Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e35312e302f32342d3234203d3e20323730373737.roa
File:                     3230312e37312e35312e302f32342d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          ngnWOftzHCS6muIrErrKHGfm0dpn1lDc71DO0Bpnfck=
Subject key identifier:   10:70:00:0D:D4:3C:A4:CC:4A:91:3F:00:3F:3A:F3:B5:80:D6:BF:CD
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       03E5496EF940B20E8E5638437974B1E544BFF0AC
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e35312e302f32342d3234203d3e20323730373737.roa
Signing time:             Fri 06 Jun 2025 13:34:27 +0000
ROA not before:           Fri 06 Jun 2025 13:29:27 +0000
ROA not after:            Fri 05 Jun 2026 13:34:27 +0000
asID:                     270777
IP address blocks:        201.71.51.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Jun 2025 12:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e5:49:6e:f9:40:b2:0e:8e:56:38:43:79:74:b1:e5:44:bf:f0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  6 13:29:27 2025 GMT
            Not After : Jun  5 13:34:27 2026 GMT
        Subject: CN=1070000DD43CA4CC4A913F003F3AF3B580D6BFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:44:10:aa:41:95:d8:53:00:71:ea:b6:63:
                    7b:d7:b5:49:d5:55:77:f9:19:b5:07:45:2e:32:bd:
                    dc:22:27:79:98:53:c9:9f:bd:86:ed:2f:40:0f:4e:
                    2e:9f:c6:1c:29:4f:81:42:39:c1:7c:90:e8:d6:f0:
                    9b:84:46:2c:e8:73:ee:e9:82:54:2a:0c:b8:a3:24:
                    c1:5a:e1:28:51:95:73:5e:27:ed:b1:40:48:c3:f0:
                    fc:95:4f:01:7d:98:d7:13:fe:ed:47:51:b7:0f:62:
                    8d:a2:81:ae:ff:d0:1e:0d:01:8f:c4:c4:32:17:d0:
                    72:6b:3d:cc:f4:de:24:f4:db:b6:a4:0c:19:cb:99:
                    a1:32:f9:d6:88:43:10:42:0b:50:cf:28:45:aa:6b:
                    08:1a:17:28:b3:d4:53:62:64:a2:eb:8e:f1:1c:d8:
                    c4:79:76:1b:78:a9:6a:d1:51:54:ca:89:5d:c9:e1:
                    c1:34:ab:53:96:1b:ec:c4:ad:5b:00:81:af:47:27:
                    22:fe:14:92:ce:62:99:2b:1e:9c:72:da:f1:8f:1d:
                    12:cd:b4:c5:90:22:05:9a:d1:be:0b:1d:ca:ff:01:
                    61:31:e9:9c:5c:2f:00:9a:de:de:ef:ca:28:d2:76:
                    28:0a:44:30:43:5f:d9:6c:6d:c4:c8:2f:a9:01:0c:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:00:0D:D4:3C:A4:CC:4A:91:3F:00:3F:3A:F3:B5:80:D6:BF:CD
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3230312e37312e35312e302f32342d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:7a:9f:34:23:eb:64:c7:54:52:5c:a1:63:ac:d0:0f:e3:
         50:2c:35:0b:fb:93:cc:40:52:57:7c:f6:af:10:8b:26:cb:e1:
         80:50:d0:01:2e:35:2c:a7:49:69:4e:f6:e7:6e:9f:1d:ed:02:
         e3:2f:b0:02:bb:48:e5:b0:52:51:98:4b:7c:54:ee:03:01:a0:
         5a:fb:f6:a7:7b:04:5d:3d:9a:0f:7f:70:e8:aa:bb:e3:17:a0:
         00:56:42:a9:60:55:f1:e5:9c:f8:29:02:94:74:6b:84:54:a8:
         92:a9:e9:32:01:2c:0d:7b:97:9c:50:0d:f9:a2:46:e3:e5:d2:
         e4:02:5e:36:c7:8c:4a:a7:7d:aa:33:f9:70:69:fb:ab:bb:96:
         a2:39:c8:f7:f2:ff:b9:5d:99:d2:bc:64:1c:5e:31:b1:03:35:
         fc:fb:76:79:d8:43:0b:f7:35:81:59:a6:e2:5d:f7:b1:c2:0f:
         04:b4:16:27:42:52:53:3f:10:ba:51:b2:ec:cb:a1:f8:f8:3b:
         e6:9f:66:e3:8e:39:15:41:4d:7e:f5:3a:78:dc:2f:eb:3d:52:
         0a:58:1f:d9:54:91:b5:f6:b3:81:14:ed:7b:4d:06:fd:c0:53:
         44:e4:d9:f1:a9:14:e4:aa:01:f5:eb:26:a5:00:7e:21:24:d9:
         bf:16:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:17:54 2025 by rpki-client