Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e35302e302f32342d3234203d3e20323730373737.roa
File:                     3230312e37312e35302e302f32342d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          DDtaT+kyZwzhJI3wCuMo0Mp5KskxnayfFjDZcEWi+7Y=
Subject key identifier:   22:F2:4A:42:87:34:52:4A:51:B0:97:61:FB:CB:C7:77:5D:D8:D8:60
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       0DD5A3F4FC5D6FF13D658FF057AEACA564202CDD
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e35302e302f32342d3234203d3e20323730373737.roa
Signing time:             Fri 06 Jun 2025 13:34:27 +0000
ROA not before:           Fri 06 Jun 2025 13:29:27 +0000
ROA not after:            Fri 05 Jun 2026 13:34:27 +0000
asID:                     270777
IP address blocks:        201.71.50.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Jun 2025 12:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d5:a3:f4:fc:5d:6f:f1:3d:65:8f:f0:57:ae:ac:a5:64:20:2c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  6 13:29:27 2025 GMT
            Not After : Jun  5 13:34:27 2026 GMT
        Subject: CN=22F24A428734524A51B09761FBCBC7775DD8D860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:ba:f9:bf:31:b8:db:cc:a3:85:0d:19:42:
                    d9:6c:57:16:bd:2f:4d:7b:cb:41:d5:e5:12:03:36:
                    6f:7a:67:bf:9e:a4:1f:4f:4e:26:11:7f:2d:74:bf:
                    2a:82:1d:9e:1c:f2:3d:f7:af:92:f5:75:6c:b0:2a:
                    83:fb:b9:12:0a:76:ba:d8:8d:42:eb:bd:be:27:4d:
                    88:26:f5:15:bf:9a:34:94:0e:91:6d:6c:27:ac:2b:
                    46:8e:05:06:9a:3f:44:9a:8a:64:5b:71:9d:81:7e:
                    9b:50:97:39:6d:78:49:dd:99:fe:9c:5f:ab:08:e1:
                    92:4f:d5:c9:49:0e:70:79:c7:7b:86:75:8d:e3:1a:
                    fb:f6:a1:27:1c:89:87:93:63:a3:a7:3f:ef:90:0f:
                    f0:3e:63:a3:f1:7e:e5:60:6a:6e:d0:7b:e1:6d:f9:
                    21:3c:de:ca:56:72:69:e2:c6:5d:6b:a0:5c:0e:97:
                    17:71:c3:ba:9c:01:ed:04:45:ba:42:37:13:12:ad:
                    06:53:fa:ab:41:2a:8d:e8:fd:da:dd:d1:23:a1:d4:
                    31:52:78:22:18:89:65:82:53:e8:45:15:79:3e:1b:
                    47:f4:ca:ae:17:0d:d4:de:17:82:23:a8:6b:d5:1b:
                    88:ae:e4:03:e3:d9:c8:b7:f2:f4:cf:47:20:ca:76:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F2:4A:42:87:34:52:4A:51:B0:97:61:FB:CB:C7:77:5D:D8:D8:60
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e35302e302f32342d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:19:ee:eb:54:b2:a8:8f:99:a3:68:75:80:f3:e4:19:15:d4:
         2e:43:e0:34:4b:f6:3a:bc:ae:56:f2:3f:8e:94:2c:50:a4:e4:
         78:82:a6:a0:9c:9f:cc:d3:e7:48:14:ff:e2:b8:97:f9:8e:cf:
         67:ee:51:9a:c2:95:f2:19:9f:fe:92:25:b9:f1:e9:c7:3a:d0:
         a8:67:8b:7a:3d:db:c2:be:f4:fc:1a:13:54:cd:a5:06:a3:2c:
         a3:68:19:7f:3e:3e:02:3b:a6:78:27:5a:7d:73:3b:8d:ac:ee:
         eb:78:d5:40:d8:60:b2:7a:bc:ec:ef:47:f0:b3:29:56:dc:ec:
         52:6f:15:aa:44:83:9e:b1:dd:92:bb:6a:81:78:19:d0:bd:dd:
         8c:dd:0e:7c:5d:6a:53:76:82:9d:12:78:c5:b2:ad:8b:b8:a0:
         96:09:76:b1:dd:8c:27:de:c7:4f:0b:16:9a:e6:9f:23:1a:31:
         2a:6c:85:0e:31:8c:73:4c:73:f2:06:3e:01:99:c4:0d:cf:69:
         db:ab:9b:b8:76:5b:cd:30:01:60:fb:c5:87:f9:7d:0d:06:7d:
         52:2a:82:9c:4f:8b:d3:98:bf:5c:d3:f2:4a:e8:85:2e:38:50:
         9a:15:cc:60:6c:67:ed:70:2a:11:7c:c6:64:b4:a5:16:07:63:
         fc:a3:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:25:10 2025 by rpki-client