Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa
File:                     3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (raw, json)
Hash identifier:          fQ+BMCTN78v/HuP0qkInsoD8SgXUJ7Ld/Z0JRVFwnm4=
Subject key identifier:   3E:1A:63:1C:3D:D6:D9:1E:89:A7:FD:F4:BD:05:D7:82:79:C9:1D:0C
Certificate issuer:       /CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
Certificate serial:       476C960BAE1A81077CF6F6D44CD12BC11750BB84
Authority key identifier: BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa
Signing time:             Thu 02 Jul 2026 02:27:30 +0000
ROA not before:           Thu 02 Jul 2026 02:22:30 +0000
ROA not after:            Thu 01 Jul 2027 02:27:30 +0000
asID:                     270860
IP address blocks:        190.124.246.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 06 Jul 2026 14:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6c:96:0b:ae:1a:81:07:7c:f6:f6:d4:4c:d1:2b:c1:17:50:bb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
        Validity
            Not Before: Jul  2 02:22:30 2026 GMT
            Not After : Jul  1 02:27:30 2027 GMT
        Subject: CN=3E1A631C3DD6D91E89A7FDF4BD05D78279C91D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:34:c4:e4:e1:5f:8b:61:e7:1d:6f:02:59:
                    de:0d:65:93:5a:1d:ee:9b:f2:ed:6f:9a:29:42:ca:
                    f2:f4:f2:93:33:21:2a:1a:c8:67:5a:fa:06:93:e7:
                    cd:68:44:ed:2c:87:e6:77:4b:98:40:17:5e:46:ce:
                    26:6b:45:3b:7d:90:d7:b8:07:7f:a8:5f:26:b8:d2:
                    60:57:80:bd:f4:2c:0e:db:d9:65:ad:9b:6b:7c:dc:
                    85:97:94:12:63:f7:64:7e:e0:ba:80:98:d4:e2:cc:
                    a0:c5:22:75:9c:4e:29:21:9f:54:60:ae:70:6a:cb:
                    3d:8d:17:10:f3:d7:7d:b4:6e:cd:75:4d:b7:fb:61:
                    93:bc:f5:c5:16:ba:76:e9:94:d0:26:f2:79:91:d8:
                    ff:31:60:99:91:94:5a:5e:f4:5a:46:6a:0e:7b:6f:
                    a7:35:58:3c:c8:ff:f8:3e:27:9e:3b:5d:94:eb:87:
                    1a:4c:d8:d4:01:05:9a:f5:a3:57:68:1a:cc:60:ce:
                    f0:60:35:1f:d7:ff:42:ee:9b:49:a6:a3:5b:f2:61:
                    81:cd:29:2d:30:29:3a:bd:ed:8a:00:c2:9a:1a:b3:
                    5a:87:df:fb:ef:09:f7:b7:f7:35:a0:00:da:12:ab:
                    d1:0e:36:52:ec:8c:86:92:61:a4:a3:e8:ce:9f:fa:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1A:63:1C:3D:D6:D9:1E:89:A7:FD:F4:BD:05:D7:82:79:C9:1D:0C
            X509v3 Authority Key Identifier:
                keyid:BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:e4:23:25:2f:ad:ed:a3:10:94:72:cc:25:4d:1c:b4:48:
         e3:4a:fb:d6:81:c3:23:73:e5:71:ad:6f:19:24:ab:e6:92:94:
         92:07:f8:b1:37:84:57:ee:dd:ad:48:30:2f:8a:d9:c2:10:0f:
         0f:41:0c:11:ce:96:9a:91:95:32:80:01:53:43:c0:de:b0:b9:
         4b:a8:48:0a:a3:b0:94:ef:b8:df:cd:74:e4:82:90:78:4a:bd:
         a8:43:de:5b:9c:b9:1d:cb:03:2a:3f:87:16:fc:65:a0:a6:c0:
         46:0d:0b:78:31:be:1b:3e:72:8b:e6:a7:f7:72:e7:9a:9a:eb:
         4e:fa:d2:d8:47:b1:d0:33:80:6d:1d:92:63:a9:47:46:37:20:
         f1:b4:3b:6c:3d:3c:f1:08:55:f4:c8:09:b6:26:6e:d2:fb:57:
         28:fe:8e:bf:e9:58:83:52:48:ea:42:3a:98:41:cd:5c:a0:06:
         64:d7:f3:27:a7:96:fe:67:f5:b4:29:84:1b:71:62:3e:4b:23:
         df:2d:28:a4:58:fb:ac:08:be:e0:de:9f:7f:78:61:a7:94:15:
         44:ec:23:b0:2f:2f:70:b4:96:0f:b7:26:78:1d:ef:50:e6:1e:
         57:93:b2:eb:80:0a:5a:3d:9f:89:0b:30:69:29:da:92:8d:7e:
         33:6e:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:12:26 2026 by rpki-client