Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32342d3234203d3e20323632383238.roa
File:                     3137372e3135352e3139362e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          Oq6abD3qZDQvPjG/BbAU0TFmA2XU9fwVy4KOK2kj/08=
Subject key identifier:   96:A9:58:D8:34:93:33:BC:A9:BC:F0:45:79:D9:64:F2:97:5C:3C:6C
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       1788417A562D3C2B41306A4FC576D4A2E36863AA
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:57:20 +0000
ROA not before:           Tue 11 Mar 2025 17:52:20 +0000
ROA not after:            Tue 10 Mar 2026 17:57:20 +0000
asID:                     262828
IP address blocks:        177.155.196.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 02:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:88:41:7a:56:2d:3c:2b:41:30:6a:4f:c5:76:d4:a2:e3:68:63:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:52:20 2025 GMT
            Not After : Mar 10 17:57:20 2026 GMT
        Subject: CN=96A958D8349333BCA9BCF04579D964F2975C3C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:0a:00:df:27:f4:4f:e3:58:93:02:90:f1:
                    ff:74:dd:af:c4:09:d9:4a:18:a1:15:f2:49:4e:c1:
                    6d:47:96:75:48:41:29:ce:08:3d:9f:62:19:a2:17:
                    89:bc:85:ec:c3:9c:b8:fe:94:0c:5b:87:f8:66:3b:
                    2d:31:62:c6:6a:ba:d6:d8:81:31:14:3e:a6:76:57:
                    a6:e8:42:13:46:35:82:74:d8:5d:aa:5a:76:73:26:
                    c6:47:90:33:81:e6:8e:82:78:1f:c3:0a:e8:c7:03:
                    73:10:a0:e1:cd:87:85:07:ab:2e:c1:8c:2c:df:76:
                    ea:b4:7a:19:83:9b:cd:e5:fa:f9:31:68:48:93:9e:
                    44:68:cc:dd:b7:38:30:ad:17:d1:d0:28:26:dc:be:
                    cc:de:c5:08:ee:a2:92:8f:8f:8b:88:f2:6e:78:7e:
                    b4:95:44:2a:9b:70:e9:bb:87:cc:ca:61:d2:e7:62:
                    39:c2:ae:c7:5a:1f:a7:1f:f8:ad:f1:68:73:c3:c0:
                    e5:4b:a0:ce:a7:95:ae:b1:3a:cf:a9:f6:2f:4e:72:
                    b8:96:9d:ad:a7:91:30:0e:08:4f:21:26:ca:70:98:
                    a5:ad:ef:bf:56:df:42:41:8c:e6:48:8f:85:d3:18:
                    ce:37:f2:b9:5d:0e:f9:3c:90:93:54:c8:62:0e:3c:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A9:58:D8:34:93:33:BC:A9:BC:F0:45:79:D9:64:F2:97:5C:3C:6C
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:ae:75:fc:52:f0:7b:2d:8f:e4:db:ab:cc:02:12:b7:a5:80:
         c7:f7:4e:4a:7b:2b:1d:57:0a:73:b9:70:9f:fc:8c:9d:c1:8e:
         6b:1c:77:36:ea:e0:81:b9:4d:27:51:b2:9b:36:f8:55:57:26:
         3a:e7:5d:ab:f3:a2:00:67:67:6d:b9:8d:d0:fe:e6:f0:1d:ca:
         27:82:0f:e8:16:12:6b:8a:f3:66:6a:d1:50:b5:97:7d:b3:f0:
         8d:8c:c3:05:52:18:92:8d:52:cd:8e:83:ff:d2:f3:aa:b6:6d:
         e5:03:a0:fd:12:c5:b8:8e:35:35:69:ca:fd:54:02:63:e1:ab:
         81:bc:b7:9d:42:da:2f:93:b9:d6:f8:90:cb:6e:60:30:f3:b4:
         c8:3e:d6:b1:dc:8d:39:e1:da:96:08:b1:cb:08:98:d5:19:a7:
         bf:72:3a:5e:15:b2:7c:e2:f0:ef:c5:13:5d:17:cd:27:ae:af:
         40:6e:29:32:dc:67:e2:16:aa:6c:4f:19:0d:47:bc:4d:b2:5c:
         53:4f:f4:40:bc:94:02:88:24:4c:9a:36:e4:0c:6f:38:f2:39:
         9f:22:f8:c0:f6:17:b4:06:07:f3:66:76:a7:9b:0e:b0:86:54:
         9a:dd:af:06:75:1e:7a:fb:05:eb:88:b0:b8:68:6b:56:94:6f:
         59:ba:2e:eb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUF4hBelYtPCtBMGpPxXbUouNoY6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTAzMTExNzUyMjBaFw0yNjAzMTAxNzU3MjBaMDMxMTAvBgNV
BAMTKDk2QTk1OEQ4MzQ5MzMzQkNBOUJDRjA0NTc5RDk2NEYyOTc1QzNDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDAoA3yf0T+NYkwKQ8f903a/E
CdlKGKEV8klOwW1HlnVIQSnOCD2fYhmiF4m8hezDnLj+lAxbh/hmOy0xYsZqutbY
gTEUPqZ2V6boQhNGNYJ02F2qWnZzJsZHkDOB5o6CeB/DCujHA3MQoOHNh4UHqy7B
jCzfduq0ehmDm83l+vkxaEiTnkRozN23ODCtF9HQKCbcvszexQjuopKPj4uI8m54
frSVRCqbcOm7h8zKYdLnYjnCrsdaH6cf+K3xaHPDwOVLoM6nla6xOs+p9i9OcriW
na2nkTAOCE8hJspwmKWt779W30JBjOZIj4XTGM438rldDvk8kJNUyGIOPDH7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlqlY2DSTM7ypvPBFedlk8pdcPGwwHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzNzM3MmUzMTM1MzUyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGbxDANBgkqhkiG9w0BAQsFAAOCAQEAtK51
/FLwey2P5NurzAISt6WAx/dOSnsrHVcKc7lwn/yMncGOaxx3NurggblNJ1Gymzb4
VVcmOuddq/OiAGdnbbmN0P7m8B3KJ4IP6BYSa4rzZmrRULWXfbPwjYzDBVIYko1S
zY6D/9LzqrZt5QOg/RLFuI41NWnK/VQCY+Grgby3nULaL5O51viQy25gMPO0yD7W
sdyNOeHalgixywiY1Rmnv3I6XhWyfOLw78UTXRfNJ66vQG4pMtxn4haqbE8ZDUe8
TbJcU0/0QLyUAogkTJo25AxvOPI5nyL4wPYXtAYH82Z2p5sOsIZUmt2vBnUeevsF
64iwuGhrVpRvWbou6w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:35 2025 by rpki-client