Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32332d3233203d3e20323731333837.roa
File:                     3230302e3231352e3232342e302f32332d3233203d3e20323731333837.roa (raw, json)
Hash identifier:          qXnzvHVb56oRs3IwJmSPAjWLOePyqNDpa/hlfr9dA00=
Subject key identifier:   9B:00:98:BF:00:F7:72:40:79:9A:2A:EF:98:4C:23:2F:52:48:14:65
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       2D7752E3F2228D23CD6F32015910B18E25CB53D3
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32332d3233203d3e20323731333837.roa
Signing time:             Thu 30 Jan 2025 13:59:00 +0000
ROA not before:           Thu 30 Jan 2025 13:54:00 +0000
ROA not after:            Thu 29 Jan 2026 13:59:00 +0000
asID:                     271387
IP address blocks:        200.215.224.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 11 Feb 2025 15:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:77:52:e3:f2:22:8d:23:cd:6f:32:01:59:10:b1:8e:25:cb:53:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Jan 30 13:54:00 2025 GMT
            Not After : Jan 29 13:59:00 2026 GMT
        Subject: CN=9B0098BF00F77240799A2AEF984C232F52481465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:c3:a9:de:60:1b:39:96:3a:16:dc:2f:ad:
                    51:43:f2:e3:4e:0d:0b:a8:f9:96:9b:a0:78:69:64:
                    81:14:e9:1e:07:7b:d0:36:ea:26:d4:c4:7b:af:0e:
                    d7:dc:0e:c7:6b:1d:e9:fa:1a:d6:41:a1:46:f7:f6:
                    54:68:e2:d2:a4:e7:a5:7f:5c:db:6c:a2:cb:fc:b3:
                    18:62:21:81:0a:8b:5c:45:a4:8c:0d:0c:70:36:37:
                    4b:64:12:d2:06:50:e5:2b:a6:48:55:3d:14:a8:ea:
                    33:5a:ff:6e:69:ec:07:21:c1:2a:fa:38:be:78:e1:
                    b2:42:19:cd:31:b5:a8:6a:33:7e:d2:f9:03:c8:73:
                    0b:9a:93:8b:11:14:96:33:4c:6a:36:cb:53:27:04:
                    31:23:e4:75:3b:5d:52:6f:14:c5:1f:f2:20:3c:99:
                    b3:e1:f8:d8:b3:62:62:81:08:2e:a0:1d:d2:88:10:
                    96:45:fa:f5:c6:1b:7d:e3:35:c2:da:fe:b3:c1:48:
                    b0:55:07:24:98:78:8f:6d:44:06:5c:83:6f:fd:cf:
                    b4:ea:c1:ca:07:0c:f9:f3:10:f9:27:4b:1a:97:51:
                    61:6d:ea:78:0f:b5:13:de:6b:c7:10:a0:41:20:79:
                    d6:db:ae:8f:1b:d6:70:ce:fb:b8:40:07:b6:8b:80:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:00:98:BF:00:F7:72:40:79:9A:2A:EF:98:4C:23:2F:52:48:14:65
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32332d3233203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:36:5b:5c:79:45:a6:c1:59:f4:d8:2c:b6:50:c2:28:41:
         b5:b6:89:f2:ad:c1:88:51:a3:d3:88:24:af:82:0c:7e:9b:db:
         05:7d:47:89:98:71:67:c7:46:ce:97:89:97:4e:ed:b5:d9:b6:
         e2:8a:1a:bc:70:f4:73:1f:91:52:ba:1c:04:29:b4:ea:22:15:
         c3:45:46:d6:08:5d:96:42:99:c2:ed:26:03:05:c6:1f:02:6c:
         24:52:de:e1:13:10:61:61:21:06:f0:19:bb:09:58:72:4b:84:
         45:07:a0:d4:35:62:bb:4c:3f:92:5c:44:f8:e7:97:7b:cc:cf:
         25:50:04:34:e5:e6:90:fa:45:3e:03:db:9d:d6:97:e7:51:9e:
         6c:ef:e0:99:d5:f9:09:b1:31:eb:c1:1f:54:6b:82:55:f6:d9:
         7e:be:a2:74:98:25:8e:7e:00:df:5a:62:81:9c:78:60:91:14:
         e1:d8:fa:2b:6c:80:87:cf:28:92:f1:0a:cd:27:57:d5:df:c2:
         80:5d:41:6d:90:3e:43:1e:fb:71:a7:f9:61:d9:49:9c:cf:e4:
         a2:16:06:e9:26:23:fc:b2:19:6f:32:29:f2:7e:a0:44:af:80:
         b6:3c:ba:3c:63:bd:47:a7:53:f1:79:55:f6:1e:85:f7:c9:1a:
         a0:b4:a7:3f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULXdS4/IijSPNbzIBWRCxjiXLU9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQUVFOEM0NzU1NUU3OENBREUxRkFFQUE4MkMxMTg2
Q0RGQzE4QzAeFw0yNTAxMzAxMzU0MDBaFw0yNjAxMjkxMzU5MDBaMDMxMTAvBgNV
BAMTKDlCMDA5OEJGMDBGNzcyNDA3OTlBMkFFRjk4NEMyMzJGNTI0ODE0NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgcOp3mAbOZY6FtwvrVFD8uNO
DQuo+ZaboHhpZIEU6R4He9A26ibUxHuvDtfcDsdrHen6GtZBoUb39lRo4tKk56V/
XNtsosv8sxhiIYEKi1xFpIwNDHA2N0tkEtIGUOUrpkhVPRSo6jNa/25p7AchwSr6
OL544bJCGc0xtahqM37S+QPIcwuak4sRFJYzTGo2y1MnBDEj5HU7XVJvFMUf8iA8
mbPh+NizYmKBCC6gHdKIEJZF+vXGG33jNcLa/rPBSLBVBySYeI9tRAZcg2/9z7Tq
wcoHDPnzEPknSxqXUWFt6ngPtRPea8cQoEEgedbbro8b1nDO+7hAB7aLgOnxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmwCYvwD3ckB5mirvmEwjL1JIFGUwHwYDVR0j
BBgwFoAU4brujEdVXnjK3h+uqoLBGGzfwYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhv
dEovMC9FMUJBRUU4QzQ3NTU1RTc4Q0FERTFGQUVBQTgyQzExODZDREZDMThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkFFRThDNDc1NTVFNzhD
QURFMUZBRUFBODJDMTE4NkNERkMxOEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaa1dNQnFvc21aYndRUXJNUkg3bnNZOEg3VGgzQ1pCcmp0NzRySGJIb3RKLzAv
MzIzMDMwMmUzMjMxMzUyZTMyMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMzMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcjX4DANBgkqhkiG9w0BAQsFAAOCAQEAAMI2
W1x5RabBWfTYLLZQwihBtbaJ8q3BiFGj04gkr4IMfpvbBX1HiZhxZ8dGzpeJl07t
tdm24ooavHD0cx+RUrocBCm06iIVw0VG1ghdlkKZwu0mAwXGHwJsJFLe4RMQYWEh
BvAZuwlYckuERQeg1DViu0w/klxE+OeXe8zPJVAENOXmkPpFPgPbndaX51GebO/g
mdX5CbEx68EfVGuCVfbZfr6idJgljn4A31pigZx4YJEU4dj6K2yAh88okvEKzSdX
1d/CgF1BbZA+Qx77caf5YdlJnM/kohYG6SYj/LIZbzIp8n6gRK+Atjy6PGO9R6dT
8XlV9h6F98kaoLSnPw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:28:04 2025 by rpki-client