Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa
File:                     3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa (raw, json)
Hash identifier:          e2t7429xW2a4pofaANGK+qEl4RJq9hYzH6OXfCQ1fsg=
Subject key identifier:   E8:3E:31:59:58:DD:89:3A:08:32:2F:E5:49:E3:31:80:0B:5C:D0:8C
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       10BB75F857C4C790FAF90DC5A2DF080AA1E28C1E
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:53:23 +0000
ROA not before:           Tue 11 Mar 2025 17:48:23 +0000
ROA not after:            Tue 10 Mar 2026 17:53:23 +0000
asID:                     262828
IP address blocks:        186.251.96.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Wed 12 Mar 2025 13:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bb:75:f8:57:c4:c7:90:fa:f9:0d:c5:a2:df:08:0a:a1:e2:8c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:48:23 2025 GMT
            Not After : Mar 10 17:53:23 2026 GMT
        Subject: CN=E83E315958DD893A08322FE549E331800B5CD08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:28:2a:e7:de:97:37:43:be:90:8b:74:98:
                    bd:7b:02:23:73:75:2a:e2:b6:ff:c0:d0:86:03:b7:
                    0d:b6:f5:68:07:08:e3:44:0a:c6:7f:dd:2c:0d:1f:
                    c3:5a:e8:91:da:89:30:9c:be:af:90:9e:92:b4:c0:
                    e2:45:5b:44:45:5d:06:d9:e2:45:51:cb:60:ff:65:
                    df:ce:b1:34:13:03:db:5d:66:d9:3a:cb:bc:87:ff:
                    f7:76:99:22:d1:9a:f3:6d:62:c5:c9:3f:3a:97:eb:
                    ff:30:54:02:a1:07:e0:27:11:81:e1:c8:54:d1:fb:
                    25:26:45:92:c9:08:be:c6:f9:bb:7a:d2:0e:3e:05:
                    a7:be:7e:d5:53:06:fe:76:a4:cb:a6:b9:61:15:1a:
                    2a:9c:7e:57:bb:ae:41:f9:76:8c:bd:9e:59:ba:04:
                    84:ca:a8:1f:7c:f4:a3:4c:b1:f7:53:44:52:16:29:
                    a6:48:16:d1:ff:68:78:ed:1a:19:14:01:d1:e1:73:
                    96:f1:6a:a8:4b:7c:00:a5:52:d2:51:62:8a:e3:c9:
                    4d:86:e2:49:42:58:57:af:27:22:3e:5f:62:cc:77:
                    ef:3c:2c:1e:f1:b0:68:02:7a:5b:f3:82:08:e3:c4:
                    44:3f:34:81:87:0b:76:47:8a:a9:92:7c:dc:e0:ba:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:31:59:58:DD:89:3A:08:32:2F:E5:49:E3:31:80:0B:5C:D0:8C
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:11:68:51:fc:7d:fe:e1:33:b4:69:a1:49:91:81:db:e1:
         b3:09:57:88:44:04:29:71:70:da:45:a4:5c:37:f0:30:05:4d:
         91:36:53:18:bb:06:73:99:15:79:54:66:e2:ab:26:b6:c3:df:
         da:b4:3d:1f:0f:7f:7d:4d:a2:43:31:02:29:08:99:67:d9:4c:
         d8:a8:01:19:47:0a:80:6d:98:b2:97:43:e6:12:ee:31:27:26:
         ae:98:45:28:ac:7d:c4:be:07:d3:0f:9a:b7:31:c6:18:9b:9d:
         21:18:a3:8a:71:35:f0:ec:0e:dd:d4:28:09:b5:67:5d:65:10:
         4d:54:15:d0:ab:06:d4:ef:95:9c:8f:f4:ee:e4:2b:93:f6:b1:
         11:97:c5:76:49:2f:ec:48:f4:6e:6c:ab:80:83:8a:ea:f9:c0:
         74:c2:b4:fa:37:80:c0:da:2a:a7:de:59:da:08:8e:04:f0:9a:
         31:bd:ee:db:93:63:5c:72:90:fe:8f:a2:8b:3f:ce:b5:7b:3c:
         d1:12:a8:d7:33:13:69:e0:a9:be:aa:4f:a8:02:74:36:65:c0:
         d1:1e:ac:69:6e:e9:06:c3:fd:a0:7b:a2:fd:a1:d7:46:b6:10:
         d7:20:69:8f:35:aa:e6:f8:7f:1e:22:f6:e2:4e:83:dc:b1:28:
         65:45:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:35:06 2025 by rpki-client