Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS264569.roa
File:                     AS264569.roa (raw, json)
Hash identifier:          eDo7B7cA7Hcacs1bVNUjHeYOux8u3rpChCyuRIAYhsQ=
Subject key identifier:   92:3B:52:FD:12:37:1B:54:0E:71:43:EA:6C:55:9E:B3:F8:8C:5B:63
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       49907A5069B2FDAAED29A1EC682FBECACE86055B
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS264569.roa
Signing time:             Mon 19 May 2025 14:48:05 +0000
ROA not before:           Mon 19 May 2025 14:43:05 +0000
ROA not after:            Mon 18 May 2026 14:48:05 +0000
asID:                     264569
IP address blocks:        177.72.239.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 20 May 2025 03:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:90:7a:50:69:b2:fd:aa:ed:29:a1:ec:68:2f:be:ca:ce:86:05:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 19 14:43:05 2025 GMT
            Not After : May 18 14:48:05 2026 GMT
        Subject: CN=923B52FD12371B540E7143EA6C559EB3F88C5B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:4c:10:4e:b6:a8:5d:3f:7f:95:75:f1:ad:
                    6a:74:97:7e:1b:ab:a5:d7:cd:37:62:40:6e:ff:a0:
                    f2:48:91:75:ae:26:9b:9b:5b:f0:87:15:c3:47:20:
                    d3:79:f0:1a:fa:27:bd:fb:4e:11:1c:ae:4f:6c:c8:
                    cf:39:56:38:b2:b9:cf:22:18:f8:7a:b7:53:32:2d:
                    0c:0e:41:59:d9:b1:0f:69:19:65:9a:51:aa:70:a5:
                    f2:be:25:f2:87:7a:e6:12:a1:eb:c0:ee:6c:5b:49:
                    71:c0:7d:33:78:a3:e6:97:20:11:c4:e9:60:9f:ca:
                    e2:2e:cb:63:d9:35:10:7b:39:da:54:c3:36:f1:1f:
                    a8:d9:28:62:4f:5d:09:29:60:b1:21:ac:e8:4c:d4:
                    e1:04:f9:c1:56:00:1d:b6:0a:69:ad:10:50:0f:9e:
                    df:e2:84:4b:f9:33:89:6e:8d:64:f6:1e:f1:dc:cc:
                    b2:5a:34:af:56:0e:04:13:89:00:2a:8d:cb:14:0b:
                    f9:31:dc:84:09:b1:d7:16:1e:98:84:0c:2f:14:b5:
                    99:9b:e3:8a:bc:d5:6f:48:85:0e:75:92:91:88:4b:
                    1d:75:f9:73:ce:f2:7d:c0:1b:51:61:3f:b1:9d:80:
                    db:df:90:2b:7a:76:67:8f:15:62:95:09:52:8e:bc:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:52:FD:12:37:1B:54:0E:71:43:EA:6C:55:9E:B3:F8:8C:5B:63
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS264569.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:dc:f8:db:0d:3d:d8:40:1a:43:9c:19:53:f0:7d:d3:19:7d:
         37:99:eb:2e:b4:c2:08:24:1b:bd:32:35:bb:d0:21:4f:b6:57:
         76:8c:26:12:47:03:ad:21:91:14:32:bb:7a:8e:a4:45:3c:53:
         14:a5:b6:a4:28:eb:04:02:e2:d3:8d:8c:f4:8a:9c:c1:ff:88:
         d5:ff:3c:20:de:cd:36:09:1a:b9:b7:1b:38:a9:c9:1d:5f:a6:
         eb:b1:14:44:8c:9e:35:2d:c2:cd:76:9e:32:34:b5:d7:16:96:
         6b:79:b2:40:f4:1b:c1:c9:0c:09:ef:b2:2a:e1:5e:87:89:ed:
         db:5c:ac:cf:55:19:76:77:88:f4:e2:bf:40:99:52:7b:71:1c:
         90:05:e6:67:cb:a0:c9:23:5f:20:8f:98:92:06:a6:52:29:62:
         a2:24:4f:73:e8:a7:85:e9:8a:bb:67:51:80:28:6b:1c:25:52:
         7d:c9:72:51:cd:02:e0:df:5e:08:54:b4:6c:63:49:bc:9b:33:
         b7:ed:39:ac:3a:c9:a9:c3:dc:d9:41:b1:ed:36:f7:10:f2:b3:
         72:7e:a9:d2:81:a1:11:71:ad:7b:38:6c:d5:24:ed:37:b5:62:
         58:2e:e2:d5:f4:1b:05:61:ba:6e:2a:84:d5:16:25:47:b7:ca:
         4d:2a:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:37 2025 by rpki-client