Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa
File:                     3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa (raw, json)
Hash identifier:          d29Nd1ieHwksTohsZkyUWPOv0dDJwCbJKavGDyv47TE=
Subject key identifier:   33:FC:60:36:D3:C3:2B:75:D3:0B:53:BB:A2:8F:1E:3F:E7:A3:BC:16
Certificate issuer:       /CN=190F88057E5253901EE5639F080648A51BEA01F6
Certificate serial:       5C4D4E7916BD68A5B5AB88A73AD2ECB3B3678B7A
Authority key identifier: 19:0F:88:05:7E:52:53:90:1E:E5:63:9F:08:06:48:A5:1B:EA:01:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190F88057E5253901EE5639F080648A51BEA01F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa
Signing time:             Thu 03 Sep 2026 11:33:01 +0000
ROA not before:           Thu 03 Sep 2026 11:28:01 +0000
ROA not after:            Thu 02 Sep 2027 11:33:01 +0000
asID:                     262713
IP address blocks:        186.208.12.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Fri 25 Sep 2026 17:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4d:4e:79:16:bd:68:a5:b5:ab:88:a7:3a:d2:ec:b3:b3:67:8b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190F88057E5253901EE5639F080648A51BEA01F6
        Validity
            Not Before: Sep  3 11:28:01 2026 GMT
            Not After : Sep  2 11:33:01 2027 GMT
        Subject: CN=33FC6036D3C32B75D30B53BBA28F1E3FE7A3BC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:49:9f:2b:f9:1c:44:d8:b6:81:25:7b:b6:
                    35:fb:4c:5a:af:f1:77:d7:3f:97:6c:5e:65:1e:bd:
                    98:30:26:d8:6a:6c:bf:bd:a2:54:01:e1:d7:a8:e9:
                    53:28:69:85:cb:77:d2:b4:5c:57:c0:32:d6:24:29:
                    8e:27:d5:79:bc:00:58:77:dc:3b:4e:f2:8d:3e:91:
                    53:e2:54:9b:48:cd:e8:24:a9:98:aa:c9:a3:a4:5b:
                    0d:9c:48:45:d1:27:91:29:12:f9:b1:5b:62:48:c7:
                    74:02:5b:d2:e6:7b:fb:7e:b4:67:c2:d6:38:b5:ee:
                    b7:12:ad:9d:b3:8e:63:31:f3:52:f4:62:75:5b:90:
                    22:5c:bf:dc:6d:b7:6d:a6:13:a2:55:33:39:5e:44:
                    8d:18:cb:b0:85:c5:ff:c4:d8:c2:10:e0:08:12:94:
                    6a:29:3e:5e:8c:8e:a6:b9:88:ca:8a:f0:a6:e5:d7:
                    2a:58:6a:e6:24:86:96:5e:3a:a8:ca:0c:bc:e9:ce:
                    90:51:4e:a6:ca:33:2b:1d:51:57:cb:02:a6:c1:ad:
                    a0:bc:40:38:16:cf:6a:44:61:ad:cd:c2:00:25:ca:
                    6f:c1:11:9f:ad:b9:52:da:f8:7b:6a:3b:70:13:45:
                    0e:dc:5b:e4:a7:a4:76:67:2e:02:4d:f4:73:74:04:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:60:36:D3:C3:2B:75:D3:0B:53:BB:A2:8F:1E:3F:E7:A3:BC:16
            X509v3 Authority Key Identifier:
