Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS52892.roa
File:                     AS52892.roa (raw, json)
Hash identifier:          bO2e+53f9h+Wg7y6TU7c11T36dOOsbTLhSKrDlRoN8A=
Subject key identifier:   04:4D:22:57:6E:DD:0F:AA:4D:F2:7B:99:40:69:44:5C:71:45:9D:71
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       1475507F589920E8915E627C2C96122438F8ED0F
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS52892.roa
Signing time:             Mon 19 May 2025 19:33:59 +0000
ROA not before:           Mon 19 May 2025 19:28:59 +0000
ROA not after:            Mon 18 May 2026 19:33:59 +0000
asID:                     52892
IP address blocks:        45.171.148.0/22 maxlen: 22
                          45.171.148.0/23 maxlen: 23
                          45.171.148.0/24 maxlen: 24
                          45.171.149.0/24 maxlen: 24
                          45.171.150.0/23 maxlen: 23
                          45.171.150.0/24 maxlen: 24
                          45.171.151.0/24 maxlen: 24
                          131.221.12.0/22 maxlen: 22
                          131.221.12.0/23 maxlen: 23
                          131.221.12.0/24 maxlen: 24
                          131.221.13.0/24 maxlen: 24
                          131.221.14.0/23 maxlen: 23
                          131.221.14.0/24 maxlen: 24
                          131.221.15.0/24 maxlen: 24
                          138.185.232.0/22 maxlen: 22
                          138.185.232.0/23 maxlen: 23
                          138.185.232.0/24 maxlen: 24
                          138.185.233.0/24 maxlen: 24
                          138.185.234.0/23 maxlen: 23
                          138.185.234.0/24 maxlen: 24
                          138.185.235.0/24 maxlen: 24
                          170.78.140.0/22 maxlen: 22
                          170.78.140.0/23 maxlen: 23
                          170.78.140.0/24 maxlen: 24
                          170.78.141.0/24 maxlen: 24
                          170.78.142.0/23 maxlen: 23
                          170.78.142.0/24 maxlen: 24
                          170.78.143.0/24 maxlen: 24
                          177.22.80.0/20 maxlen: 20
                          177.22.80.0/21 maxlen: 21
                          177.22.80.0/22 maxlen: 22
                          177.22.80.0/23 maxlen: 23
                          177.22.80.0/24 maxlen: 24
                          177.22.81.0/24 maxlen: 24
                          177.22.82.0/23 maxlen: 23
                          177.22.82.0/24 maxlen: 24
                          177.22.83.0/24 maxlen: 24
                          177.22.84.0/22 maxlen: 22
                          177.22.84.0/23 maxlen: 23
                          177.22.84.0/24 maxlen: 24
                          177.22.85.0/24 maxlen: 24
                          177.22.86.0/23 maxlen: 23
                          177.22.86.0/24 maxlen: 24
                          177.22.87.0/24 maxlen: 24
                          177.22.88.0/21 maxlen: 21
                          177.22.88.0/22 maxlen: 22
                          177.22.88.0/23 maxlen: 23
                          177.22.88.0/24 maxlen: 24
                          177.22.89.0/24 maxlen: 24
                          177.22.90.0/23 maxlen: 23
                          177.22.90.0/24 maxlen: 24
                          177.22.91.0/24 maxlen: 24
                          177.22.92.0/22 maxlen: 22
                          177.22.92.0/23 maxlen: 23
                          177.22.92.0/24 maxlen: 24
                          177.22.93.0/24 maxlen: 24
                          177.22.94.0/23 maxlen: 23
                          177.22.94.0/24 maxlen: 24
                          177.22.95.0/24 maxlen: 24
                          177.72.232.0/21 maxlen: 21
                          177.72.232.0/22 maxlen: 22
                          177.72.232.0/23 maxlen: 23
                          177.72.232.0/24 maxlen: 24
                          177.72.233.0/24 maxlen: 24
                          177.72.234.0/23 maxlen: 23
                          177.72.234.0/24 maxlen: 24
                          177.72.235.0/24 maxlen: 24
                          177.72.236.0/22 maxlen: 22
                          177.72.236.0/23 maxlen: 23
                          177.72.236.0/24 maxlen: 24
                          177.72.237.0/24 maxlen: 24
                          177.72.238.0/23 maxlen: 23
                          177.72.238.0/24 maxlen: 24
                          181.191.16.0/22 maxlen: 22
                          181.191.16.0/23 maxlen: 23
                          181.191.16.0/24 maxlen: 24
                          181.191.17.0/24 maxlen: 24
                          181.191.18.0/23 maxlen: 23
                          181.191.18.0/24 maxlen: 24
                          181.191.19.0/24 maxlen: 24
                          181.232.152.0/22 maxlen: 22
                          181.232.152.0/23 maxlen: 23
                          181.232.152.0/24 maxlen: 24
                          181.232.153.0/24 maxlen: 24
                          181.232.154.0/23 maxlen: 23
                          181.232.154.0/24 maxlen: 24
                          181.232.155.0/24 maxlen: 24
