Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232362e302f32332d3233203d3e20323731333837.roa
File:                     3230302e3231352e3232362e302f32332d3233203d3e20323731333837.roa (raw, json)
Hash identifier:          sBVx9mK/VUlFcdlZjKAjLDRAkjk2qWQuMisOM9z5phU=
Subject key identifier:   68:DE:98:13:E6:3A:A2:43:72:73:EB:3B:56:6E:4A:87:62:D9:5C:D2
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       506DE5B46DA8BD416B5D0AD5835EC6717EB0BD25
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232362e302f32332d3233203d3e20323731333837.roa
Signing time:             Thu 30 Jan 2025 13:59:00 +0000
ROA not before:           Thu 30 Jan 2025 13:54:00 +0000
ROA not after:            Thu 29 Jan 2026 13:59:00 +0000
asID:                     271387
IP address blocks:        200.215.226.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 11 Feb 2025 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6d:e5:b4:6d:a8:bd:41:6b:5d:0a:d5:83:5e:c6:71:7e:b0:bd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Jan 30 13:54:00 2025 GMT
            Not After : Jan 29 13:59:00 2026 GMT
        Subject: CN=68DE9813E63AA2437273EB3B566E4A8762D95CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:76:b0:f5:38:c3:62:d5:3b:d3:bf:ac:3e:
                    56:35:15:55:e3:bc:92:c5:48:5c:2a:f0:db:20:c0:
                    44:61:41:62:72:96:ac:50:44:39:ba:6c:88:e0:b2:
                    c7:91:a2:f1:b3:2f:27:6a:38:3e:0d:c5:30:da:82:
                    39:9b:24:3b:0a:09:1b:f7:a4:d0:b2:1c:81:96:96:
                    c7:c5:df:02:30:65:b5:73:8c:4d:65:e7:0a:45:7b:
                    10:67:f3:ad:f8:99:95:09:05:91:3e:ec:e0:af:48:
                    87:73:a5:23:bb:42:f5:b8:59:5f:f0:25:4a:d1:08:
                    95:7a:b5:57:bd:db:0c:ce:28:e8:49:9d:92:7f:6d:
                    ae:81:c6:ad:8f:07:95:4f:53:c2:73:05:52:26:fc:
                    54:81:19:cc:61:23:92:44:de:c7:42:ce:fa:36:6d:
                    23:e1:6f:9f:3f:23:bd:1b:7c:eb:ef:33:b2:fb:e1:
                    ac:d7:a0:84:46:ba:94:eb:68:10:41:f8:bd:62:6f:
                    6b:33:35:45:12:1f:2f:e8:44:2f:81:80:e6:fc:44:
                    0f:c8:17:28:7e:35:e7:16:bf:54:d5:9a:ed:b2:cb:
                    4a:4d:4c:e7:22:9f:01:dd:db:97:db:44:07:b7:4d:
                    0f:93:58:4f:b1:4f:17:6b:ea:c8:f2:54:9e:69:11:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:98:13:E6:3A:A2:43:72:73:EB:3B:56:6E:4A:87:62:D9:5C:D2
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232362e302f32332d3233203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:28:f5:a2:2a:98:7d:81:4a:30:85:bc:82:86:aa:58:9d:80:
