Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa
File:                     3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          yDV7rV205PiKGHn1G2uqv0UnrbDQDkZi5EXVa1BxrXU=
Subject key identifier:   53:DE:D2:4F:16:0C:CE:FB:66:CA:40:6D:33:72:4B:D3:16:32:4C:4A
Certificate issuer:       /CN=202D680D4DF230713D515261F90FC214E69FBA3E
Certificate serial:       32F6C2B1ED2829D3F99DA2B815CF4FBED9305CC1
Authority key identifier: 20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa
Signing time:             Tue 06 May 2025 20:11:24 +0000
ROA not before:           Tue 06 May 2025 20:06:24 +0000
ROA not after:            Tue 05 May 2026 20:11:24 +0000
asID:                     270777
IP address blocks:        131.161.116.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 12 May 2025 18:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f6:c2:b1:ed:28:29:d3:f9:9d:a2:b8:15:cf:4f:be:d9:30:5c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202D680D4DF230713D515261F90FC214E69FBA3E
        Validity
            Not Before: May  6 20:06:24 2025 GMT
            Not After : May  5 20:11:24 2026 GMT
        Subject: CN=53DED24F160CCEFB66CA406D33724BD316324C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:01:ea:42:9b:c0:05:15:a4:a0:54:75:ea:
                    e8:12:c4:dc:b7:ed:97:c6:3c:31:e2:df:13:c1:50:
                    54:69:c4:a3:72:3d:81:dc:73:96:27:e8:30:18:2c:
                    02:ff:46:b5:dd:c8:ee:75:76:0b:2c:72:2b:5f:b1:
                    b4:34:b3:1e:e8:96:e2:c6:64:ea:88:12:e6:4e:bc:
                    25:db:fa:f4:6d:1e:29:37:a5:f4:8f:78:8b:0f:88:
                    97:8d:9b:d9:76:5a:0b:64:f4:18:eb:03:49:89:a2:
                    fb:0f:f7:6f:a0:27:2d:93:4e:4b:7b:c1:09:1f:7a:
                    d6:a2:e3:18:50:95:4f:17:6f:d3:31:64:7a:1e:c7:
                    79:59:38:1c:69:ae:95:ec:2c:8e:94:a4:3a:fe:60:
                    87:4f:fe:2f:8c:9b:aa:30:49:28:1b:cd:21:3c:d0:
                    eb:19:c7:b9:9d:ec:01:b4:77:f7:23:42:26:60:bd:
                    f4:d5:0b:ca:51:46:02:39:e3:39:c5:4d:28:de:19:
                    51:c8:10:81:32:e5:eb:49:8d:40:04:5d:70:75:71:
                    3c:36:d2:99:54:d4:8c:6e:c9:b0:20:42:aa:37:df:
                    70:e8:c5:41:26:4a:88:8f:9b:e4:91:09:0e:ba:6b:
                    49:1b:49:f3:98:5b:30:b9:7a:57:c8:6d:a0:22:4e:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:D2:4F:16:0C:CE:FB:66:CA:40:6D:33:72:4B:D3:16:32:4C:4A
            X509v3 Authority Key Identifier:
                keyid:20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:69:ed:2c:50:72:c9:62:04:9f:5c:d9:e6:81:f3:65:5d:96:
         b3:98:22:1c:da:d5:73:ea:81:a3:5c:d6:f8:6f:3a:9c:c3:04:
         b7:1b:d4:84:6e:3e:4e:b1:b4:ab:c8:48:f2:46:97:01:05:c2:
         d1:81:96:b3:61:d9:c0:d1:c2:4b:d7:69:81:03:b3:de:e5:81:
         96:59:d2:d5:30:69:16:10:25:88:28:c7:2c:09:2e:32:a3:c6:
         9b:cf:fb:ee:69:1d:53:5a:f5:a3:95:63:9d:e4:69:4e:8a:16:
         6b:97:04:ec:f0:63:d8:6b:e5:a9:8c:51:d3:ad:6d:76:b7:9a:
         a0:d5:d1:12:89:25:9a:f2:3c:ec:50:a7:44:df:6d:13:ab:8e:
         ce:c0:54:3c:12:ce:3f:34:83:55:3a:0c:bb:d6:30:64:55:fb:
         82:b9:8f:75:47:1a:f6:7d:56:68:8c:a4:2b:44:60:65:b8:af:
         5d:d1:92:19:e9:92:52:f1:ac:a4:2d:db:ff:6a:37:f6:2c:3d:
         07:55:19:91:04:87:63:93:99:ac:e3:c2:4c:a9:25:e2:fa:88:
         20:c8:fa:e3:0b:97:3b:17:0e:0f:ef:3a:cd:f1:54:c3:41:cc:
         e5:f3:57:ab:84:8e:ec:37:02:07:da:36:1b:bf:9d:1b:69:79:
         4e:e1:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:01:08 2025 by rpki-client