Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa (raw, json)
Hash identifier:          DHcIi8j+t9eukufQ4Wo1MlDlFdOZIYhY7mljHlGVGNE=
Subject key identifier:   EB:39:71:E1:27:F2:CD:05:B1:A0:6C:32:58:B1:E2:67:69:E7:02:51
Certificate issuer:       /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial:       5D1AF7AD04403BB2DE211645B4430641C720C206
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa
Signing time:             Fri 31 Jan 2025 18:08:55 +0000
ROA not before:           Fri 31 Jan 2025 18:03:55 +0000
ROA not after:            Fri 30 Jan 2026 18:08:55 +0000
asID:                     264450
IP address blocks:        131.255.36.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1a:f7:ad:04:40:3b:b2:de:21:16:45:b4:43:06:41:c7:20:c2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
        Validity
            Not Before: Jan 31 18:03:55 2025 GMT
            Not After : Jan 30 18:08:55 2026 GMT
        Subject: CN=EB3971E127F2CD05B1A06C3258B1E26769E70251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:48:3e:fe:02:85:28:b3:93:94:df:a0:f1:
                    df:7d:b5:1e:19:e8:dd:51:fb:c6:6c:1e:11:c4:8c:
                    79:a7:b3:3f:4e:d8:09:ca:42:0e:17:5a:a2:c5:ab:
                    20:b2:9c:f0:d5:8b:94:50:c4:3c:17:d0:f6:3a:b6:
                    cf:32:7f:54:25:c1:e7:0f:68:b6:66:37:73:a4:02:
                    8e:98:fb:e4:21:6c:55:6e:58:6d:a1:09:fb:74:24:
                    53:4f:2b:6f:22:1c:de:ee:d8:a6:94:92:70:12:4f:
                    d0:08:57:f8:1f:44:c0:44:1c:aa:33:a5:12:8c:01:
                    67:9e:bd:06:3a:0c:61:42:8e:28:c7:c3:27:2a:4d:
                    f8:a3:f3:3d:67:61:e1:77:0d:30:dd:b5:4d:72:d9:
                    7c:e1:f7:55:62:b4:89:46:aa:fe:79:52:7d:a3:6f:
                    ac:e2:fa:4d:21:00:e3:3d:d6:3f:22:55:07:fb:3a:
                    47:74:74:06:28:83:2b:ac:b5:f4:ea:eb:77:58:68:
                    8d:bc:51:af:e9:a5:0a:93:ec:8c:14:81:6f:e5:69:
                    dc:40:95:ef:87:46:0a:a3:6b:b0:e4:d2:bd:7b:06:
                    27:a2:86:df:1d:cb:c9:fc:ee:1b:35:07:27:7e:80:
                    b1:52:a7:d8:61:16:1c:66:a7:9c:97:a1:66:37:b1:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:71:E1:27:F2:CD:05:B1:A0:6C:32:58:B1:E2:67:69:E7:02:51
            X509v3 Authority Key Identifier:
                keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:de:b0:fe:8d:91:52:1b:b5:b6:6f:0c:c9:67:db:ec:63:5a:
         8a:b9:cd:ba:b5:68:46:9f:05:32:d7:e6:23:0a:4d:b0:72:9f:
         05:79:29:02:35:b9:38:57:bd:66:1b:ef:e2:57:7d:f1:87:fc:
         1c:d6:ce:a6:6e:e9:b5:7d:fc:b9:65:3f:3a:9e:46:75:d5:75:
         01:a0:cf:a1:9f:8d:87:a0:fc:c3:1d:dd:23:96:bd:f2:1f:41:
         4a:8e:aa:66:c5:30:7b:82:e9:94:8f:c0:c9:4a:5c:fa:4c:68:
         97:12:a0:52:02:96:c0:b1:c1:08:de:77:21:9a:a0:68:d3:dc:
         05:33:c3:c9:68:22:71:2c:05:89:5c:fb:93:4c:85:56:8e:67:
         4f:71:14:95:77:59:86:56:d6:e5:56:8f:14:43:7f:42:9c:6c:
         3f:50:19:2d:62:56:0d:19:c0:90:d2:30:78:b3:f5:8b:fd:65:
         fc:47:f3:da:3d:c0:78:ff:03:3f:a3:00:70:9c:f6:2f:b4:e2:
         6c:84:f5:42:81:49:6b:ab:1e:54:54:f4:bf:76:74:f7:f1:09:
         ec:ae:b5:94:01:c0:70:09:b9:ba:bb:b3:e8:9a:99:ba:02:55:
         25:4d:14:4d:8b:4a:16:70:ab:c3:67:49:bc:80:df:b6:37:35:
         e1:9f:bf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:48:15 2025 by rpki-client