         5a:01:99:d9:7f:bb:32:89:2f:94:23:99:c2:bc:f6:38:e4:ba:
         a3:0a:74:b3:94:0b:a7:18:70:7a:1c:b4:11:6c:f4:ee:9e:ba:
         df:eb:1c:25:70:9b:37:dd:d2:e0:c9:03:63:b6:a8:8a:bd:55:
         52:f7:7b:bb:4a:bb:aa:87:40:74:e1:53:63:39:34:bc:b9:99:
         bd:6d:e4:1f:51:cd:ea:cb:49:75:3c:4b:83:9b:f4:a7:48:73:
         97:fc:76:0c:ad:ca:f0:27:00:1d:b7:49:b2:8e:2e:be:0c:8d:
         20:1a:db:6f:6b:e0:04:a7:bb:7e:c7:ba:b1:f1:9c:cf:e8:8d:
         44:18:12:06:1a:69:5d:0f:f1:75:23:f8:a4:0d:1b:e3:b5:e6:
         54:ba:80:af:39:cc:a2:c0:84:97:20:fa:36:42:18:9d:6b:b0:
         30:25:66:fe:04:a1:d0:dc:f5:f6:de:6e:4a:b5:e4:12:35:75:
         fc:97:fc:5e:36:d8:ed:42:f1:43:3d:f0:29:99:3a:6d:8a:17:
         f1:31:b4:26:df:1d:27:60:e4:fd:a8:38:12:8b:db:03:b7:72:
         7c:2f:eb:aa:b7:3e:8d:c0:6f:80:4d:b5:06:65:f3:a9:41:f9:
         8e:0b:0d:55
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUG3ltG2ovUFrXQrVg17GcX6wvSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQUVFOEM0NzU1NUU3OENBREUxRkFFQUE4MkMxMTg2
Q0RGQzE4QzAeFw0yNTAxMzAxMzU0MDBaFw0yNjAxMjkxMzU5MDBaMDMxMTAvBgNV
BAMTKDY4REU5ODEzRTYzQUEyNDM3MjczRUIzQjU2NkU0QTg3NjJEOTVDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIo3aw9TjDYtU707+sPlY1FVXj
vJLFSFwq8NsgwERhQWJylqxQRDm6bIjgsseRovGzLydqOD4NxTDagjmbJDsKCRv3
pNCyHIGWlsfF3wIwZbVzjE1l5wpFexBn8634mZUJBZE+7OCvSIdzpSO7QvW4WV/w
JUrRCJV6tVe92wzOKOhJnZJ/ba6Bxq2PB5VPU8JzBVIm/FSBGcxhI5JE3sdCzvo2
bSPhb58/I70bfOvvM7L74azXoIRGupTraBBB+L1ib2szNUUSHy/oRC+BgOb8RA/I
Fyh+NecWv1TVmu2yy0pNTOcinwHd25fbRAe3TQ+TWE+xTxdr6sjyVJ5pEe1BAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaN6YE+Y6okNyc+s7Vm5Kh2LZXNIwHwYDVR0j
BBgwFoAU4brujEdVXnjK3h+uqoLBGGzfwYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhv
dEovMC9FMUJBRUU4QzQ3NTU1RTc4Q0FERTFGQUVBQTgyQzExODZDREZDMThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkFFRThDNDc1NTVFNzhD
QURFMUZBRUFBODJDMTE4NkNERkMxOEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaa1dNQnFvc21aYndRUXJNUkg3bnNZOEg3VGgzQ1pCcmp0NzRySGJIb3RKLzAv
MzIzMDMwMmUzMjMxMzUyZTMyMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMzMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcjX4jANBgkqhkiG9w0BAQsFAAOCAQEAoij1
oiqYfYFKMIW8goaqWJ2AWgGZ2X+7MokvlCOZwrz2OOS6owp0s5QLpxhwehy0EWz0
7p663+scJXCbN93S4MkDY7aoir1VUvd7u0q7qodAdOFTYzk0vLmZvW3kH1HN6stJ
dTxLg5v0p0hzl/x2DK3K8CcAHbdJso4uvgyNIBrbb2vgBKe7fse6sfGcz+iNRBgS
BhppXQ/xdSP4pA0b47XmVLqArznMosCElyD6NkIYnWuwMCVm/gSh0Nz19t5uSrXk
EjV1/Jf8XjbY7ULxQz3wKZk6bYoX8TG0Jt8dJ2Dk/ag4EovbA7dyfC/rqrc+jcBv
gE21BmXzqUH5jgsNVQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:58:17 2025 by rpki-client