Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33382e302f32342d3234203d3e203238323233.roa
File:                     3138392e3132362e33382e302f32342d3234203d3e203238323233.roa (raw, json)
Hash identifier:          TileQtt8iH/WJwSHcCw7nU+z9rsX0mBFeWYBFFQ230Y=
Subject key identifier:   72:A0:9F:AB:C3:2D:12:49:73:15:11:F8:A9:C9:05:C2:CE:B0:D6:F1
Certificate issuer:       /CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
Certificate serial:       1A09CF76C2881483C62E9F06C4183C10AC12B4DB
Authority key identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33382e302f32342d3234203d3e203238323233.roa
Signing time:             Fri 20 Dec 2024 12:58:38 +0000
ROA not before:           Fri 20 Dec 2024 12:53:38 +0000
ROA not after:            Fri 19 Dec 2025 12:58:38 +0000
asID:                     28223
IP address blocks:        189.126.38.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Feb 2025 11:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:09:cf:76:c2:88:14:83:c6:2e:9f:06:c4:18:3c:10:ac:12:b4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
        Validity
            Not Before: Dec 20 12:53:38 2024 GMT
            Not After : Dec 19 12:58:38 2025 GMT
        Subject: CN=72A09FABC32D1249731511F8A9C905C2CEB0D6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:99:52:df:cf:47:09:9e:61:56:0f:c3:12:
                    33:2e:d3:ca:5b:bf:22:5c:3a:f7:fe:49:ab:f0:d6:
                    74:7a:e2:f3:43:78:ad:04:59:aa:f8:64:bb:97:6a:
                    0f:ae:db:aa:51:a8:45:e2:2f:5a:4b:c7:55:1b:7c:
                    92:a6:97:d3:25:57:b4:9c:a5:16:7b:37:74:19:c8:
                    f2:88:5b:95:e9:b7:91:82:fa:ba:fe:71:44:f0:c1:
                    69:13:72:86:a2:0a:f0:b2:b5:5d:ef:89:61:6f:9e:
                    7d:92:70:fa:5b:44:ef:48:30:96:ba:7b:77:c1:37:
                    0a:04:42:4c:cc:d7:95:8b:a9:14:73:e6:89:95:2f:
                    93:95:ca:43:b6:fd:d2:80:f9:1c:4a:cd:f7:7b:01:
                    ad:f9:83:06:3c:af:f8:4a:03:5f:7b:d9:df:bd:13:
                    83:da:16:e5:e3:a6:db:16:30:c9:0d:ee:c3:ff:89:
                    ae:64:e4:c9:86:fc:f8:dc:dc:3e:9d:99:86:5d:23:
                    46:d0:6b:d9:9e:25:a1:58:ae:e0:30:87:74:17:20:
                    94:23:67:72:54:cd:24:33:57:29:6d:c2:b8:1b:70:
                    30:47:a3:72:16:bf:c6:25:65:2a:ee:40:01:49:2c:
                    51:ae:b3:3c:bf:71:6a:76:57:9b:0a:7f:52:54:87:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A0:9F:AB:C3:2D:12:49:73:15:11:F8:A9:C9:05:C2:CE:B0:D6:F1
            X509v3 Authority Key Identifier:
                keyid:27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3138392e3132362e33382e302f32342d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:39:a3:e5:3a:0b:6e:af:cc:70:80:30:89:b9:d4:37:ed:dd:
