Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32382e302f32342d3332203d3e203533323235.roa
File:                     3137372e3133372e32382e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          5Aso0BO5PdFLyMBQ70a1CamuTMHqNV2taZAm5b+aBio=
Subject key identifier:   BB:CB:50:00:41:9D:B3:9F:FA:18:F8:F3:00:A6:46:96:69:0A:35:2C
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       07693D16960F0C0612BABD11F526E737D0C42820
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32382e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 07 May 2025 18:44:23 +0000
ROA not before:           Wed 07 May 2025 18:39:23 +0000
ROA not after:            Wed 06 May 2026 18:44:23 +0000
asID:                     53225
IP address blocks:        177.137.28.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Wed 07 May 2025 18:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:69:3d:16:96:0f:0c:06:12:ba:bd:11:f5:26:e7:37:d0:c4:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  7 18:39:23 2025 GMT
            Not After : May  6 18:44:23 2026 GMT
        Subject: CN=BBCB5000419DB39FFA18F8F300A64696690A352C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:44:61:f0:8f:d4:90:bb:30:5f:fb:fa:57:1b:
                    5b:aa:16:e8:6d:88:fa:25:98:6c:93:2c:69:3a:4b:
                    af:49:b9:73:f3:64:17:3e:e4:bd:d5:86:a1:e2:65:
                    ac:a3:2e:05:b3:09:1a:44:04:05:d7:19:d6:5f:f1:
                    ad:f7:11:07:32:a5:9b:74:4c:3d:ff:02:2d:f5:80:
                    fb:cc:6d:02:de:f7:8b:64:6a:f7:0a:42:29:cb:f1:
                    6c:aa:a9:01:d5:93:f2:c2:99:a5:0e:e8:95:cb:79:
                    07:b4:d2:03:76:d3:3d:be:99:a7:23:0d:4f:a4:9a:
                    eb:47:f6:32:b2:84:8e:41:50:67:b7:1d:ac:e8:fa:
                    ab:03:3e:ce:18:5c:3f:63:16:ab:7c:35:27:67:ce:
                    f2:c3:3f:09:13:96:6c:ce:ca:d9:0d:7d:21:e0:81:
                    df:c2:7f:4c:95:f4:44:20:27:ba:3b:fd:7e:fa:dc:
                    65:74:40:7a:01:77:1a:14:26:9c:9a:aa:aa:4c:94:
                    cb:58:d3:eb:d9:51:54:f2:00:5a:83:35:77:03:a5:
                    96:10:5a:e7:a2:7d:c4:a7:5e:ba:f0:31:b6:ec:b6:
                    a3:eb:ed:a7:0e:ca:dc:d0:e1:c4:dd:9c:91:84:a3:
                    ab:60:ee:24:87:f1:df:d2:b3:98:93:84:2d:83:13:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:50:00:41:9D:B3:9F:FA:18:F8:F3:00:A6:46:96:69:0A:35:2C
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32382e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e6:8f:34:28:cb:43:18:9b:e4:48:eb:0b:17:d9:71:b9:65:
         66:ca:41:87:e0:98:f2:3c:c0:a4:20:db:38:e0:42:1d:c6:4d:
         e3:c3:41:59:51:9e:a6:f3:6f:bd:bd:a5:74:49:27:a6:07:20:
         62:be:b6:3d:db:4f:9f:89:9a:80:a9:84:a9:79:15:31:30:9b:
         2b:55:82:8b:5a:c7:7a:bc:a4:a0:ca:75:ef:a2:44:0b:39:d1:
         65:a7:16:9f:fa:fb:51:3a:bd:4c:d7:f8:39:fd:8a:49:bd:97:
         51:df:ee:93:58:58:9a:f6:a5:6f:d8:5b:46:0a:4d:81:65:ae:
         bf:87:8b:2f:ee:72:12:c6:79:fa:76:f1:c3:0f:9a:07:fb:14:
         e5:a6:93:db:4c:da:60:0a:07:25:61:64:d4:f4:88:49:3c:28:
         6e:e0:84:01:15:ce:b4:6b:b0:8e:11:a3:b7:71:95:bd:ac:4c:
         94:df:69:06:fd:de:5a:5c:67:9a:51:7d:01:ba:f5:33:85:f7:
         b4:2b:fe:60:e3:22:19:3a:84:58:e6:20:b6:0b:7c:33:00:ce:
         f5:fd:80:36:6e:f1:39:c8:be:0b:5b:76:01:34:22:a8:49:da:
         1f:df:ff:4b:a2:18:2f:b9:7b:cb:46:0c:82:ad:dc:35:43:a8:
         a7:75:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:55:44 2025 by rpki-client