Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa
File:                     3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (raw, json)
Hash identifier:          /s/VrWL51zPk1IF7kCjby0GLRiiXKgXpBBcb3cF2tYk=
Subject key identifier:   15:B4:BE:C1:8F:DE:9F:38:9D:01:A6:D1:D7:B7:E3:5E:0D:18:96:EF
Certificate issuer:       /CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
Certificate serial:       5475EA3BD0D1171F062A2D38C712032B14B3CF79
Authority key identifier: BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa
Signing time:             Thu 02 Jul 2026 02:24:48 +0000
ROA not before:           Thu 02 Jul 2026 02:19:48 +0000
ROA not after:            Thu 01 Jul 2027 02:24:48 +0000
asID:                     270860
IP address blocks:        190.124.244.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 06 Jul 2026 14:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:75:ea:3b:d0:d1:17:1f:06:2a:2d:38:c7:12:03:2b:14:b3:cf:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
        Validity
            Not Before: Jul  2 02:19:48 2026 GMT
            Not After : Jul  1 02:24:48 2027 GMT
        Subject: CN=15B4BEC18FDE9F389D01A6D1D7B7E35E0D1896EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:b0:88:5b:f5:35:99:c4:0c:1c:79:b4:55:
                    98:3d:8d:44:ae:21:25:ea:8f:27:dc:e9:33:ee:ba:
                    e4:57:e0:96:0a:0a:49:cc:d4:59:a2:bb:03:7f:d3:
                    cf:02:0d:b6:e4:1b:ed:2b:80:f1:7d:d9:18:b8:06:
                    80:1d:f8:34:0e:1a:fe:af:01:ca:f5:ff:d3:ca:f9:
                    db:87:ec:78:c5:4d:a5:a2:81:95:f7:78:80:aa:5a:
                    68:4e:6e:1e:2c:87:c7:8b:c0:a7:32:32:37:af:03:
                    37:5e:cd:e4:3b:af:7e:0a:61:63:4e:65:6c:70:7f:
                    92:3d:d1:ce:55:12:18:91:06:a7:21:94:22:8d:8e:
                    48:36:b0:f2:80:59:c4:a2:f3:be:43:51:80:c8:6f:
                    4b:5f:96:78:81:75:fe:c8:48:42:dc:df:1c:94:79:
                    ef:74:8d:63:0b:1b:7c:a7:ae:45:b7:0f:1d:d6:63:
                    24:e1:3e:b6:f7:b4:50:2d:01:b4:a2:49:d1:1f:fd:
                    31:11:23:74:9f:ac:2e:c0:de:0b:38:a5:8a:41:e2:
                    c5:0b:b9:77:1f:05:8c:08:2e:29:e1:a5:0b:da:66:
                    b2:f9:2b:f9:00:d3:b5:73:6f:8e:c3:a1:8d:d5:cf:
                    70:29:01:bd:00:f3:4f:a1:97:d4:64:92:4f:49:27:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B4:BE:C1:8F:DE:9F:38:9D:01:A6:D1:D7:B7:E3:5E:0D:18:96:EF
            X509v3 Authority Key Identifier:
                keyid:BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:c5:e6:43:70:b1:7f:79:2a:c9:69:15:a5:ec:af:67:2a:d6:
         0e:ae:e6:b3:b6:a7:28:9c:71:e8:62:7e:19:87:2b:f1:2e:36:
         5f:9e:6f:2b:c3:8b:88:80:7f:1d:07:44:27:7f:c6:5f:62:bf:
         02:89:3f:e6:81:8e:3a:0c:1e:c8:6b:d1:24:a8:52:80:7d:34:
         05:78:05:c4:d5:c3:eb:34:0f:8e:41:24:f8:ad:ac:55:07:a5:
         ea:34:80:7f:b9:26:5e:0d:06:bc:1b:ff:6d:97:65:96:33:6b:
         58:d3:51:e3:46:00:ee:e4:b2:8d:94:17:3f:8c:84:45:d1:f6:
         a7:d9:ba:44:a9:ad:04:33:5d:74:19:12:67:43:94:e5:b1:b2:
         3d:55:40:a9:cc:2f:ac:3d:05:fc:2a:a1:8b:d0:80:aa:be:4b:
         96:43:3c:8f:09:a6:bf:b6:7f:60:4c:7d:87:6f:c8:e0:24:fc:
         82:5b:5e:04:9d:79:bd:69:d1:d3:39:e6:f6:03:6e:16:4d:0e:
         37:54:e3:f6:b8:f5:0e:89:62:d1:02:0a:01:8c:40:cd:0d:b7:
         5d:ca:17:b6:e3:61:ee:b5:5c:65:e5:0e:0f:bd:5c:de:ef:73:
         b9:53:13:54:b0:a6:7e:09:22:cf:d3:7d:84:b0:c4:ad:78:27:
         75:08:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:07:55 2026 by rpki-client