Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32322d3232203d3e20323632383238.roa
File:                     3138362e3235312e39362e302f32322d3232203d3e20323632383238.roa (raw, json)
Hash identifier:          nfebUVFA/yvjO7qr42eFmAw60pgRq2XlTDumfrhYXvg=
Subject key identifier:   F7:E1:C5:F5:5C:E3:87:86:C5:33:64:5C:22:26:90:AA:9A:56:99:B2
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       56C1FA9A37102545B41CEE6A4C3535E538BAAE7B
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32322d3232203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:59:48 +0000
ROA not before:           Tue 11 Mar 2025 17:54:48 +0000
ROA not after:            Tue 10 Mar 2026 17:59:48 +0000
asID:                     262828
IP address blocks:        186.251.96.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 11 Mar 2025 20:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c1:fa:9a:37:10:25:45:b4:1c:ee:6a:4c:35:35:e5:38:ba:ae:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:54:48 2025 GMT
            Not After : Mar 10 17:59:48 2026 GMT
        Subject: CN=F7E1C5F55CE38786C533645C222690AA9A5699B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2d:b3:c4:21:bf:26:4e:7e:69:f4:5a:7e:cc:
                    fb:f8:c7:c6:31:c0:e4:71:ce:38:cf:5c:c9:f7:7f:
                    b8:f1:93:a7:05:ce:bb:6b:47:d4:3c:2c:32:62:55:
                    c6:a0:c7:07:da:a7:88:9a:04:32:5e:64:a0:db:bf:
                    16:87:e3:ee:b0:86:98:db:90:41:c2:37:cd:b5:f5:
                    46:ab:ac:01:ec:d6:c1:7a:c5:7d:29:a1:34:50:b4:
                    d9:b3:80:76:f7:82:8f:f9:a2:40:00:32:98:b3:8f:
                    58:ad:b5:ea:81:5f:d6:e1:b5:d9:0c:1d:07:0b:fd:
                    24:57:ea:a8:a1:84:d4:8e:7c:09:4b:7a:8c:30:57:
                    51:47:53:98:f0:07:7e:0e:d4:ab:ab:27:06:34:44:
                    17:76:34:e4:44:95:bf:37:5d:d5:12:de:de:79:bd:
                    eb:e1:97:6b:55:94:e6:1a:30:c8:0d:98:e7:86:cc:
                    d6:17:29:92:a7:f9:d1:14:cf:8d:13:24:f1:46:e2:
                    e1:39:6e:25:10:e1:85:19:96:76:dd:2d:2e:b9:92:
                    ef:d7:53:96:04:62:d4:b3:28:bf:64:28:ec:c1:56:
                    0c:6b:17:38:59:1d:ab:51:a9:3f:02:6a:72:41:02:
                    9f:6f:d2:a3:db:8a:6c:33:8a:ec:84:2e:4d:e9:ea:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E1:C5:F5:5C:E3:87:86:C5:33:64:5C:22:26:90:AA:9A:56:99:B2
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32322d3232203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:64:32:3e:0f:ed:b7:bb:c0:5d:ab:75:83:64:3b:93:35:93:
         5a:e5:2d:a7:a0:ab:9a:32:e8:33:cc:8d:4f:ed:98:33:ae:6e:
         4a:32:a5:a1:37:3a:21:86:76:91:1e:3d:17:7f:d0:80:6d:f2:
         d1:ca:bd:57:2e:f5:96:9c:02:0b:ab:3c:55:63:24:23:ef:30:
         cc:64:13:90:21:f4:77:a5:5d:87:3a:95:d6:76:a0:c5:c4:3b:
         1f:32:e3:fd:5d:ee:71:7b:01:96:d6:94:d7:8b:13:78:7e:15:
         c4:9d:8c:78:a8:ba:bc:58:c1:d7:90:43:6b:91:64:5a:94:61:
         a5:52:4f:a3:77:3b:e8:58:6e:9a:8e:22:2f:b5:91:03:32:dc:
         84:f8:b7:b1:be:c7:3c:75:cf:1a:96:d1:c1:30:a4:6d:40:d2:
         5c:ac:66:e3:6b:33:ce:d3:f6:71:26:7f:41:10:d3:4b:2b:46:
         2c:98:61:a8:ef:af:43:87:72:80:b1:73:46:b3:7c:f5:68:53:
         59:83:42:eb:18:f9:f5:0c:4b:e2:db:7f:8e:f6:04:ec:96:a2:
         90:d8:ce:ca:1b:91:0f:1d:7b:ec:f2:30:0a:cc:e0:c0:f9:11:
         3b:f5:d0:5c:bf:bd:50:af:f0:d9:61:69:b2:5d:15:96:95:a1:
         dd:95:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:53:38 2025 by rpki-client