Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa
File:                     3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa (raw, json)
Hash identifier:          4xGTD9ohJujnzfQT71SUpCkoJEpo331CX5dOEb8GofU=
Subject key identifier:   36:16:70:F6:40:C9:3D:46:22:54:4E:5B:7A:54:11:60:CF:5A:A5:F0
Certificate issuer:       /CN=E4AD7D5E692195B8B699FA8929256133345D81F1
Certificate serial:       0782EE12F62D1EEA944C022263D44748F0261CAC
Authority key identifier: E4:AD:7D:5E:69:21:95:B8:B6:99:FA:89:29:25:61:33:34:5D:81:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AD7D5E692195B8B699FA8929256133345D81F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa
Signing time:             Thu 02 Jul 2026 15:33:31 +0000
ROA not before:           Thu 02 Jul 2026 15:28:31 +0000
ROA not after:            Thu 01 Jul 2027 15:33:31 +0000
asID:                     265943
IP address blocks:        131.196.160.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 02 Jul 2026 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:82:ee:12:f6:2d:1e:ea:94:4c:02:22:63:d4:47:48:f0:26:1c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4AD7D5E692195B8B699FA8929256133345D81F1
        Validity
            Not Before: Jul  2 15:28:31 2026 GMT
            Not After : Jul  1 15:33:31 2027 GMT
        Subject: CN=361670F640C93D4622544E5B7A541160CF5AA5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:e1:3b:ae:90:73:44:6f:b1:40:61:6d:13:
                    27:52:8a:eb:2a:2f:13:15:57:4c:2b:0d:5a:76:9a:
                    22:23:28:e8:5b:88:c5:b9:54:3c:ef:f3:5c:f8:8a:
                    2f:2b:5e:55:c8:d6:9b:3c:c2:69:e8:95:2b:66:f8:
                    0a:3e:c2:d1:51:ed:a0:e9:07:fb:1f:99:fd:56:3b:
                    78:9b:51:3b:1f:b7:ea:97:f8:89:7c:8e:01:ee:ed:
                    49:b3:7f:40:d0:6b:30:39:1d:a6:a5:f6:4b:36:d2:
                    fc:f5:f1:c2:b2:d0:22:1a:e8:30:c9:40:3f:2a:f8:
                    52:47:9a:7f:18:39:09:1e:0c:6c:26:01:0f:3e:96:
                    65:c6:cb:b4:a4:5e:e6:b1:e4:dc:a2:07:06:6e:1c:
                    e6:c6:6b:7c:64:a9:2b:07:1a:f9:8f:b4:79:c5:ec:
                    53:23:8d:c8:7a:dd:49:88:18:b7:5a:b3:33:6f:c3:
                    c1:89:5c:27:e2:b8:3a:3a:81:a6:8f:8b:dc:90:d2:
                    9d:79:e1:d9:aa:98:9e:f7:d6:f6:33:8e:f1:1a:a0:
                    ee:31:20:e8:72:21:7d:13:5a:05:1c:57:bb:a5:e8:
                    e2:41:19:9b:8b:fa:b1:81:00:da:e6:22:1e:de:58:
                    f3:88:5f:df:9d:4f:01:90:7a:ab:77:48:93:fe:7c:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:16:70:F6:40:C9:3D:46:22:54:4E:5B:7A:54:11:60:CF:5A:A5:F0
            X509v3 Authority Key Identifier:
                keyid:E4:AD:7D:5E:69:21:95:B8:B6:99:FA:89:29:25:61:33:34:5D:81:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/E4AD7D5E692195B8B699FA8929256133345D81F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AD7D5E692195B8B699FA8929256133345D81F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:02:ef:2e:ab:e1:9b:6b:e4:65:45:8f:37:75:e2:e1:75:0d:
         26:ad:cf:46:a4:dc:af:17:82:75:6d:5e:a5:20:06:e7:26:4f:
         52:fe:cf:c4:cd:8e:5d:8a:27:07:bd:91:80:9c:09:ed:e1:b7:
         6b:b9:0b:29:27:7b:22:4a:3c:5f:da:be:60:e3:23:52:8f:61:
         c2:27:59:f7:20:52:1a:88:78:07:73:93:72:fd:93:e4:1b:0f:
         69:cc:79:9a:f2:62:18:c3:45:1a:30:ab:8f:3d:90:e2:79:db:
         2d:3a:08:d4:44:4c:77:7a:d0:9a:e6:f9:6e:c3:f3:d0:73:52:
         5d:a0:a5:89:3e:2c:ae:f8:7d:88:11:78:7b:58:c6:3c:8e:ec:
         67:65:15:34:26:f5:44:ec:84:24:7c:1b:75:e5:2d:14:36:aa:
         22:a7:d1:d6:e4:b1:f2:06:eb:40:85:d3:f2:4c:49:3c:5c:0d:
         bf:63:54:6a:20:bb:8a:f8:ac:32:ea:90:07:9d:11:9d:21:24:
         97:b6:dc:b3:97:d7:2b:26:d5:4a:01:c7:39:4f:1f:44:83:21:
         f1:aa:b5:87:f1:51:75:d5:7b:43:dc:ff:a0:bf:e3:7f:6d:ee:
         d2:1f:d8:d3:f2:aa:63:15:0b:c2:ba:35:df:69:ac:b9:62:f8:
         da:a7:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:56:44 2026 by rpki-client