         d9:f3:9a:14:73:fb:7e:c3:81:e2:c3:82:91:f0:4a:3e:11:0d:
         e2:b9:b7:59:0b:7f:24:e4:9b:a4:03:b8:6d:64:66:26:7f:9c:
         67:fd:d1:03:07:df:6c:4e:cb:bb:f1:36:ab:b3:87:e8:01:ea:
         3a:19:c6:0f:a6:92:18:e5:9d:5a:d9:6a:42:c5:c1:50:89:89:
         bb:67:12:b7:22:f2:c2:a1:d6:70:05:55:3a:7d:5c:a4:88:5f:
         73:93:12:59:a6:46:db:57:86:2e:9f:15:da:c3:be:ef:49:06:
         47:d1:c4:d2:1b:93:0c:d2:7b:5b:68:04:4b:21:10:e9:ae:4a:
         dc:b8:33:2e:d1:01:de:88:67:7f:32:bf:44:72:ea:78:3b:b5:
         88:f8:37:73:6b:c9:4b:b7:d4:79:d4:0c:2f:b3:c8:1a:3d:0a:
         92:1b:fc:7e:99:36:0d:99:a6:97:49:29:1c:3a:63:21:da:15:
         62:76:15:e6:fc:7d:f5:8f:fd:7c:f4:4c:a6:4d:99:d3:f6:53:
         9b:bb:38:e6:ce:8c:86:1d:72:ed:e0:0e:2a:83:ed:29:48:71:
         91:67:d2:27:ae:f3:fa:c5:97:79:01:83:09:7b:87:82:e8:f0:
         08:4a:e0:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGgnPdsKIFIPGLp8GxBg8EKwStNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdFMUZDMTE0NkI1M0IxNDVFNDMxRTA3QjRFRDU4OUI4
Qzg0NTQyQjAeFw0yNDEyMjAxMjUzMzhaFw0yNTEyMTkxMjU4MzhaMDMxMTAvBgNV
BAMTKDcyQTA5RkFCQzMyRDEyNDk3MzE1MTFGOEE5QzkwNUMyQ0VCMEQ2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IplS389HCZ5hVg/DEjMu08pb
vyJcOvf+Savw1nR64vNDeK0EWar4ZLuXag+u26pRqEXiL1pLx1UbfJKml9MlV7Sc
pRZ7N3QZyPKIW5Xpt5GC+rr+cUTwwWkTcoaiCvCytV3viWFvnn2ScPpbRO9IMJa6
e3fBNwoEQkzM15WLqRRz5omVL5OVykO2/dKA+RxKzfd7Aa35gwY8r/hKA1972d+9
E4PaFuXjptsWMMkN7sP/ia5k5MmG/Pjc3D6dmYZdI0bQa9meJaFYruAwh3QXIJQj
Z3JUzSQzVyltwrgbcDBHo3IWv8YlZSruQAFJLFGuszy/cWp2V5sKf1JUh4V5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcqCfq8MtEklzFRH4qckFws6w1vEwHwYDVR0j
BBgwFoAUJ+H8EUa1OxReQx4HtO1Ym4yEVCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhSaXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4
c0ovMC8yN0UxRkMxMTQ2QjUzQjE0NUU0MzFFMDdCNEVENTg5QjhDODQ1NDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3RTFGQzExNDZCNTNCMTQ1
RTQzMUUwN0I0RUQ1ODlCOEM4NDU0MkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIUmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzAv
MzEzODM5MmUzMTMyMzYyZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvX4mMA0GCSqGSIb3DQEBCwUAA4IBAQBHOaPlOgtu
r8xwgDCJudQ37d3Z85oUc/t+w4Hiw4KR8Eo+EQ3iubdZC38k5JukA7htZGYmf5xn
/dEDB99sTsu78Tars4foAeo6GcYPppIY5Z1a2WpCxcFQiYm7ZxK3IvLCodZwBVU6
fVykiF9zkxJZpkbbV4YunxXaw77vSQZH0cTSG5MM0ntbaARLIRDprkrcuDMu0QHe
iGd/Mr9Ecup4O7WI+Ddza8lLt9R51Awvs8gaPQqSG/x+mTYNmaaXSSkcOmMh2hVi
dhXm/H31j/189EymTZnT9lObuzjmzoyGHXLt4A4qg+0pSHGRZ9InrvP6xZd5AYMJ
e4eC6PAISuBj
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:21 2025 by rpki-client