Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa
File:                     3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (raw, json)
Hash identifier:          IUhJdCbLnInKKUKbd8TA5/WtcjKqIpFXfVGFr5Hs21Y=
Subject key identifier:   B5:0F:98:0D:69:44:CB:D2:7B:C5:02:8E:A2:F5:C8:B6:29:B0:47:11
Certificate issuer:       /CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
Certificate serial:       578FF32B02F2160F26838F7B8088889762C2C16E
Authority key identifier: BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa
Signing time:             Thu 02 Jul 2026 02:25:45 +0000
ROA not before:           Thu 02 Jul 2026 02:20:45 +0000
ROA not after:            Thu 01 Jul 2027 02:25:45 +0000
asID:                     270860
IP address blocks:        190.124.244.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 06 Jul 2026 14:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:f3:2b:02:f2:16:0f:26:83:8f:7b:80:88:88:97:62:c2:c1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
        Validity
            Not Before: Jul  2 02:20:45 2026 GMT
            Not After : Jul  1 02:25:45 2027 GMT
        Subject: CN=B50F980D6944CBD27BC5028EA2F5C8B629B04711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:d1:62:c8:52:62:b5:4f:a5:9d:8a:5c:f8:
                    4b:8d:42:bd:78:a2:fd:c3:8d:f1:b6:5e:6c:5b:a8:
                    8f:3e:41:ee:dc:73:9b:c5:e2:9e:ea:5c:42:55:c3:
                    05:85:a0:6d:a7:f7:e1:3d:fb:16:ab:75:0a:43:b3:
                    7d:b6:66:f6:9a:f0:08:bc:2f:a8:43:60:33:f7:43:
                    2c:9b:c7:02:72:c4:1b:0b:f1:d1:85:e7:a4:9d:c1:
                    53:2e:bf:d3:c1:74:49:8c:af:8a:88:32:b7:dc:1d:
                    58:c3:06:42:e5:d6:6b:24:9d:e1:9a:ae:36:0a:e2:
                    12:e4:4b:d0:e3:d6:aa:a5:9e:28:14:35:5e:56:95:
                    55:c7:32:1b:f7:40:57:cb:be:60:48:eb:07:37:0d:
                    2f:72:8b:8e:63:46:f5:db:cb:a9:18:11:cb:47:99:
                    29:a2:9d:ee:00:da:ac:25:b9:bd:9f:17:1b:a7:64:
                    52:6f:03:3f:d7:4d:5b:1b:c6:2a:51:18:8c:da:25:
                    cd:84:25:c0:88:32:76:75:30:57:f4:68:ac:05:f8:
                    7a:79:ec:1b:bd:19:9d:e1:5e:ac:f4:79:d9:d9:45:
                    48:d0:f0:08:13:c1:1e:d4:c8:96:db:f7:99:f8:8e:
                    f3:3d:b8:7d:ad:22:7b:b3:c3:3f:ba:75:74:38:bf:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0F:98:0D:69:44:CB:D2:7B:C5:02:8E:A2:F5:C8:B6:29:B0:47:11
            X509v3 Authority Key Identifier:
                keyid:BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:42:16:f0:19:e5:71:3f:26:79:f6:3e:a2:fb:4b:01:61:db:
         d9:89:ea:b7:10:2f:45:e7:4a:ac:f8:e9:bd:27:0f:83:42:1f:
         9c:a0:93:23:a0:55:90:af:93:a8:fd:88:e2:fa:28:ac:5e:cf:
         77:f9:11:99:da:04:61:43:e3:ff:17:6f:44:bb:c2:20:ad:08:
         29:56:e6:3f:ce:8d:12:86:e1:0b:c3:e0:88:3d:7f:fc:1a:b9:
         fb:49:5d:36:af:3d:65:08:f4:4c:11:f2:62:0c:98:18:16:6e:
         fe:e1:b7:6e:fe:1a:48:0c:0a:5f:f1:1f:4f:76:5b:08:0c:68:
         32:2e:a1:d8:dd:2f:25:77:c1:b5:0f:5c:9e:e5:99:1f:ac:13:
         3d:cd:86:74:07:91:84:ee:22:9e:2c:fb:5f:60:d9:a9:99:ce:
         e5:11:fd:25:49:a6:c1:78:03:ee:26:2c:ac:35:e5:dd:b2:f0:
         74:01:9b:16:d8:58:22:ba:cb:08:ab:6e:73:01:52:ed:e9:38:
         b7:3d:03:47:4a:ae:df:4e:68:a4:7c:ca:df:7f:3b:5f:ac:9e:
         7d:98:0f:9a:83:19:50:22:99:14:27:c0:97:b3:11:0f:ce:57:
         a8:36:d7:82:79:db:b1:a2:cc:0f:ee:df:1f:6e:1f:07:54:38:
         03:3e:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:49:33 2026 by rpki-client