Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32332d3233203d3e20323632383238.roa
File:                     3138362e3235312e3130322e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          nC+WVUybx/pgPi+OqvCSeU+gom439BRnRwMbMyNL2hc=
Subject key identifier:   FA:46:3C:E5:06:D7:A2:29:17:D4:85:CE:69:39:58:73:3D:85:99:EB
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       071531CC7844F4491FC60720E844F1016B6EB527
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 18:01:14 +0000
ROA not before:           Tue 11 Mar 2025 17:56:14 +0000
ROA not after:            Tue 10 Mar 2026 18:01:14 +0000
asID:                     262828
IP address blocks:        186.251.102.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 02:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:15:31:cc:78:44:f4:49:1f:c6:07:20:e8:44:f1:01:6b:6e:b5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:56:14 2025 GMT
            Not After : Mar 10 18:01:14 2026 GMT
        Subject: CN=FA463CE506D7A22917D485CE693958733D8599EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:b5:81:56:46:b5:54:96:78:18:d3:fb:32:
                    75:1e:81:9a:c8:d4:1a:27:2b:fb:ea:b8:e8:e9:af:
                    0e:ba:9e:91:32:bd:cd:dd:b2:92:8d:8b:39:6d:c2:
                    34:dc:35:1a:f2:1a:b6:e3:9e:f1:a9:af:e0:a2:91:
                    ae:67:12:08:43:5a:29:82:49:43:53:73:ee:cd:01:
                    4b:d3:29:9b:d1:52:3e:41:36:d7:dd:8e:c3:e9:b9:
                    26:01:f2:76:e9:19:53:81:1a:83:1f:84:f4:43:27:
                    42:17:2d:70:b0:6f:0a:8f:c8:74:07:7c:d1:4c:50:
                    00:72:4f:63:38:1e:31:82:73:4c:07:7c:b2:fa:26:
                    d4:04:03:43:18:3e:70:47:df:7b:ae:7e:4e:01:e3:
                    56:ad:3d:20:98:72:6a:b8:e3:6c:0c:8a:3e:04:32:
                    c8:db:5a:28:d7:2e:bf:86:16:b5:13:4f:ec:f3:8c:
                    78:20:51:75:49:b3:c5:52:13:1d:ca:24:be:bd:f6:
                    b8:72:6a:2d:17:33:27:4d:97:05:5e:10:30:ce:4b:
                    e1:d1:9f:4f:ec:8b:0f:80:2e:90:8e:5d:15:df:07:
                    5c:dd:c1:74:f5:16:c8:0d:cc:f7:24:a1:a3:8f:67:
                    4f:3d:69:2d:a3:53:4f:ec:41:6b:5e:d4:fc:c4:7b:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:46:3C:E5:06:D7:A2:29:17:D4:85:CE:69:39:58:73:3D:85:99:EB
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:01:f9:62:c4:f8:f2:ae:ec:bb:cf:50:29:ef:99:c8:24:65:
         d8:11:7f:b5:bf:64:f8:39:36:09:ec:3f:70:83:aa:4f:ba:78:
         7a:00:ae:55:78:04:10:02:f2:cf:71:69:d6:63:f9:55:b4:b8:
         da:1e:d4:f7:91:96:1f:a4:a8:67:38:e0:f7:27:53:a1:db:30:
         9d:03:58:8b:bd:f8:5d:17:0a:12:b5:96:83:57:cb:db:b3:bf:
         17:94:37:89:ff:2c:55:5d:27:38:6b:4b:4f:71:a6:2d:93:df:
         55:fd:b2:53:cd:83:5f:2b:ed:fc:12:dc:ed:01:ec:92:b0:f5:
         01:90:5e:d1:45:37:85:98:f2:01:25:de:a9:67:c9:f6:79:84:
         68:24:76:86:5f:91:ba:ba:8b:7b:de:be:68:be:fc:d7:18:40:
         a4:29:e2:44:00:96:af:f6:85:3e:37:20:13:41:a6:0d:75:3b:
         f5:23:ea:4a:7f:69:ea:68:f3:0a:72:66:c2:c4:8a:33:68:5a:
         65:1a:c4:c5:24:01:92:24:8a:9a:79:98:b7:d3:46:0d:b2:28:
         e6:26:8f:6c:3f:fb:f5:86:2c:9b:b7:09:d7:59:d8:aa:60:2e:
         20:2e:67:88:bb:13:51:cd:09:80:73:36:af:5c:20:33:44:50:
         ec:ff:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:39:55 2025 by rpki-client