Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130312e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e3130312e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          PvQvQQbEAQFe1ggWZVzWFofOPNWmlwfI5nkBB9uhd8k=
Subject key identifier:   44:9E:4B:D2:C2:AB:3D:10:D0:93:80:02:AF:63:88:24:B8:62:8E:D8
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       43B8DBD16D7E4BFD9C263C0628D4181C1FC177F1
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130312e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:53:26 +0000
ROA not before:           Tue 11 Mar 2025 17:48:26 +0000
ROA not after:            Tue 10 Mar 2026 17:53:26 +0000
asID:                     262828
IP address blocks:        186.251.101.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 02:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b8:db:d1:6d:7e:4b:fd:9c:26:3c:06:28:d4:18:1c:1f:c1:77:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:48:26 2025 GMT
            Not After : Mar 10 17:53:26 2026 GMT
        Subject: CN=449E4BD2C2AB3D10D0938002AF638824B8628ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:86:4e:e7:85:ed:86:b7:21:93:f8:79:64:
                    8b:a5:d1:5e:3b:c6:67:a2:b0:6e:19:ff:d9:9c:1d:
                    7c:0a:9e:e6:df:ca:71:61:d0:9b:b6:d0:89:fa:a8:
                    ae:63:73:3e:f9:11:f1:61:4f:55:2d:aa:46:53:9e:
                    67:a2:46:2b:5e:1a:20:a6:26:b6:bb:75:14:8b:97:
                    1b:a7:ec:64:6c:fe:7e:b7:02:09:7d:2c:c0:5d:17:
                    f9:81:58:bd:72:20:67:e3:e9:ac:59:69:f5:ad:70:
                    d4:92:3b:85:00:cf:06:45:49:73:a9:9c:f7:1d:be:
                    5a:10:55:ee:dd:e4:5f:30:01:cc:d0:af:da:a3:d8:
                    e8:3d:0c:20:41:5b:f7:77:bf:de:97:71:f7:34:2a:
                    c7:c6:9d:f5:5e:1a:94:31:c0:cc:00:5e:68:44:3c:
                    8e:2f:18:6f:90:4b:02:d7:c4:31:0c:dc:de:b8:08:
                    04:6c:3e:dd:03:47:1c:c6:1d:84:fc:df:21:fc:45:
                    9d:bb:48:6b:1d:e7:82:31:06:f9:76:51:b4:00:76:
                    aa:fa:f3:c4:6e:b3:84:39:11:9e:6e:d2:36:1a:06:
                    85:0c:16:00:45:f9:a2:e7:95:98:9c:6c:4f:3c:c4:
                    a9:b4:cd:e4:d9:c8:db:d6:de:be:c0:95:c0:be:24:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9E:4B:D2:C2:AB:3D:10:D0:93:80:02:AF:63:88:24:B8:62:8E:D8
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130312e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:14:b3:82:af:15:af:64:15:09:48:5c:9e:e4:02:5f:63:51:
         1b:94:c5:93:3e:49:6b:4d:2d:5d:6d:95:c0:bb:a4:91:02:29:
         93:7b:93:6c:6c:f9:59:96:dd:bc:85:3d:9c:2d:36:13:f5:82:
         df:af:51:5b:15:9d:df:c0:c0:6d:f0:c2:a1:a4:3d:6e:9e:ee:
         1c:df:28:23:2d:a9:de:52:47:c1:3f:6a:51:7b:e0:98:9d:31:
         56:be:5f:38:d2:9e:f7:33:ac:c4:ed:65:e9:e0:a2:32:51:a6:
         bb:1d:78:0c:33:d1:8a:33:92:e3:37:ac:69:e9:19:c1:4a:05:
         ee:57:36:60:34:13:9e:a4:0a:96:e8:a6:e5:85:62:3e:68:30:
         e5:72:39:92:58:a6:61:8d:b3:95:b4:3c:4b:27:f5:92:e0:0f:
         34:69:eb:fd:c4:0a:29:fb:74:a4:60:85:bd:7e:e4:18:fa:3a:
         35:2f:5f:b2:c6:85:1d:31:94:54:4d:30:08:b9:7a:b0:67:fc:
         25:f4:f7:28:83:67:19:76:96:e1:99:65:b3:d3:c3:f2:53:55:
         e2:74:da:59:00:2c:1f:f8:6e:2e:50:63:4f:1f:54:1e:5b:69:
         03:06:98:91:55:ef:05:95:b3:f7:12:6b:dd:76:59:b9:34:aa:
         46:5b:78:1b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ7jb0W1+S/2cJjwGKNQYHB/Bd/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTAzMTExNzQ4MjZaFw0yNjAzMTAxNzUzMjZaMDMxMTAvBgNV
BAMTKDQ0OUU0QkQyQzJBQjNEMTBEMDkzODAwMkFGNjM4ODI0Qjg2MjhFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXIZO54Xthrchk/h5ZIul0V47
xmeisG4Z/9mcHXwKnubfynFh0Ju20In6qK5jcz75EfFhT1UtqkZTnmeiRiteGiCm
Jra7dRSLlxun7GRs/n63Agl9LMBdF/mBWL1yIGfj6axZafWtcNSSO4UAzwZFSXOp
nPcdvloQVe7d5F8wAczQr9qj2Og9DCBBW/d3v96Xcfc0KsfGnfVeGpQxwMwAXmhE
PI4vGG+QSwLXxDEM3N64CARsPt0DRxzGHYT83yH8RZ27SGsd54IxBvl2UbQAdqr6
88Rus4Q5EZ5u0jYaBoUMFgBF+aLnlZicbE88xKm0zeTZyNvW3r7AlcC+JEnrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURJ5L0sKrPRDQk4ACr2OIJLhijtgwHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr7ZTANBgkqhkiG9w0BAQsFAAOCAQEAPRSz
gq8Vr2QVCUhcnuQCX2NRG5TFkz5Ja00tXW2VwLukkQIpk3uTbGz5WZbdvIU9nC02
E/WC369RWxWd38DAbfDCoaQ9bp7uHN8oIy2p3lJHwT9qUXvgmJ0xVr5fONKe9zOs
xO1l6eCiMlGmux14DDPRijOS4zesaekZwUoF7lc2YDQTnqQKluim5YViPmgw5XI5
klimYY2zlbQ8Syf1kuAPNGnr/cQKKft0pGCFvX7kGPo6NS9fssaFHTGUVE0wCLl6
sGf8JfT3KINnGXaW4Zlls9PD8lNV4nTaWQAsH/huLlBjTx9UHltpAwaYkVXvBZWz
9xJr3XZZuTSqRlt4Gw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:47 2025 by rpki-client