Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          rIv4bH7xrHMLYR3SH7QTJjZLWqXhRKPsaSz6Kmegaw0=
Subject key identifier:   BA:E1:FD:3B:F6:01:BC:C7:AC:93:EB:3C:84:E8:EE:50:69:1A:38:6F
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       6F0E463AAE8D27816246CA81A913BDCE52FA8554
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:53:33 +0000
ROA not before:           Tue 11 Mar 2025 17:48:33 +0000
ROA not after:            Tue 10 Mar 2026 17:53:33 +0000
asID:                     262828
IP address blocks:        186.251.102.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 13:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0e:46:3a:ae:8d:27:81:62:46:ca:81:a9:13:bd:ce:52:fa:85:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:48:33 2025 GMT
            Not After : Mar 10 17:53:33 2026 GMT
        Subject: CN=BAE1FD3BF601BCC7AC93EB3C84E8EE50691A386F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:30:9c:8e:b0:bc:38:fb:a2:5b:f8:19:8a:
                    e5:c9:7a:8f:28:d9:83:80:4a:08:f0:e3:a3:36:6a:
                    20:0d:1d:7c:57:bd:e8:ba:0d:8f:18:5c:25:8c:9d:
                    35:4a:13:8d:9d:55:e5:d7:29:d7:d5:b4:17:02:21:
                    94:28:b6:28:55:d2:2c:9a:36:65:69:fc:df:be:55:
                    9a:18:c9:da:c9:f5:f7:22:eb:cc:2d:02:1d:8b:53:
                    32:1c:d2:c2:0f:b5:7f:04:f0:80:34:03:b9:df:52:
                    93:e9:34:61:3f:eb:b3:ed:18:a8:a4:3b:b8:74:99:
                    8f:7e:b1:67:e1:dc:59:2e:cd:9b:0a:77:a2:a0:98:
                    1e:e3:41:57:24:6b:7e:24:9c:08:f9:4c:44:7d:29:
                    27:e0:17:d8:3e:58:94:5c:fe:c5:9d:de:43:f8:74:
                    c9:7e:47:5d:d0:6c:df:4e:b6:88:50:ab:f8:1f:5a:
                    8c:06:ce:d2:0f:bd:df:89:3f:4d:5c:2b:c3:4a:7f:
                    14:ca:d3:5c:86:30:75:b1:f4:04:42:dd:f7:ba:89:
                    8d:3a:46:15:78:76:91:8b:0f:df:30:ce:4b:b5:3e:
                    2e:01:e3:57:e8:5d:4d:da:3f:c7:a3:9f:ba:e9:29:
                    a5:9c:6d:a0:b9:53:24:dc:8b:3f:0a:da:fd:16:67:
                    bb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E1:FD:3B:F6:01:BC:C7:AC:93:EB:3C:84:E8:EE:50:69:1A:38:6F
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:04:e8:b8:fe:9d:df:8c:92:c7:b7:e3:f2:fe:d4:ed:76:d1:
         87:03:15:2c:9f:e2:71:39:7a:7b:0b:5f:4d:d4:f6:cb:7f:f7:
         51:8b:1b:6c:ab:0c:e8:77:3b:43:34:67:28:d3:51:b2:b5:db:
         05:62:7e:34:62:1c:ac:e6:d6:4a:fb:27:04:4a:e0:14:c6:72:
         e2:6e:bd:81:c7:6f:58:8f:5d:97:ec:7b:ba:72:1e:25:05:a7:
         da:d3:4d:99:58:bb:b7:d3:7f:aa:e6:a1:a7:b1:a7:56:72:0f:
         0e:89:84:11:5a:dd:56:f4:f4:8b:a7:8f:c4:69:71:23:39:fa:
         7b:87:e2:8d:81:34:ec:12:ce:a3:20:e1:66:a4:df:35:d3:a4:
         00:45:60:6d:4b:3a:fd:30:87:ee:e0:29:08:fe:0b:45:08:ec:
         10:40:d8:ba:dd:17:3b:01:be:9f:fe:2e:c4:7d:ec:25:60:45:
         30:8f:3d:66:fd:d5:76:cb:43:e1:c1:a3:1e:f0:23:19:ab:3b:
         79:2c:73:14:3d:14:d3:18:6b:28:2d:33:1f:72:f6:ee:77:cf:
         ae:84:e0:e3:51:33:4d:08:45:ef:b9:10:cb:3b:6d:88:41:33:
         28:27:16:63:d2:eb:74:a2:09:cb:92:68:3a:b5:b2:67:39:8f:
         3b:01:9a:98
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbw5GOq6NJ4FiRsqBqRO9zlL6hVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTAzMTExNzQ4MzNaFw0yNjAzMTAxNzUzMzNaMDMxMTAvBgNV
BAMTKEJBRTFGRDNCRjYwMUJDQzdBQzkzRUIzQzg0RThFRTUwNjkxQTM4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqzCcjrC8OPuiW/gZiuXJeo8o
2YOASgjw46M2aiANHXxXvei6DY8YXCWMnTVKE42dVeXXKdfVtBcCIZQotihV0iya
NmVp/N++VZoYydrJ9fci68wtAh2LUzIc0sIPtX8E8IA0A7nfUpPpNGE/67PtGKik
O7h0mY9+sWfh3FkuzZsKd6KgmB7jQVcka34knAj5TER9KSfgF9g+WJRc/sWd3kP4
dMl+R13QbN9OtohQq/gfWowGztIPvd+JP01cK8NKfxTK01yGMHWx9ARC3fe6iY06
RhV4dpGLD98wzku1Pi4B41foXU3aP8ejn7rpKaWcbaC5UyTciz8K2v0WZ7txAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuuH9O/YBvMesk+s8hOjuUGkaOG8wHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr7ZjANBgkqhkiG9w0BAQsFAAOCAQEAtQTo
uP6d34ySx7fj8v7U7XbRhwMVLJ/icTl6ewtfTdT2y3/3UYsbbKsM6Hc7QzRnKNNR
srXbBWJ+NGIcrObWSvsnBErgFMZy4m69gcdvWI9dl+x7unIeJQWn2tNNmVi7t9N/
quahp7GnVnIPDomEEVrdVvT0i6ePxGlxIzn6e4fijYE07BLOoyDhZqTfNdOkAEVg
bUs6/TCH7uApCP4LRQjsEEDYut0XOwG+n/4uxH3sJWBFMI89Zv3VdstD4cGjHvAj
Gas7eSxzFD0U0xhrKC0zH3L27nfProTg41EzTQhF77kQyzttiEEzKCcWY9LrdKIJ
y5JoOrWyZzmPOwGamA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:42 2025 by rpki-client