Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139382e302f32342d3234203d3e20323632383238.roa
File:                     3137372e3135352e3139382e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          YGNjf8L9u/eBkGVzDVYf/tzatXPrLSN7eAkJkRYrBRI=
Subject key identifier:   92:9F:3B:8E:3D:14:4A:AC:AB:AF:7F:C7:A1:5B:52:20:63:5E:55:4D
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       6501A40448F4AD80672359490475D6D2AC7A3823
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139382e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:55:31 +0000
ROA not before:           Tue 11 Mar 2025 17:50:31 +0000
ROA not after:            Tue 10 Mar 2026 17:55:31 +0000
asID:                     262828
IP address blocks:        177.155.198.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 02:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:a4:04:48:f4:ad:80:67:23:59:49:04:75:d6:d2:ac:7a:38:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:50:31 2025 GMT
            Not After : Mar 10 17:55:31 2026 GMT
        Subject: CN=929F3B8E3D144AACABAF7FC7A15B5220635E554D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:a6:dd:28:1e:d3:8e:da:58:d1:f3:2d:29:
                    4d:ec:e6:d3:86:7b:fb:4c:cc:08:ae:e2:28:64:b2:
                    22:84:39:48:37:c6:8a:13:3e:d5:e7:11:e6:d1:9f:
                    fe:f7:c2:9e:32:b8:a6:1b:ce:14:cc:91:28:bd:2b:
                    ca:26:ca:39:ea:b3:42:47:44:41:ac:03:e8:9c:64:
                    3b:46:0e:a6:c7:7a:4c:64:4a:81:1b:6e:c8:f5:a9:
                    a1:37:5c:59:28:bd:18:30:a7:a5:a7:3f:4f:d6:01:
                    1d:67:95:b5:db:96:7e:8d:d2:50:de:14:26:c8:ae:
                    a3:19:ec:38:ea:45:23:73:73:6f:84:98:7f:9c:f7:
                    d9:68:fa:b8:28:75:aa:0d:4b:4f:84:a0:87:98:7c:
                    97:b2:de:8f:f7:dd:60:ca:a3:c6:7f:f2:33:a2:f6:
                    a9:3a:eb:d4:53:e7:17:ff:ff:fc:66:b5:d2:ae:55:
                    26:fd:67:3a:86:ae:83:df:fc:15:6d:d3:e1:71:a2:
                    be:4d:32:23:b0:3d:7b:69:1e:72:c4:88:53:8e:1b:
                    2c:52:13:37:b1:aa:13:9c:51:74:c7:b0:c1:3b:44:
                    cc:b6:08:f0:25:24:f2:47:4f:b7:76:98:e9:cd:5a:
                    89:d2:d8:d4:7f:cf:cf:6e:cf:62:57:77:6a:09:a2:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:3B:8E:3D:14:4A:AC:AB:AF:7F:C7:A1:5B:52:20:63:5E:55:4D
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139382e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:cd:e4:0f:b4:6a:a6:6a:b9:b9:c0:41:a9:d8:69:d3:53:
         5c:8c:08:b2:65:b3:a0:79:21:1f:ea:a2:ba:52:67:ad:aa:4b:
         cf:82:0b:40:bf:ea:f0:ed:83:9a:ee:97:a0:42:c8:8d:f2:de:
         33:64:b2:8f:f4:23:f2:4f:f8:f2:a4:f2:fa:89:d8:0e:b4:6f:
         d1:86:bb:27:99:2b:b7:b0:f8:b7:68:46:d3:40:c0:8d:26:b9:
         8d:e3:19:5a:c6:b1:3e:ba:8e:89:78:3a:59:28:f8:fe:2e:8d:
         cf:a7:0f:4f:76:35:fa:e7:fe:0b:f0:ae:6a:08:fb:a9:2e:a3:
         c1:d5:c6:67:61:88:9c:e2:d3:ea:d6:32:d7:17:6d:a3:d8:96:
         75:ea:77:3d:85:09:3b:62:24:6e:76:ef:77:d3:85:d9:d3:14:
         89:d9:05:09:e1:8c:42:c9:a5:50:f2:05:eb:dc:6b:4c:e6:1f:
         4c:28:ca:12:24:4e:13:3f:18:53:62:f4:ad:8e:ec:55:4e:b4:
         06:bf:8c:46:7a:ff:ee:16:b2:9c:8a:e2:ae:27:ee:7d:04:90:
         0c:7a:78:63:85:3a:8b:4b:5b:4f:b0:a4:35:d2:87:af:75:37:
         e1:08:2a:66:c4:62:e6:75:83:cf:b8:75:61:b6:72:ea:e8:f8:
         6c:56:08:42
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZQGkBEj0rYBnI1lJBHXW0qx6OCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTAzMTExNzUwMzFaFw0yNjAzMTAxNzU1MzFaMDMxMTAvBgNV
BAMTKDkyOUYzQjhFM0QxNDRBQUNBQkFGN0ZDN0ExNUI1MjIwNjM1RTU1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6r6bdKB7TjtpY0fMtKU3s5tOG
e/tMzAiu4ihksiKEOUg3xooTPtXnEebRn/73wp4yuKYbzhTMkSi9K8omyjnqs0JH
REGsA+icZDtGDqbHekxkSoEbbsj1qaE3XFkovRgwp6WnP0/WAR1nlbXbln6N0lDe
FCbIrqMZ7DjqRSNzc2+EmH+c99lo+rgodaoNS0+EoIeYfJey3o/33WDKo8Z/8jOi
9qk669RT5xf///xmtdKuVSb9ZzqGroPf/BVt0+Fxor5NMiOwPXtpHnLEiFOOGyxS
EzexqhOcUXTHsME7RMy2CPAlJPJHT7d2mOnNWonS2NR/z89uz2JXd2oJogIzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkp87jj0USqyrr3/HoVtSIGNeVU0wHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzNzM3MmUzMTM1MzUyZTMxMzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGbxjANBgkqhkiG9w0BAQsFAAOCAQEAhm7N
5A+0aqZqubnAQanYadNTXIwIsmWzoHkhH+qiulJnrapLz4ILQL/q8O2Dmu6XoELI
jfLeM2Syj/Qj8k/48qTy+onYDrRv0Ya7J5krt7D4t2hG00DAjSa5jeMZWsaxPrqO
iXg6WSj4/i6Nz6cPT3Y1+uf+C/Cuagj7qS6jwdXGZ2GInOLT6tYy1xdto9iWdep3
PYUJO2Ikbnbvd9OF2dMUidkFCeGMQsmlUPIF69xrTOYfTCjKEiROEz8YU2L0rY7s
VU60Br+MRnr/7haynIririfufQSQDHp4Y4U6i0tbT7CkNdKHr3U34QgqZsRi5nWD
z7h1YbZy6uj4bFYIQg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:14 2025 by rpki-client