Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3336203d3e203631363138.roa
File:                     323830343a333736633a3a2f33322d3336203d3e203631363138.roa (raw, json)
Hash identifier:          3UylojO8+w24V1ym5A1hesa98AiE2ZJhPoHGxalaqL8=
Subject key identifier:   42:35:03:D9:3A:B6:CE:F5:42:2F:B2:81:78:32:A6:DD:94:18:A8:36
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       63268F962200B619CFEAA29E5EAC3A0E9A3F2D03
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3336203d3e203631363138.roa
Signing time:             Sat 02 May 2026 13:02:07 +0000
ROA not before:           Sat 02 May 2026 12:57:07 +0000
ROA not after:            Sat 01 May 2027 13:02:07 +0000
asID:                     61618
IP address blocks:        2804:376c::/32 maxlen: 36
Validation:               Failed, certificate revoked on Sun 03 May 2026 18:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:26:8f:96:22:00:b6:19:cf:ea:a2:9e:5e:ac:3a:0e:9a:3f:2d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: May  2 12:57:07 2026 GMT
            Not After : May  1 13:02:07 2027 GMT
        Subject: CN=423503D93AB6CEF5422FB2817832A6DD9418A836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:f4:fc:1b:4c:19:d3:20:7d:2e:c4:4f:dd:
                    c8:69:af:de:fc:6b:78:f9:fa:fa:13:34:62:44:90:
                    d2:f2:f2:57:ce:ba:a5:4c:9b:3e:cc:de:95:be:6b:
                    d7:a4:7a:0c:bd:36:59:20:40:0a:47:71:da:10:f1:
                    63:98:1b:03:2a:24:09:4a:d8:ea:a4:f5:24:42:27:
                    e4:e9:1e:d4:66:d6:37:cf:4f:b8:9a:69:2a:12:d6:
                    64:f9:c4:db:d8:db:5c:07:d4:2b:21:40:12:71:94:
                    39:25:3a:7b:f1:0f:e5:9f:ec:56:3a:19:c8:1e:1a:
                    8b:ad:56:81:bc:d3:b2:93:1f:2a:57:40:77:18:bf:
                    90:d6:66:04:3e:7e:77:77:9f:30:e2:9b:53:1e:e6:
                    62:ed:cb:d4:00:49:a5:90:a3:db:68:fa:d1:05:70:
                    30:d6:46:ef:66:13:f5:b5:32:02:ab:ea:b9:99:a8:
                    23:d9:91:b9:68:90:e0:88:ea:b0:2a:bb:c8:bc:b4:
                    61:31:52:02:de:31:b9:02:03:df:b4:01:97:04:e2:
                    10:be:d8:76:9e:24:91:8b:b0:bf:3f:a8:ab:be:b4:
                    7d:48:bb:e9:29:d9:fe:03:29:44:22:ab:ac:71:96:
                    07:74:ab:38:e4:d8:80:00:6b:ad:80:96:e6:11:18:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:35:03:D9:3A:B6:CE:F5:42:2F:B2:81:78:32:A6:DD:94:18:A8:36
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33322d3336203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:3f:f9:2f:4a:63:15:bd:65:bc:28:4a:56:59:f9:4d:a1:
         a0:6b:f0:b5:03:de:68:19:24:b9:ee:69:2c:74:19:9e:68:79:
         66:aa:4d:b7:32:44:6e:10:df:1b:77:30:0a:0b:a3:95:ca:c5:
         c4:33:61:90:1a:69:c8:e3:d1:a5:c2:83:9b:e4:aa:fc:5f:bd:
         9b:b8:51:19:ca:c6:b1:de:e6:89:a6:cc:bf:f0:56:05:55:9e:
         28:df:af:c7:b1:03:de:be:02:ca:a9:a2:8f:3e:df:c3:4d:72:
         45:0e:5d:f7:16:bb:75:ad:af:49:54:11:d1:ac:0c:1b:36:d2:
         77:da:61:11:9c:43:7c:a1:e3:bc:f0:fb:20:c7:b7:15:1e:68:
         ac:cc:d5:ba:60:ed:41:47:c9:0c:13:f4:e8:f4:1f:35:c3:1b:
         41:67:30:1a:c1:4e:f5:21:f1:c8:8f:e0:63:3f:a9:b1:9b:9f:
         df:7f:7a:5d:18:e8:a1:c2:6c:50:9d:5f:74:47:5a:05:50:22:
         9b:b4:60:a8:b6:90:8e:42:e3:25:f0:39:2d:00:4c:66:38:20:
         5f:a9:16:fd:d1:45:1c:fa:c7:37:36:fb:ed:f2:3c:fe:c3:35:
         ef:21:59:18:96:95:64:92:c7:71:16:ef:78:11:b2:ba:9c:b4:
         57:ce:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:51:26 2026 by rpki-client