Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32332d3233203d3e20323632383238.roa
File:                     3138362e3235312e39382e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          UAiO1aPXMp4ehyjFYNCtkq8CDMEc4A/TwL9KYZ1waQI=
Subject key identifier:   67:3A:53:10:C5:E4:2F:FC:41:D5:BF:73:19:79:5F:36:C1:62:5E:54
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       04DFF685AE57AF7395C7CC856601BF7F595DA7E4
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 18:00:25 +0000
ROA not before:           Tue 11 Mar 2025 17:55:25 +0000
ROA not after:            Tue 10 Mar 2026 18:00:25 +0000
asID:                     262828
IP address blocks:        186.251.98.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 11 Mar 2025 20:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:df:f6:85:ae:57:af:73:95:c7:cc:85:66:01:bf:7f:59:5d:a7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:55:25 2025 GMT
            Not After : Mar 10 18:00:25 2026 GMT
        Subject: CN=673A5310C5E42FFC41D5BF7319795F36C1625E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:04:3a:8c:98:a7:6b:6d:d6:a5:67:e6:19:
                    06:fb:ee:e3:55:74:b0:29:ab:21:72:a7:76:61:3a:
                    ac:e0:f2:af:fb:52:55:a8:9b:16:aa:31:37:8e:17:
                    3d:4d:e6:19:e1:8b:11:26:04:51:10:6a:db:37:c5:
                    8f:98:4f:c0:30:39:de:ac:1c:bf:40:5b:00:ef:d8:
                    d1:fd:98:83:20:40:30:a6:0d:90:a9:f6:83:38:4a:
                    b6:94:ad:8b:c8:f7:ec:06:5c:03:6e:88:52:d4:7f:
                    6a:7f:67:81:f6:fc:d4:3d:76:b0:f5:74:8a:4c:f2:
                    88:3a:e4:d6:c2:76:b6:20:f2:f5:8b:48:c4:a1:01:
                    51:9d:cd:58:64:e3:d8:78:44:5d:12:45:49:ce:26:
                    00:0f:38:42:c7:09:43:46:2b:c8:bc:ab:ef:26:eb:
                    f4:29:10:61:7a:3e:51:ab:0f:26:07:9f:9e:cd:38:
                    28:5c:74:28:20:8c:40:77:5e:26:ac:7f:c6:be:92:
                    66:36:9f:65:d9:45:ad:8f:99:5f:cb:48:ee:57:d2:
                    41:d9:f3:99:b1:92:6d:4d:9f:8d:2d:62:76:73:1a:
                    6e:40:db:24:d6:0a:d7:a8:6d:97:41:24:b3:2c:22:
                    f8:ff:94:f9:5e:47:78:20:9e:c7:37:9c:a1:ee:91:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3A:53:10:C5:E4:2F:FC:41:D5:BF:73:19:79:5F:36:C1:62:5E:54
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:5e:43:e6:46:4e:90:3b:b6:c6:8e:a4:18:10:74:39:1a:
         48:57:04:29:c6:54:9c:d2:8a:58:20:e1:90:a9:2e:fe:4f:75:
         63:a2:1e:71:7a:4a:04:08:b8:78:0d:dd:af:7a:b7:97:ff:57:
         a2:1d:20:ef:4e:84:5b:9d:ba:cb:f6:99:1f:b4:8a:85:e0:7f:
         1b:95:dc:29:70:4c:48:eb:21:eb:c0:c6:d1:c9:42:84:d9:eb:
         39:7e:13:b0:49:f9:8a:7f:13:6e:f7:78:19:38:27:8b:97:78:
         8b:41:19:fc:4d:0b:a6:94:00:f2:ba:5c:13:54:c8:2d:40:67:
         0d:6b:81:69:50:59:c5:84:80:e6:a6:d6:80:16:8a:4d:6e:1a:
         17:7d:e7:d0:ba:ce:b7:dd:68:e7:e6:a8:e4:00:26:80:59:d2:
         72:81:45:6a:6a:ea:75:39:04:8c:58:b7:bd:3b:00:36:6b:a8:
         50:55:2d:15:e6:72:c6:06:dc:21:76:64:1c:38:b4:3a:56:00:
         ef:21:7d:80:5e:5c:21:af:50:05:7c:b6:0a:58:92:56:41:45:
         df:66:8f:f8:f9:48:3c:77:6c:39:22:98:b2:6f:68:e7:78:86:
         c5:1a:b9:4b:66:2e:3f:57:b6:90:18:eb:ef:b4:4d:da:09:9d:
         cb:e1:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:34 2025 by rpki-client