +0000
ROA not after:            Fri 05 Jun 2026 13:34:25 +0000
asID:                     270777
IP address blocks:        201.71.49.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Jun 2025 12:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:64:ec:99:ba:ef:94:01:73:c6:e9:b1:b9:83:a8:64:56:8c:24:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  6 13:29:25 2025 GMT
            Not After : Jun  5 13:34:25 2026 GMT
        Subject: CN=FB204C4C1EA0199144F4B8DC1C6FF049DF3074CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e7:62:22:6d:31:b5:83:6a:3d:a8:e6:89:cb:
                    78:96:bd:94:dc:f1:9e:9f:59:00:73:89:26:b3:c0:
                    70:25:36:36:8a:58:4b:d6:6e:f3:b2:66:d6:ea:14:
                    1f:63:6f:90:04:ae:75:cf:3a:ce:9e:5d:09:c8:1d:
                    07:5e:7f:0a:f3:6d:51:f1:c2:93:c3:bc:04:a0:bd:
                    66:42:91:f2:0b:62:9f:1b:d3:8f:3a:c1:a8:0d:56:
                    e2:76:1a:27:6f:23:4d:53:5e:c2:7d:b5:70:07:9e:
                    80:ec:df:6a:fd:5f:fc:66:35:00:a9:43:d6:b4:a0:
                    87:6c:77:a4:2e:cc:ee:fd:58:b2:28:db:de:0d:44:
                    91:64:a0:bf:40:3e:1f:7c:fc:63:70:46:b4:e2:9e:
                    f9:c4:4b:43:10:ca:15:54:4a:4f:4c:9a:6e:66:9e:
                    e3:b2:9c:3d:31:e1:c0:e3:26:f5:a6:3b:78:de:f8:
                    5d:4b:44:ba:20:ec:4e:52:79:df:b8:d6:6d:de:ce:
                    bc:b0:59:d1:cf:45:7d:50:25:e0:0e:06:42:92:84:
                    db:61:ed:ac:02:d0:dd:e7:26:ba:2c:ce:6a:f3:94:
                    98:79:c2:38:c2:c0:ce:24:7d:42:49:8b:34:99:91:
                    1a:10:60:3a:7a:8d:76:e5:47:94:a4:15:ce:3d:66:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:20:4C:4C:1E:A0:19:91:44:F4:B8:DC:1C:6F:F0:49:DF:30:74:CC
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e34392e302f32342d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:18:cd:33:1c:15:44:cc:dc:c9:bc:7a:ff:c4:c0:75:4d:
         92:60:06:45:56:a7:b4:09:ce:05:bb:78:b2:7f:cc:ba:56:44:
         85:40:25:5b:b1:e9:7e:88:ab:a6:9b:47:12:c1:f9:8e:f8:d7:
         18:90:23:f0:2a:c4:ce:ee:08:fe:0c:17:fc:b1:5c:13:56:ad:
         26:64:75:c4:53:d9:5d:cb:17:2f:a8:2d:0e:7f:99:e8:4e:0a:
         27:7f:b5:cf:42:95:2b:3f:71:ad:f0:18:93:cd:87:35:8d:50:
         4a:54:7e:ae:6a:c5:12:50:3b:53:33:f3:01:20:c5:b4:c0:c9:
         ae:c8:43:5e:14:3d:ea:07:02:64:f1:e7:15:4e:6a:f5:a0:5f:
         19:86:bc:a7:e9:20:e5:a2:ae:da:0f:19:b6:44:50:ad:50:cb:
         b6:c6:4f:36:7e:4f:02:e3:04:b0:0b:e3:0e:26:a0:c2:00:c5:
         aa:fe:3d:54:b4:4c:bc:94:82:b4:dd:09:1c:03:53:53:29:b4:
         a2:05:1e:6e:9b:cb:3d:b4:4d:50:8a:c8:a0:14:92:31:28:58:
         a9:8e:4f:a4:0b:77:7b:c0:60:b6:3f:f8:b0:b9:91:69:70:97:
         e9:17:97:02:69:c1:0f:2a:83:53:c0:ce:67:4f:94:c1:ed:3e:
         54:dd:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:49:06 2025 by rpki-client