Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131392e302f32342d3234203d3e20323730373737.roa
File:                     3133312e3136312e3131392e302f32342d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          yoIK/xpbSOpS3oRL2uai44sToji4EBHEL5H6o4GvpQo=
Subject key identifier:   6F:2A:EA:FF:F2:1F:02:22:3E:F3:95:00:93:7B:38:9D:32:91:0A:B4
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       175BFD6953AAD755B5DAE26A475EE436EE7103B7
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131392e302f32342d3234203d3e20323730373737.roa
Signing time:             Fri 06 Jun 2025 13:34:27 +0000
ROA not before:           Fri 06 Jun 2025 13:29:27 +0000
ROA not after:            Fri 05 Jun 2026 13:34:27 +0000
asID:                     270777
IP address blocks:        131.161.119.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 07 Jun 2025 12:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5b:fd:69:53:aa:d7:55:b5:da:e2:6a:47:5e:e4:36:ee:71:03:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  6 13:29:27 2025 GMT
            Not After : Jun  5 13:34:27 2026 GMT
        Subject: CN=6F2AEAFFF21F02223EF39500937B389D32910AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:49:59:e2:cd:93:44:c7:d7:f6:9d:9b:7f:43:
                    ac:f2:96:18:b6:ed:d1:c0:87:59:3c:d2:d9:d2:ea:
                    9b:11:dd:dc:74:7b:16:ca:b0:ea:af:cf:33:77:0a:
                    95:97:a6:af:d6:be:de:e6:61:67:c6:c6:1f:cb:a1:
                    ae:c1:87:45:32:36:f4:5f:97:6f:ee:cd:50:38:82:
                    72:6b:2c:73:cf:01:d5:bf:b4:b4:3c:6b:e9:f2:bc:
                    f2:2f:b4:62:38:1d:df:dd:6e:83:d7:c7:69:f2:16:
                    e4:7c:41:9f:26:ea:b1:58:55:7c:78:30:39:19:4e:
                    62:17:88:1e:53:8c:a3:bd:81:d5:45:28:78:50:7e:
                    11:76:29:75:11:8f:ab:79:8f:74:7b:e5:2f:a0:44:
                    e0:bc:6f:b5:31:b3:fe:10:0a:a1:fb:f9:f0:29:1c:
                    42:49:3f:07:12:97:38:df:af:2d:89:1d:89:16:b0:
                    e7:0a:d4:5d:d0:a7:7f:08:be:a2:55:b8:c4:b6:5a:
                    70:68:50:8c:c4:29:f1:e8:c1:68:75:68:dd:62:e4:
                    7b:20:42:fa:4d:a7:79:b3:b5:33:dd:2b:af:4e:81:
                    6d:72:52:7c:60:6b:51:3f:7b:59:5e:29:51:48:3d:
                    ff:25:f2:71:45:d5:10:d6:a6:18:f9:89:c3:7f:07:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2A:EA:FF:F2:1F:02:22:3E:F3:95:00:93:7B:38:9D:32:91:0A:B4
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131392e302f32342d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:af:56:ce:40:60:b8:29:bd:e2:9b:89:55:af:f2:f2:97:
         7f:c6:de:49:4c:ff:3d:32:b1:61:8a:1c:62:ad:1c:bc:97:8f:
         2a:e9:85:04:8f:38:9c:38:42:a1:08:4b:18:6a:6b:73:5d:5b:
         a3:d5:54:28:9b:61:c3:f5:05:77:37:6a:74:af:28:95:b4:d2:
         69:4b:18:1f:94:74:76:33:66:b6:48:a1:bc:bb:b6:17:2f:51:
         ca:60:e9:c7:ae:a4:f1:a2:d5:7d:dd:64:e8:16:af:cb:f4:21:
         04:1c:2c:ea:d4:24:00:6f:94:70:ff:f1:05:96:fa:99:b6:10:
         e6:b4:c6:d8:44:87:52:fe:de:35:d4:ca:c0:16:9d:14:9d:fe:
         53:f0:4e:0a:c5:1c:25:9b:4e:d4:78:a4:fb:59:46:8d:fa:91:
         6c:3b:2c:32:55:34:29:c0:6a:cc:9e:e6:f3:2c:c2:4c:c2:85:
         60:7a:e6:1a:b5:82:39:0e:38:41:f7:2e:13:e9:a3:18:33:d2:
         79:29:40:4f:82:c3:1c:8a:b7:04:a8:60:40:68:68:3f:63:f0:
         ba:32:5d:21:60:7a:79:d3:6d:67:1d:16:b4:ab:bc:11:6c:f0:
         ee:79:55:7a:53:09:68:ce:2e:85:27:44:30:9c:86:73:78:4a:
         4a:82:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:21:29 2025 by rpki-client