Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32322d3232203d3e20323635353030.roa (raw, json)
Hash identifier:          fGWe3fNgvvIOTXYlxyAZwLkhQp1P4boObRJSND4U1bw=
Subject key identifier:   00:1D:6A:11:57:18:DB:12:AB:D8:EB:D6:5A:30:3F:37:AC:10:4B:5C
Certificate issuer:       /CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
Certificate serial:       2ED0F70D417827761BE542D1A75289EE23D8762B
Authority key identifier: DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
Signing time:             Fri 17 Jul 2026 23:07:19 +0000
ROA not before:           Fri 17 Jul 2026 23:02:19 +0000
ROA not after:            Fri 16 Jul 2027 23:07:19 +0000
asID:                     265500
IP address blocks:        170.78.92.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Sat 18 Jul 2026 09:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d0:f7:0d:41:78:27:76:1b:e5:42:d1:a7:52:89:ee:23:d8:76:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
        Validity
            Not Before: Jul 17 23:02:19 2026 GMT
            Not After : Jul 16 23:07:19 2027 GMT
        Subject: CN=001D6A115718DB12ABD8EBD65A303F37AC104B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:3c:0e:a2:53:e4:12:2d:27:dd:25:ff:c2:
                    bd:2e:a5:2a:1b:d9:9d:97:06:79:fe:0b:86:d0:17:
                    2a:8e:fd:69:5d:e0:be:c4:36:54:b5:48:f0:19:2b:
                    bc:8f:cf:41:36:12:1d:55:60:60:5a:a7:3f:54:fc:
                    87:f8:62:33:ad:bf:53:7f:0e:9e:68:a5:2c:89:25:
                    16:ac:e0:f1:dd:9e:cf:46:53:82:39:d3:98:01:7c:
                    d1:50:c5:47:e2:b8:5c:50:9f:3f:1c:d6:88:e1:f1:
                    a9:8c:62:68:16:f4:8b:57:bc:30:b5:40:c0:f3:97:
                    87:9f:38:2d:0a:27:37:ac:37:79:0b:c7:19:ff:5a:
                    dc:75:e3:7c:50:15:1e:47:00:5e:78:f5:ef:9e:41:
                    6a:1b:50:25:a8:39:d8:34:dd:4e:4e:a0:76:a1:f3:
                    f3:ca:24:c8:49:4e:d1:97:ef:d1:78:49:e5:4c:d4:
                    72:d9:9c:01:8c:06:7e:69:2a:a1:51:d3:cd:1b:b9:
                    35:84:aa:87:f3:b2:9e:0c:7d:e4:bd:31:50:53:ee:
                    28:6b:ac:8a:99:4b:53:83:e4:54:96:a7:df:71:0e:
                    7d:69:17:df:d7:cf:61:66:a5:ff:dc:88:62:8b:e6:
                    bb:25:bf:70:aa:3f:02:d6:db:39:7a:49:5e:70:ca:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1D:6A:11:57:18:DB:12:AB:D8:EB:D6:5A:30:3F:37:AC:10:4B:5C
            X509v3 Authority Key Identifier:
                keyid:DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:8e:1a:ee:f3:b5:0a:f2:79:ec:72:db:b2:4c:0b:ba:20:
         42:e3:fa:05:b2:9b:37:f6:d6:e7:b4:80:6f:b8:7e:00:ef:17:
         e9:20:6c:de:e7:e6:00:5f:2a:bd:57:0e:1a:5c:1f:bf:a6:3f:
         30:6c:ac:21:a1:47:5c:32:03:98:6d:b0:9a:d6:56:49:39:0b:
         48:95:04:d9:dc:85:d7:f2:22:4b:05:be:4a:28:23:fe:e5:95:
         a4:ee:e0:f3:d4:31:58:3e:8a:6e:e0:2d:80:f1:8b:99:9a:ec:
         5a:41:b3:ec:98:3f:a3:fd:50:1d:f4:8d:b6:ee:c4:52:c2:7a:
         5b:5f:2d:d0:58:a4:9b:9d:5e:32:81:6b:8b:e5:0b:16:5b:78:
         da:51:02:e8:a9:94:00:67:af:36:74:a4:17:b3:a4:1d:79:94:
         7d:67:93:8f:ca:57:02:05:9a:79:1a:29:9c:91:0c:b6:f0:bd:
         ea:e0:a4:55:f9:cb:c8:80:83:13:3a:d9:83:d1:2d:ee:65:d1:
         a7:ae:33:e7:c6:2d:ea:30:11:94:16:d5:62:60:2e:1c:a6:82:
         57:e0:86:97:f5:24:92:da:e9:49:af:f4:2e:eb:b1:00:4f:ec:
         18:7c:ec:af:6a:34:74:f2:f5:9d:02:ce:81:6c:18:fa:75:50:
         cc:85:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:37:54 2026 by rpki-client