Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa (raw, json)
Hash identifier:          LtRi0t3EZX5mn6kY3/3VCbfwuYYOAaT6wiV4apZqFKY=
Subject key identifier:   B5:F6:62:57:09:1B:33:1C:B8:D8:3D:59:7D:FE:8D:AB:8C:AC:37:FF
Certificate issuer:       /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial:       22E7CE309D168836C8A21B7C6E7F00A1203E61C7
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa
Signing time:             Fri 31 Jan 2025 18:08:54 +0000
ROA not before:           Fri 31 Jan 2025 18:03:54 +0000
ROA not after:            Fri 30 Jan 2026 18:08:54 +0000
asID:                     264450
IP address blocks:        131.255.36.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e7:ce:30:9d:16:88:36:c8:a2:1b:7c:6e:7f:00:a1:20:3e:61:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
        Validity
            Not Before: Jan 31 18:03:54 2025 GMT
            Not After : Jan 30 18:08:54 2026 GMT
        Subject: CN=B5F66257091B331CB8D83D597DFE8DAB8CAC37FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:15:ae:08:81:43:21:60:7c:b4:8b:7c:61:
                    f9:76:ae:f9:82:8e:d2:06:ce:de:df:41:dd:3a:59:
                    8a:fd:0c:f8:18:7b:67:d7:0e:89:2f:c6:15:53:da:
                    99:50:bb:ba:e3:f9:e5:5d:7c:e9:21:3e:a0:3c:35:
                    74:9d:e7:9d:19:e8:7e:8b:bf:ab:af:24:96:6f:95:
                    6e:39:43:43:56:01:bf:7a:3b:8f:d8:d3:1f:50:5f:
                    8d:b7:90:ab:61:68:c1:6a:4f:65:a7:53:6f:a7:97:
                    c7:39:f8:1e:65:1c:87:e7:ae:3f:b0:6d:4c:9c:6e:
                    52:bc:57:c6:23:57:37:d8:4b:12:a9:56:77:19:ab:
                    49:85:5a:46:9d:ce:9b:83:aa:16:0c:ea:03:e3:ab:
                    48:ba:78:1e:51:8d:7f:e5:96:56:d5:dd:72:a5:dd:
                    d7:45:ad:c8:56:8d:31:cf:0b:88:69:2b:9a:70:79:
                    a4:ad:62:e6:5a:62:58:41:a7:2f:a7:f3:35:1d:ca:
                    40:a5:e0:e1:9f:ec:36:d7:24:67:70:e2:c5:87:6b:
                    6e:a9:db:e6:43:c3:98:c6:84:59:1a:94:5e:34:8a:
                    de:35:14:88:33:15:b8:ca:da:0b:b9:74:9c:31:63:
                    61:bb:b3:dd:1c:ac:1b:ef:9b:06:20:fe:20:7c:da:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F6:62:57:09:1B:33:1C:B8:D8:3D:59:7D:FE:8D:AB:8C:AC:37:FF
            X509v3 Authority Key Identifier:
                keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:75:7c:35:94:d3:3f:f8:84:57:e6:e4:78:9e:97:69:3d:8b:
         3e:3b:5a:4c:e0:aa:07:9b:ca:79:78:d0:94:cc:f4:81:f3:01:
         67:3f:f5:31:b2:73:8d:89:87:78:eb:83:d6:67:10:d9:51:bb:
         1b:e1:52:d7:93:c0:a8:53:bd:d4:d4:ac:8f:3b:90:c1:37:02:
         b4:7c:10:19:48:23:35:b3:53:63:0d:b4:5b:7f:e5:58:20:77:
         e6:b8:21:3e:4d:71:c2:a2:a3:0b:d6:e3:00:d1:11:26:a3:83:
         89:4c:33:f3:da:15:05:2f:47:0f:0d:86:d2:f8:b6:ae:6e:1c:
         b3:2b:57:18:a9:ca:47:a2:0f:e5:e4:1c:12:2e:16:20:15:38:
         29:9a:ae:b7:91:8b:00:1e:bd:63:b5:04:b1:f0:ee:90:68:8c:
         c5:5c:ea:84:1a:97:ae:16:c4:60:b1:30:3a:4c:83:de:8a:44:
         07:2f:36:19:d5:cd:a0:cf:c3:dc:b2:bf:d5:95:ed:91:da:e3:
         0e:b3:a4:93:f5:7f:91:79:a0:2b:7d:3c:fa:c1:ce:7e:68:06:
         e7:8b:7a:b8:25:68:21:b8:87:b5:99:69:bb:f7:e8:61:8d:d9:
         ab:dc:3b:e9:a7:e6:8e:83:31:59:ce:72:4c:f8:31:bd:82:57:
         5c:1d:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:00:54 2025 by rpki-client