Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139352e302f32342d3234203d3e20323632383238.roa
File:                     3137372e3135352e3139352e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          0yIs1KKuMSII1qI+8oQm/FY6b5fOFaiLoWEkOWOgdIs=
Subject key identifier:   FA:52:7D:06:77:63:91:BD:98:D4:E5:69:2D:C5:E5:C6:4F:78:12:E9
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       3BA49933F59260D860ECE879B0302C4A5C101FAA
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139352e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:56:55 +0000
ROA not before:           Tue 11 Mar 2025 17:51:55 +0000
ROA not after:            Tue 10 Mar 2026 17:56:55 +0000
asID:                     262828
IP address blocks:        177.155.195.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 02:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a4:99:33:f5:92:60:d8:60:ec:e8:79:b0:30:2c:4a:5c:10:1f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:51:55 2025 GMT
            Not After : Mar 10 17:56:55 2026 GMT
        Subject: CN=FA527D06776391BD98D4E5692DC5E5C64F7812E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:f1:a3:4c:59:52:16:e8:bd:7b:c7:a7:2f:
                    f6:2a:fd:30:7c:c1:63:90:b3:96:35:b9:a1:1e:e9:
                    15:cd:1c:ac:ea:5e:ca:19:05:69:d5:d2:27:53:ba:
                    8b:98:b5:3d:c1:82:ff:ed:5f:6e:19:c3:0c:63:6b:
                    aa:43:e8:b5:e2:2a:45:e0:b2:a0:41:90:d9:d0:06:
                    b6:7d:60:06:b4:c3:51:0c:0b:d5:d0:7c:db:89:8d:
                    0c:39:d1:7d:97:f4:c2:d0:81:72:2f:60:81:a6:c9:
                    31:be:91:4f:59:2c:e4:20:bc:0a:b5:b0:9b:1d:50:
                    ed:49:80:83:5b:6f:6c:a5:69:ad:25:26:cc:ca:90:
                    41:1d:05:b3:45:5e:a3:b8:88:43:e5:56:75:70:51:
                    ac:f2:04:4f:6f:01:da:10:c2:ab:ee:0f:3b:da:9b:
                    e0:1e:33:6b:41:4e:84:ec:ec:14:07:89:be:c7:a3:
                    a7:65:ad:73:fc:34:62:41:84:6b:4f:1a:91:b9:40:
                    f3:a4:3b:49:73:a3:ba:17:e7:1e:a9:54:ee:13:5c:
                    d9:f9:07:c2:24:af:f4:13:57:09:0c:6b:d1:39:1d:
                    82:2f:34:3f:5c:10:92:2b:24:e2:44:51:ec:30:6e:
                    1f:bc:d5:11:1d:a3:0e:7c:95:78:fd:6c:a1:16:63:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:52:7D:06:77:63:91:BD:98:D4:E5:69:2D:C5:E5:C6:4F:78:12:E9
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139352e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:1c:61:de:8e:0b:78:6a:1f:40:2d:a1:c6:34:d0:9f:ea:
         43:3a:09:65:ae:0a:42:2b:7a:aa:b8:48:60:0e:b3:98:c6:60:
         1e:32:dd:73:d8:0a:7c:49:89:dd:bf:a4:f5:df:34:4b:b3:51:
         c1:7e:65:eb:76:26:e3:fb:83:12:8f:76:7c:3e:4c:1c:54:e2:
         fb:07:c6:f7:bf:e5:1a:ae:1a:a2:72:76:c6:e6:81:61:f6:9f:
         d6:67:37:0d:4a:48:10:e7:79:8e:95:d3:8a:b4:85:f6:e7:3d:
         e7:a3:b1:d9:d0:ff:7a:62:4b:50:72:cb:e0:38:aa:c1:91:28:
         0e:d2:93:34:c8:b6:1f:7d:09:3a:f6:56:e5:0e:53:bf:71:4e:
         72:66:b0:3b:87:27:65:24:91:53:b5:85:69:51:3b:86:76:38:
         bb:64:43:26:e3:76:ed:92:a1:d5:54:f8:76:19:f9:8b:5b:63:
         77:96:ba:d4:dd:a8:81:85:c9:50:f8:b4:5a:33:ca:8c:d4:4c:
         54:97:c8:09:31:74:d5:cf:06:9c:b3:70:93:bd:a7:5d:e3:21:
         39:03:69:70:fa:46:47:ad:4d:51:2e:55:80:8d:32:17:4f:2b:
         60:ad:4a:e2:18:87:11:bc:56:1f:5b:a0:ea:b6:1a:5c:57:a2:
         41:c8:45:3e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUO6SZM/WSYNhg7Oh5sDAsSlwQH6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTAzMTExNzUxNTVaFw0yNjAzMTAxNzU2NTVaMDMxMTAvBgNV
BAMTKEZBNTI3RDA2Nzc2MzkxQkQ5OEQ0RTU2OTJEQzVFNUM2NEY3ODEyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvvGjTFlSFui9e8enL/Yq/TB8
wWOQs5Y1uaEe6RXNHKzqXsoZBWnV0idTuouYtT3Bgv/tX24Zwwxja6pD6LXiKkXg
sqBBkNnQBrZ9YAa0w1EMC9XQfNuJjQw50X2X9MLQgXIvYIGmyTG+kU9ZLOQgvAq1
sJsdUO1JgINbb2ylaa0lJszKkEEdBbNFXqO4iEPlVnVwUazyBE9vAdoQwqvuDzva
m+AeM2tBToTs7BQHib7Ho6dlrXP8NGJBhGtPGpG5QPOkO0lzo7oX5x6pVO4TXNn5
B8Ikr/QTVwkMa9E5HYIvND9cEJIrJOJEUewwbh+81REdow58lXj9bKEWYxKrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+lJ9Bndjkb2Y1OVpLcXlxk94EukwHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzNzM3MmUzMTM1MzUyZTMxMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGbwzANBgkqhkiG9w0BAQsFAAOCAQEAkAoc
Yd6OC3hqH0AtocY00J/qQzoJZa4KQit6qrhIYA6zmMZgHjLdc9gKfEmJ3b+k9d80
S7NRwX5l63Ym4/uDEo92fD5MHFTi+wfG97/lGq4aonJ2xuaBYfaf1mc3DUpIEOd5
jpXTirSF9uc956Ox2dD/emJLUHLL4DiqwZEoDtKTNMi2H30JOvZW5Q5Tv3FOcmaw
O4cnZSSRU7WFaVE7hnY4u2RDJuN27ZKh1VT4dhn5i1tjd5a61N2ogYXJUPi0WjPK
jNRMVJfICTF01c8GnLNwk72nXeMhOQNpcPpGR61NUS5VgI0yF08rYK1K4hiHEbxW
H1ug6rYaXFeiQchFPg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:53 2025 by rpki-client