Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136352e302f32342d3234203d3e203532363730.roa
File:                     3137302e38322e3136352e302f32342d3234203d3e203532363730.roa (raw, json)
Hash identifier:          6vvYSY3OUs6oF/xhS5LYw4fq7/UriCO2WLzcaStooOQ=
Subject key identifier:   30:0B:31:18:68:DD:DA:62:2C:E6:29:69:EF:54:12:C5:40:10:24:BF
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       7AD238E7AD8B74EF8E99CD6717FAD7D680C75F90
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136352e302f32342d3234203d3e203532363730.roa
Signing time:             Tue 20 Jan 2026 13:22:20 +0000
ROA not before:           Tue 20 Jan 2026 13:17:20 +0000
ROA not after:            Tue 19 Jan 2027 13:22:20 +0000
asID:                     52670
IP address blocks:        170.82.165.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 20 Jan 2026 13:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d2:38:e7:ad:8b:74:ef:8e:99:cd:67:17:fa:d7:d6:80:c7:5f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Jan 20 13:17:20 2026 GMT
            Not After : Jan 19 13:22:20 2027 GMT
        Subject: CN=300B311868DDDA622CE62969EF5412C5401024BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:74:12:6d:d7:e4:50:88:ce:e7:d2:96:95:
                    38:60:c0:28:4d:40:2a:6a:d1:c4:df:b5:7b:bb:0e:
                    b4:ee:10:c7:51:dd:83:d6:75:0b:60:22:82:3e:02:
                    08:66:0c:8c:2b:bc:10:d3:f8:eb:4f:76:61:3b:da:
                    5a:b0:4d:82:eb:6a:bf:f8:96:cd:28:f5:20:4a:85:
                    28:c0:76:b9:6d:2a:b1:44:ce:1b:07:42:b8:9c:24:
                    80:c9:81:94:bd:7d:6e:c5:83:ac:e2:70:40:f1:fa:
                    8b:54:63:f8:3a:21:0c:83:ec:72:76:b7:90:62:b0:
                    cc:a9:f0:c4:70:e0:78:05:fd:49:53:7e:82:3a:cf:
                    18:ca:39:97:7d:5d:bb:fa:df:e6:97:d6:e3:e1:30:
                    b1:f0:5d:a9:cd:19:d5:60:5e:2d:57:31:ec:d2:76:
                    f0:b0:6a:32:44:b1:59:13:22:04:93:12:c6:dc:f0:
                    01:8f:1e:9a:ce:1b:d1:76:2b:07:9b:d4:66:cc:e2:
                    1f:e0:77:7e:93:b6:2d:a1:70:0c:e0:a7:f7:d5:3a:
                    9b:2c:17:d5:e0:dd:57:8a:31:8d:c1:b4:44:3f:f9:
                    72:bd:45:72:5d:fb:ff:1f:5d:8c:40:55:68:6a:df:
                    1f:b4:d9:39:23:b2:7f:1e:4d:2e:6f:0a:a7:f9:5b:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0B:31:18:68:DD:DA:62:2C:E6:29:69:EF:54:12:C5:40:10:24:BF
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136352e302f32342d3234203d3e203532363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:47:03:b2:cb:e6:f6:89:03:2c:83:7d:7d:b7:03:45:05:35:
         05:c9:77:b0:27:f2:b3:92:6d:83:7e:7e:d1:8d:b5:b0:0a:b1:
         ad:dc:35:76:b3:f9:2e:01:04:5a:48:93:b3:e3:84:a4:76:4b:
         fe:c2:91:6b:a7:8b:3d:cc:05:ea:ba:a7:94:48:e5:a4:de:c1:
         a3:f7:07:19:dd:5c:7a:9d:46:6b:71:3e:ac:ab:1b:a3:ce:e3:
         a7:90:60:92:c7:58:54:03:e5:6d:51:f1:f5:ea:41:83:1c:bb:
         36:9c:2c:44:24:86:bf:53:2f:9c:6b:72:a0:ca:0f:f0:29:1c:
         de:c9:f9:cd:e4:ce:85:69:9e:19:bb:66:f4:0d:5b:92:b4:88:
         28:61:ce:d2:b4:e3:8b:5b:1a:8b:80:a2:7a:fd:14:d2:aa:c8:
         bb:a3:8a:db:a2:bf:21:f8:7d:58:8f:fa:0f:ba:c2:c9:0e:83:
         f8:64:85:98:03:06:00:28:97:3c:2a:d3:49:a2:4c:af:60:f4:
         82:8f:df:53:bc:ee:af:92:f8:63:26:82:91:f1:ed:4f:98:62:
         6a:45:5e:c6:b1:0e:81:2c:27:bf:62:b3:0f:2c:f3:e2:a8:b8:
         7e:b0:bf:62:2a:c7:7c:e6:52:56:3f:5b:33:a4:8d:b0:b8:02:
         d4:bf:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:45:26 2026 by rpki-client