Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa
File:                     3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa (raw, json)
Hash identifier:          dxC3bITQ2Pt/a550guK12Ddt9S10bY5lP8a2QtBwlVk=
Subject key identifier:   FA:A9:FF:95:37:CE:D2:1D:9F:B1:6D:24:3E:8F:FD:24:2C:45:3B:AC
Certificate issuer:       /CN=E4AD7D5E692195B8B699FA8929256133345D81F1
Certificate serial:       1735F1494A2F310982E9231CF58CBD89495FBE36
Authority key identifier: E4:AD:7D:5E:69:21:95:B8:B6:99:FA:89:29:25:61:33:34:5D:81:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AD7D5E692195B8B699FA8929256133345D81F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa
Signing time:             Thu 02 Jul 2026 15:30:55 +0000
ROA not before:           Thu 02 Jul 2026 15:25:55 +0000
ROA not after:            Thu 01 Jul 2027 15:30:55 +0000
asID:                     265943
IP address blocks:        131.196.160.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 02 Jul 2026 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:35:f1:49:4a:2f:31:09:82:e9:23:1c:f5:8c:bd:89:49:5f:be:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4AD7D5E692195B8B699FA8929256133345D81F1
        Validity
            Not Before: Jul  2 15:25:55 2026 GMT
            Not After : Jul  1 15:30:55 2027 GMT
        Subject: CN=FAA9FF9537CED21D9FB16D243E8FFD242C453BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:5b:28:f7:d1:87:64:05:a7:7d:3d:e7:b4:
                    41:30:c6:b8:25:97:29:52:e3:78:ff:68:1a:74:e8:
                    b7:07:63:45:19:ce:3b:bc:dc:91:84:78:68:7d:9f:
                    01:18:77:e7:3e:77:28:e8:78:f5:d2:06:6d:bf:02:
                    06:47:db:0d:b8:10:c0:bc:7b:4f:84:2f:e2:c4:59:
                    3e:89:f2:a2:d0:09:24:29:ef:fe:6a:44:34:e9:e4:
                    60:5f:1e:e9:6a:db:65:6b:3b:49:36:0f:e9:5f:a6:
                    ed:dc:52:5b:1e:72:83:ec:3f:eb:bf:92:1f:63:f3:
                    24:f4:30:c6:9c:f9:c1:25:9a:67:1c:1b:10:74:c9:
                    e1:66:73:ed:ff:8e:e9:1c:77:45:08:8e:cb:d0:4d:
                    80:9e:9e:0b:57:e2:4a:4c:31:d5:d8:dd:fb:6d:53:
                    79:86:a5:b4:17:eb:be:f8:5a:60:86:d0:c8:dd:78:
                    e6:03:65:19:38:2b:ad:fc:45:27:d9:33:17:1f:a0:
                    d9:45:84:a7:46:9c:36:5b:50:46:37:23:16:09:42:
                    fa:2a:9e:19:51:38:2e:7b:8e:1e:b7:c2:21:4a:b9:
                    42:9b:a6:32:ae:bb:cc:cf:6a:dd:80:71:9c:61:01:
                    e7:69:d9:fb:7a:37:a3:31:cc:de:04:52:ee:e3:04:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:FF:95:37:CE:D2:1D:9F:B1:6D:24:3E:8F:FD:24:2C:45:3B:AC
            X509v3 Authority Key Identifier:
                keyid:E4:AD:7D:5E:69:21:95:B8:B6:99:FA:89:29:25:61:33:34:5D:81:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/E4AD7D5E692195B8B699FA8929256133345D81F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AD7D5E692195B8B699FA8929256133345D81F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/3133312e3139362e3136302e302f32332d3233203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:42:fd:ea:22:ba:4d:22:4d:40:ee:3e:79:60:09:81:4d:
         05:e2:4c:6d:4a:de:1c:46:8d:b8:1d:cb:9b:17:d9:5a:9b:5d:
         78:e1:9e:9b:26:c2:a5:db:82:42:bf:e0:48:97:58:02:db:a3:
         e6:15:ff:da:49:5a:5a:f9:41:2c:48:f3:b2:b2:9c:43:27:6b:
         15:a6:a1:bb:85:6d:f4:4f:71:2a:8c:ce:5f:00:4e:cf:2a:e7:
         fb:b1:b9:08:32:3f:64:e3:53:26:f2:96:86:8a:6e:e7:6e:3b:
         8e:e6:5a:01:49:24:ea:d2:65:b3:ad:ee:ff:8b:68:50:cc:36:
         2d:62:64:87:b4:54:1f:7a:1c:e5:93:80:eb:f0:88:89:d5:88:
         39:c8:c7:a1:b4:cd:de:bb:c5:32:f4:b7:f5:60:c7:12:65:ac:
         ca:e3:7e:c9:4f:93:d9:a4:08:ac:b7:f7:52:90:84:3c:26:de:
         f1:cf:c1:11:f5:e5:f0:f0:8a:53:a2:c6:f5:a1:38:c2:74:41:
         aa:d1:af:91:a6:4e:8f:11:c0:2a:22:a7:aa:21:0a:39:f4:84:
         46:8e:ff:1d:00:75:88:dc:61:53:4e:15:f5:7b:8c:9b:d6:28:
         d4:e3:f3:7f:c6:ae:95:4b:17:4d:7c:fc:cd:e8:b1:51:a4:19:
         08:5b:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:09:46 2026 by rpki-client