Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          Sp1xboi9wjqC0yCjL0eZNn7rAluqH39mte8H77tcV4Q=
Subject key identifier:   40:7E:90:BC:C5:82:6D:6A:BB:98:50:2E:A6:B7:AC:9D:82:DE:B8:31
Certificate issuer:       /CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
Certificate serial:       75802BCA82F0BB7D835BFF3F4232B165FCEED142
Authority key identifier: DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Fri 17 Jul 2026 23:07:21 +0000
ROA not before:           Fri 17 Jul 2026 23:02:21 +0000
ROA not after:            Fri 16 Jul 2027 23:07:21 +0000
asID:                     265500
IP address blocks:        2804:3518:8000::/34 maxlen: 34
Validation:               Failed, certificate revoked on Sat 18 Jul 2026 09:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:80:2b:ca:82:f0:bb:7d:83:5b:ff:3f:42:32:b1:65:fc:ee:d1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
        Validity
            Not Before: Jul 17 23:02:21 2026 GMT
            Not After : Jul 16 23:07:21 2027 GMT
        Subject: CN=407E90BCC5826D6ABB98502EA6B7AC9D82DEB831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:f3:20:74:e1:8a:1d:94:57:e8:59:02:0e:
                    dd:85:06:68:78:06:73:e4:a9:e7:bc:02:94:2c:91:
                    87:ff:a2:08:33:dd:dd:10:c1:76:d4:2c:55:7d:a3:
                    56:ec:12:a0:ac:38:a6:60:6c:3d:5c:42:47:42:9a:
                    98:ee:c7:b7:6c:a8:38:bb:3e:da:a1:54:78:de:45:
                    9c:41:b7:fb:95:f1:dc:93:d7:8a:e1:9e:e9:a0:73:
                    32:5b:b1:e9:de:92:83:e2:3e:ce:c7:37:2b:d1:d9:
                    d6:b2:52:41:f2:ed:d8:63:10:78:fe:aa:37:10:67:
                    1b:b7:ef:02:7e:e8:07:f6:d1:9f:3f:6d:b8:72:79:
                    a7:05:da:78:e1:ad:a7:08:ed:6f:9d:08:28:a2:7d:
                    d5:e3:3b:ab:2b:22:c9:00:e8:e1:ae:d4:fe:c9:90:
                    be:0f:29:32:47:98:86:a3:88:64:b8:fe:46:07:15:
                    0b:c2:1f:a9:1c:cc:a5:40:5e:cf:00:ac:54:d9:83:
                    3b:e8:00:d4:65:8e:41:05:d6:e9:0e:64:60:a9:68:
                    c0:d4:08:29:df:e7:e1:11:1a:a0:b4:15:05:fb:ea:
                    bf:06:29:80:b7:66:e1:ed:79:c3:d9:07:fa:8f:8f:
                    f2:e4:0f:a3:fa:95:2c:84:e0:c0:a3:a3:cd:83:50:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7E:90:BC:C5:82:6D:6A:BB:98:50:2E:A6:B7:AC:9D:82:DE:B8:31
            X509v3 Authority Key Identifier:
                keyid:DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:36:88:3a:c8:51:cf:71:7a:ba:c7:7c:f4:27:a4:b0:d1:70:
         bf:77:f7:d0:c6:3e:72:8c:cd:0d:93:9a:91:57:6f:e3:b5:bc:
         fd:2c:ab:b8:4b:b7:c9:7f:ae:8a:23:e8:11:47:b7:1a:dc:99:
         27:49:15:25:47:dd:23:c3:18:15:c6:51:ea:f7:86:0f:c6:9c:
         d1:17:8d:9e:74:62:4f:32:c1:b2:35:56:17:b9:c2:6f:96:a0:
         40:60:f7:ae:d8:f2:bb:7f:6c:ba:b8:1d:d7:30:85:56:57:09:
         77:b7:8e:70:e9:70:8a:e3:e7:9a:be:f3:d3:1e:bf:f5:3e:45:
         31:6c:13:0b:d3:d6:fa:08:d1:9e:90:73:3c:82:46:e6:af:ba:
         7a:98:64:74:f6:30:a3:2d:ab:3b:9f:86:ac:dc:2a:69:c9:eb:
         09:d1:bb:51:f7:51:b6:f4:36:2f:19:45:a7:b7:90:a5:68:a3:
         2d:47:70:95:3a:f0:2f:56:97:4a:bb:2b:c6:53:1f:b9:1a:da:
         14:98:9e:6e:47:02:c4:ae:9a:39:bb:4c:46:c7:3a:f5:9e:56:
         6b:c7:e5:39:58:b1:ff:20:83:1a:b7:7f:13:ed:8a:7a:d8:87:
         3a:97:66:4f:cf:8d:17:00:99:3d:72:30:a4:56:ff:ae:4b:32:
         2d:36:5b:4e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdYAryoLwu32DW/8/QjKxZfzu0UIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVBRTA0ODM1RkY0MUQ0MzczNEE1NUVCOENCODY2OTg5
RDdBOUY1NTAeFw0yNjA3MTcyMzAyMjFaFw0yNzA3MTYyMzA3MjFaMDMxMTAvBgNV
BAMTKDQwN0U5MEJDQzU4MjZENkFCQjk4NTAyRUE2QjdBQzlEODJERUI4MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1vMgdOGKHZRX6FkCDt2FBmh4
BnPkqee8ApQskYf/oggz3d0QwXbULFV9o1bsEqCsOKZgbD1cQkdCmpjux7dsqDi7
PtqhVHjeRZxBt/uV8dyT14rhnumgczJbsenekoPiPs7HNyvR2dayUkHy7dhjEHj+
qjcQZxu37wJ+6Af20Z8/bbhyeacF2njhracI7W+dCCiifdXjO6srIskA6OGu1P7J
kL4PKTJHmIajiGS4/kYHFQvCH6kczKVAXs8ArFTZgzvoANRljkEF1ukOZGCpaMDU
CCnf5+ERGqC0FQX76r8GKYC3ZuHtecPZB/qPj/LkD6P6lSyE4MCjo82DUEvzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQH6QvMWCbWq7mFAupresnYLeuDEwHwYDVR0j
BBgwFoAU3q4Eg1/0HUNzSlXrjLhmmJ16n1UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC9ERUFFMDQ4MzVGRjQxRDQzNzM0QTU1RUI4Q0I4NjY5ODlEN0E5RjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFQUUwNDgzNUZGNDFENDM3
MzRBNTVFQjhDQjg2Njk4OUQ3QTlGNTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzIzODMwMzQzYTMzMzUzMTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENRiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBNNog6yFHPcXq6x3z0J6Sw0XC/d/fQxj5yjM0Nk5qRV2/jtbz9LKu4S7fJ
f66KI+gRR7ca3JknSRUlR90jwxgVxlHq94YPxpzRF42edGJPMsGyNVYXucJvlqBA
YPeu2PK7f2y6uB3XMIVWVwl3t45w6XCK4+eavvPTHr/1PkUxbBML09b6CNGekHM8
gkbmr7p6mGR09jCjLas7n4as3CppyesJ0btR91G29DYvGUWnt5ClaKMtR3CVOvAv
VpdKuyvGUx+5GtoUmJ5uRwLErpo5u0xGxzr1nlZrx+U5WLH/IIMat38T7Yp62Ic6
l2ZPz40XAJk9cjCkVv+uSzItNltO
-----END CERTIFICATE-----
Generated at Sat Sep 5 15:29:14 2026 by rpki-client