Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          CRmPOuxgoQ6YQpudRulj1iV1GO2jLZTcYmOMdHnNd7U=
Subject key identifier:   7C:B2:21:4B:D5:67:B7:B6:6A:B7:FA:A2:FC:4D:5E:15:6B:FE:0A:C6
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       48A5C65CBB5A182770F0B7FB520D88B727C27496
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:53:31 +0000
ROA not before:           Tue 11 Mar 2025 17:48:31 +0000
ROA not after:            Tue 10 Mar 2026 17:53:31 +0000
asID:                     262828
IP address blocks:        186.251.103.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 13:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:c6:5c:bb:5a:18:27:70:f0:b7:fb:52:0d:88:b7:27:c2:74:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:48:31 2025 GMT
            Not After : Mar 10 17:53:31 2026 GMT
        Subject: CN=7CB2214BD567B7B66AB7FAA2FC4D5E156BFE0AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:ec:7f:e8:6d:42:77:ee:8a:2b:7a:01:fa:
                    b3:35:64:74:c3:dc:83:66:1f:5f:8c:18:da:c1:9c:
                    97:ef:3d:59:77:14:a6:b1:bb:e4:b3:e1:40:f6:3d:
                    7a:5b:fe:c4:1e:90:b3:5a:c8:94:3a:23:39:ac:b2:
                    c6:45:f0:23:49:55:ba:1d:d3:6c:a9:00:81:9d:d4:
                    a5:c7:12:8f:fc:d3:04:70:67:61:8c:c5:75:9c:16:
                    08:c3:ce:f5:7c:d9:00:f5:47:0a:4b:c5:af:82:f6:
                    26:7d:23:29:48:f3:e4:ee:d8:cb:2b:29:c9:a1:a9:
                    d8:f3:d6:21:71:77:84:17:9a:fb:1b:a3:22:13:52:
                    cf:28:35:fb:48:ce:af:cc:c8:87:10:ac:bb:16:f7:
                    fa:7b:9b:5d:a9:f4:23:c2:02:19:c7:ef:87:fe:ac:
                    e3:d5:2a:b5:3e:e2:ac:8d:c7:99:d6:f6:c3:da:6b:
                    bf:8c:80:81:c5:2e:40:54:9b:98:8e:99:7e:25:42:
                    c2:52:4a:6e:bd:e1:c9:26:c0:30:46:85:23:d2:53:
                    93:c1:82:0e:28:31:fa:69:38:0e:0e:0a:4b:e4:66:
                    ed:95:6e:34:a7:80:7a:07:eb:ef:4b:40:eb:e4:e3:
                    0e:c2:7a:2c:bf:ab:1a:0b:0c:95:b1:fd:2e:cd:fc:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:21:4B:D5:67:B7:B6:6A:B7:FA:A2:FC:4D:5E:15:6B:FE:0A:C6
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:15:d4:a6:c4:5a:04:8c:fa:83:a3:ff:f5:dd:a2:09:80:
         4c:88:12:61:85:aa:12:11:83:71:fd:1d:57:bf:57:f8:16:9f:
         32:30:fc:1c:1c:56:0a:7c:ce:aa:35:74:23:80:93:15:f7:14:
         b5:ca:87:e0:01:9c:86:51:02:7e:5f:15:11:fa:1a:c2:85:db:
         8e:ed:67:a4:1f:04:9f:b6:5d:20:6d:65:9c:e3:33:83:d8:71:
         18:29:cb:6b:68:2c:1d:cd:30:0d:23:77:3a:11:9a:df:1e:e4:
         21:46:d7:8b:92:64:5b:68:f4:7e:38:8b:9d:79:cb:ac:1e:80:
         aa:e9:8b:22:3e:df:89:d2:01:be:1c:e5:98:ae:6f:e6:7f:1d:
         5a:4e:15:a8:50:95:ae:ab:0e:41:eb:e4:ca:2a:3b:52:f5:91:
         26:af:25:4a:88:f3:fa:92:08:25:f7:3e:10:6f:6a:f4:84:c4:
         09:01:68:93:51:16:41:96:8a:c6:81:13:6b:a5:aa:da:bf:43:
         7d:38:da:d2:b9:36:ed:18:f4:a7:e6:13:ee:a1:1a:b8:2b:23:
         78:17:86:c9:df:2b:a9:5f:3a:2f:37:aa:49:b0:44:70:af:59:
         4d:cd:2d:6b:c7:36:2b:43:34:71:82:c7:bc:f3:f2:06:6e:09:
         f3:ca:49:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSKXGXLtaGCdw8Lf7Ug2ItyfCdJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDQTI3NzE3RTgyQzQ2MThCOEM5Qjg4MDkyMDlGRDQ4
RTI2ODQ3QjAeFw0yNTAzMTExNzQ4MzFaFw0yNjAzMTAxNzUzMzFaMDMxMTAvBgNV
BAMTKDdDQjIyMTRCRDU2N0I3QjY2QUI3RkFBMkZDNEQ1RTE1NkJGRTBBQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCViex/6G1Cd+6KK3oB+rM1ZHTD
3INmH1+MGNrBnJfvPVl3FKaxu+Sz4UD2PXpb/sQekLNayJQ6IzmsssZF8CNJVbod
02ypAIGd1KXHEo/80wRwZ2GMxXWcFgjDzvV82QD1RwpLxa+C9iZ9IylI8+Tu2Msr
Kcmhqdjz1iFxd4QXmvsboyITUs8oNftIzq/MyIcQrLsW9/p7m12p9CPCAhnH74f+
rOPVKrU+4qyNx5nW9sPaa7+MgIHFLkBUm5iOmX4lQsJSSm694ckmwDBGhSPSU5PB
gg4oMfppOA4OCkvkZu2VbjSngHoH6+9LQOvk4w7Ceiy/qxoLDJWx/S7N/AcvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUfLIhS9Vnt7Zqt/qi/E1eFWv+CsYwHwYDVR0j
BBgwFoAUKsoncX6CxGGLjJuICSCf1I4mhHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC8yQUNBMjc3MTdFODJDNDYxOEI4QzlCODgwOTIwOUZENDhFMjY4NDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQ0EyNzcxN0U4MkM0NjE4
QjhDOUI4ODA5MjA5RkQ0OEUyNjg0N0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr7ZzANBgkqhkiG9w0BAQsFAAOCAQEABM0V
1KbEWgSM+oOj//XdogmATIgSYYWqEhGDcf0dV79X+BafMjD8HBxWCnzOqjV0I4CT
FfcUtcqH4AGchlECfl8VEfoawoXbju1npB8En7ZdIG1lnOMzg9hxGCnLa2gsHc0w
DSN3OhGa3x7kIUbXi5JkW2j0fjiLnXnLrB6AqumLIj7fidIBvhzlmK5v5n8dWk4V
qFCVrqsOQevkyio7UvWRJq8lSojz+pIIJfc+EG9q9ITECQFok1EWQZaKxoETa6Wq
2r9DfTja0rk27Rj0p+YT7qEauCsjeBeGyd8rqV86LzeqSbBEcK9ZTc0ta8c2K0M0
cYLHvPPyBm4J88pJCw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:42 2025 by rpki-client