Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33372e302f32342d3234203d3e20323634343530.roa
File:                     3133312e3235352e33372e302f32342d3234203d3e20323634343530.roa (raw, json)
Hash identifier:          +ULVxEM17PXs5NDu/wRKbexDGwS5MJ9m7VaBkH51zB8=
Subject key identifier:   E2:D3:06:D4:40:19:E2:FF:BF:F4:CA:20:6F:0D:A8:2C:87:0E:7D:73
Certificate issuer:       /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial:       361CA05E6F50A54EBA99FE26965F3C6B2B34D3CD
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33372e302f32342d3234203d3e20323634343530.roa
Signing time:             Fri 31 Jan 2025 18:08:56 +0000
ROA not before:           Fri 31 Jan 2025 18:03:56 +0000
ROA not after:            Fri 30 Jan 2026 18:08:56 +0000
asID:                     264450
IP address blocks:        131.255.37.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 07 Feb 2025 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1c:a0:5e:6f:50:a5:4e:ba:99:fe:26:96:5f:3c:6b:2b:34:d3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
        Validity
            Not Before: Jan 31 18:03:56 2025 GMT
            Not After : Jan 30 18:08:56 2026 GMT
        Subject: CN=E2D306D44019E2FFBFF4CA206F0DA82C870E7D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:21:f5:d9:61:16:b5:08:29:31:9b:7b:07:
                    63:d3:9d:86:4c:34:d6:95:44:f3:59:5c:8a:1f:d7:
                    47:d2:37:68:4e:52:15:56:49:7e:a5:22:04:67:8a:
                    b7:17:88:ba:c1:01:9d:38:58:f8:f1:96:40:77:35:
                    44:72:88:ed:e6:b0:49:c6:02:26:f3:d0:13:89:9c:
                    62:6a:6a:b0:00:13:7f:db:59:75:6d:6e:fb:0b:c3:
                    da:32:4d:a7:8e:97:ed:f3:0b:e2:40:85:90:09:6d:
                    b8:50:d7:2d:20:a4:92:18:f0:ce:9f:ef:a3:05:27:
                    f6:1e:b4:89:35:75:a5:eb:9f:be:f9:9a:ab:34:49:
                    5f:56:3e:70:c4:8f:f8:5d:f0:65:6a:a0:41:92:ad:
                    a3:37:a7:38:05:d6:d7:d8:0c:c6:a6:03:e9:4a:33:
                    39:a1:3a:1b:0d:54:eb:d6:cf:af:62:9d:ea:15:db:
                    cb:37:8b:fd:66:46:fe:4a:58:10:bb:16:59:be:d8:
                    71:54:c3:0d:d2:41:81:c8:fe:bf:90:04:0d:30:32:
                    59:9a:92:61:9a:b4:7e:66:5b:76:4f:40:f3:db:e5:
                    2a:fd:91:25:ce:f3:a3:7c:a4:d9:29:54:bc:15:9a:
                    c0:ad:95:7a:b3:55:32:fb:71:36:c9:85:bd:ce:d7:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D3:06:D4:40:19:E2:FF:BF:F4:CA:20:6F:0D:A8:2C:87:0E:7D:73
            X509v3 Authority Key Identifier:
                keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33372e302f32342d3234203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:44:01:fa:bb:ae:05:6b:96:2a:6a:d7:54:88:99:98:f5:
         68:27:4d:8c:25:37:a4:f8:d5:f2:e2:0c:9f:e7:9f:72:05:ee:
         f3:ff:e1:d2:5a:e2:92:bb:ef:6a:b5:be:56:f0:af:8b:1f:53:
         ae:eb:0d:f1:c1:89:0c:6e:fe:34:cf:b3:25:25:36:33:5f:47:
         70:49:71:c6:5a:ff:7f:eb:3f:49:95:18:42:b3:32:30:41:fa:
         8e:a4:4e:c1:04:b0:41:ac:89:14:ef:51:37:5c:9b:8c:32:3e:
         26:fa:a8:57:aa:00:c2:4e:e5:93:44:94:61:4a:b9:d8:b9:d4:
         17:4e:ed:98:22:cd:26:1e:a9:50:7b:a4:e1:08:71:e5:48:5c:
         cb:b8:a6:5f:81:80:9c:23:2e:35:7d:83:dd:ef:b9:d0:a1:4b:
         4b:9d:a9:bf:6f:0c:fd:b4:61:5a:34:c2:ee:75:6e:6e:bf:0f:
         00:0c:9e:9c:9b:59:a7:96:7b:55:f8:87:d2:9d:e7:04:28:d7:
         9a:6f:e6:58:b9:2a:ab:d1:25:ad:9e:f3:9e:d5:dc:1e:8f:b2:
         c9:64:01:36:09:a3:bd:09:96:3e:5c:74:e5:96:dc:01:8e:a7:
         a2:4d:d4:b5:c7:06:dd:ae:fd:ee:88:fb:4a:c7:cd:0c:c7:fb:
         7a:57:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:19:55 2025 by rpki-client