                          2804:1354::/32 maxlen: 32
                          2804:1354::/33 maxlen: 33
                          2804:1354::/34 maxlen: 34
                          2804:1354::/35 maxlen: 35
                          2804:1354::/36 maxlen: 36
                          2804:1354::/40 maxlen: 40
                          2804:1354::/48 maxlen: 48
                          2804:1354:1::/48 maxlen: 48
                          2804:1354:1000::/36 maxlen: 36
                          2804:1354:2000::/35 maxlen: 35
                          2804:1354:2000::/36 maxlen: 36
                          2804:1354:3000::/36 maxlen: 36
                          2804:1354:4000::/35 maxlen: 35
                          2804:1354:4000::/36 maxlen: 36
                          2804:1354:5000::/36 maxlen: 36
                          2804:1354:5289::/48 maxlen: 48
                          2804:1354:6000::/35 maxlen: 35
                          2804:1354:6000::/36 maxlen: 36
                          2804:1354:6002::/48 maxlen: 48
                          2804:1354:7000::/36 maxlen: 36
                          2804:1354:7800::/40 maxlen: 40
                          2804:1354:8000::/33 maxlen: 33
                          2804:1354:8000::/34 maxlen: 34
                          2804:1354:8000::/35 maxlen: 35
                          2804:1354:8000::/36 maxlen: 36
                          2804:1354:8000::/40 maxlen: 40
                          2804:1354:8100::/40 maxlen: 40
                          2804:1354:9000::/36 maxlen: 36
                          2804:1354:a000::/35 maxlen: 35
                          2804:1354:a000::/36 maxlen: 36
                          2804:1354:b000::/36 maxlen: 36
                          2804:1354:c000::/34 maxlen: 34
                          2804:1354:c000::/35 maxlen: 35
                          2804:1354:c000::/36 maxlen: 36
                          2804:1354:d000::/36 maxlen: 36
                          2804:1354:e000::/35 maxlen: 35
                          2804:1354:e000::/36 maxlen: 36
                          2804:1354:f000::/36 maxlen: 36
                          2804:1354:face::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 20 May 2025 03:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:75:50:7f:58:99:20:e8:91:5e:62:7c:2c:96:12:24:38:f8:ed:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 19 19:28:59 2025 GMT
            Not After : May 18 19:33:59 2026 GMT
        Subject: CN=044D22576EDD0FAA4DF27B994069445C71459D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:15:48:34:60:25:7d:fd:ee:26:d1:f5:f6:
                    94:bc:98:c9:ee:81:73:64:43:35:1e:0e:48:ad:da:
                    ae:af:87:d6:6d:3c:8c:0f:d1:54:c2:52:b4:61:c2:
                    8b:37:8c:3f:e9:1a:bf:bc:b5:64:a5:18:fc:c0:24:
                    25:b2:1c:f4:e9:b8:4d:c1:7e:d0:ba:4e:5b:34:48:
                    34:08:39:6f:e8:de:cc:1e:ab:e3:2e:c0:25:d3:32:
                    bb:77:ae:ba:5d:96:93:32:a5:40:c8:79:1f:31:1a:
                    44:da:62:d2:73:27:39:f1:6b:cb:3e:84:fa:b7:92:
                    34:6b:cf:17:5a:26:73:02:54:e8:23:07:f3:32:57:
                    57:fb:fa:8d:f0:54:a9:90:d8:de:ce:98:ae:d5:74:
                    e8:f1:ff:d5:ce:5a:ed:9e:ca:2e:6a:56:a7:19:2f:
                    52:6c:aa:d7:66:3f:1e:a9:19:90:13:32:d6:23:84:
                    57:00:74:89:47:49:ba:e6:89:0e:30:57:50:fc:cb:
                    86:d5:18:0f:24:41:aa:55:d1:89:54:18:50:1f:09:
                    95:ee:d1:81:c6:8b:ad:8f:69:a8:22:a8:4c:22:0a:
                    7d:ac:3b:08:ab:12:ac:a3:1e:2d:a3:21:e8:c9:41:
                    09:56:c8:ab:62:b6:32:af:71:bc:b1:cd:3c:bb:36:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:22:57:6E:DD:0F:AA:4D:F2:7B:99:40:69:44:5C:71:45:9D:71
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/AS52892.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.148.0/22
                  131.221.12.0/22
                  138.185.232.0/22
                  170.78.140.0/22
                  177.22.80.0/20
                  177.72.232.0/21
                  181.191.16.0/22
                  181.232.152.0/22
                IPv6:
                  2804:1354::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:ee:f8:0f:c8:48:54:55:b8:15:93:72:83:31:17:f3:da:
         6f:38:60:9f:db:7f:3a:c9:6c:01:ea:c1:ff:ff:f1:47:c5:9a:
         54:08:8a:6e:72:4a:2f:eb:61:4e:c9:97:4a:fd:1f:5b:4e:26:
         e9:bb:e8:11:6f:23:9e:5f:52:05:52:5c:da:82:57:5c:54:49:
         60:9a:1f:ac:bb:07:27:f9:11:d3:bc:66:55:9a:5c:c1:2a:2d:
         be:75:09:04:1a:b9:5a:1e:35:c2:bc:2e:79:bc:f2:76:f6:8f:
         5d:c9:e0:bc:5e:23:f7:f5:30:2c:54:71:ed:f7:00:11:eb:7b:
         b2:62:89:43:b4:b3:68:5e:4e:24:60:51:d0:e4:e4:88:6c:7c:
         fc:c8:4e:a8:45:31:de:e6:46:c4:86:84:90:da:a9:88:93:06:
         11:82:eb:23:bb:01:31:92:e2:c2:d5:cd:e1:56:03:5f:a0:83:
         18:bd:14:e0:72:81:ea:6c:8b:84:4e:9a:39:7a:cd:e6:5a:d3:
         8f:ea:2c:3b:9d:9a:aa:16:a3:8c:77:18:20:c8:81:4a:40:25:
         91:09:de:0d:66:d3:64:dc:9f:ae:4f:89:c2:9e:9c:99:57:f4:
         75:52:d0:a8:c2:37:8c:13:9a:b4:75:dc:04:35:61:70:a9:ba:
         87:66:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:37:53 2025 by rpki-client