                keyid:19:0F:88:05:7E:52:53:90:1E:E5:63:9F:08:06:48:A5:1B:EA:01:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/190F88057E5253901EE5639F080648A51BEA01F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190F88057E5253901EE5639F080648A51BEA01F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f5:c8:25:5a:1d:ed:c1:e6:06:2e:50:be:28:f1:c5:1a:46:
         31:b3:6e:ec:84:f3:bc:ba:11:41:b0:da:1c:40:dd:2a:22:5e:
         2b:72:a9:6e:9d:aa:2e:03:8b:b5:e6:db:e9:48:53:7c:2c:6a:
         9c:dc:3b:1d:80:30:e7:c3:6c:22:a7:0a:38:c6:b8:41:8b:04:
         fc:5c:7d:2d:03:8d:bc:0c:ba:2d:2f:be:2a:c5:ac:f6:c8:07:
         0f:67:fa:99:63:56:7d:69:a9:28:9e:08:aa:3f:fc:33:0e:45:
         eb:f6:26:5b:87:24:ed:42:8b:d0:63:92:97:46:49:fb:a9:e8:
         e5:9c:22:b8:c8:17:28:b0:eb:73:4f:30:ea:b9:bc:10:dc:f0:
         54:66:77:fe:af:67:9d:b5:4a:48:bf:c1:12:7f:37:17:04:f4:
         d6:3d:eb:b2:e2:5a:af:55:1c:c5:e6:c1:2d:15:d7:ad:0a:68:
         d3:8e:8c:58:1a:db:a7:c0:9b:95:26:a5:e7:06:65:6a:d3:a0:
         a7:9d:65:3a:d5:0d:09:7e:7d:c8:9b:c7:bd:29:cc:c5:e3:b7:
         25:b8:0d:7f:93:81:86:61:1c:f7:49:07:1a:7b:ca:b6:9a:5f:
         34:52:72:36:bc:73:00:cb:cb:e8:69:bc:ce:7e:11:41:db:82:
         b9:f0:4c:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXE1OeRa9aKW1q4inOtLss7Nni3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwRjg4MDU3RTUyNTM5MDFFRTU2MzlGMDgwNjQ4QTUx
QkVBMDFGNjAeFw0yNjA5MDMxMTI4MDFaFw0yNzA5MDIxMTMzMDFaMDMxMTAvBgNV
BAMTKDMzRkM2MDM2RDNDMzJCNzVEMzBCNTNCQkEyOEYxRTNGRTdBM0JDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWkmfK/kcRNi2gSV7tjX7TFqv
8XfXP5dsXmUevZgwJthqbL+9olQB4deo6VMoaYXLd9K0XFfAMtYkKY4n1Xm8AFh3
3DtO8o0+kVPiVJtIzegkqZiqyaOkWw2cSEXRJ5EpEvmxW2JIx3QCW9Lme/t+tGfC
1ji17rcSrZ2zjmMx81L0YnVbkCJcv9xtt22mE6JVMzleRI0Yy7CFxf/E2MIQ4AgS
lGopPl6Mjqa5iMqK8Kbl1ypYauYkhpZeOqjKDLzpzpBRTqbKMysdUVfLAqbBraC8
QDgWz2pEYa3NwgAlym/BEZ+tuVLa+HtqO3ATRQ7cW+SnpHZnLgJN9HN0BJHrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM/xgNtPDK3XTC1O7oo8eP+ejvBYwHwYDVR0j
BBgwFoAUGQ+IBX5SU5Ae5WOfCAZIpRvqAfYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN043aVRUNHFHNTRvcmFTY3RlODFja1ZRWThxTWF3QjJwRjMxWDU1RTZY
OTEvMC8xOTBGODgwNTdFNTI1MzkwMUVFNTYzOUYwODA2NDhBNTFCRUEwMUY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MEY4ODA1N0U1MjUzOTAx
RUU1NjM5RjA4MDY0OEE1MUJFQTAxRjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdON2lUVDRxRzU0b3JhU2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNzMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK60AwwDQYJKoZIhvcNAQELBQADggEBAI71yCVa
He3B5gYuUL4o8cUaRjGzbuyE87y6EUGw2hxA3SoiXityqW6dqi4Di7Xm2+lIU3ws
apzcOx2AMOfDbCKnCjjGuEGLBPxcfS0DjbwMui0vvirFrPbIBw9n+pljVn1pqSie
CKo//DMORev2JluHJO1Ci9BjkpdGSfup6OWcIrjIFyiw63NPMOq5vBDc8FRmd/6v
Z521Ski/wRJ/NxcE9NY967LiWq9VHMXmwS0V160KaNOOjFga26fAm5UmpecGZWrT
oKedZTrVDQl+fcibx70pzMXjtyW4DX+TgYZhHPdJBxp7yraaXzRScja8cwDLy+hp
vM5+EUHbgrnwTPE=
-----END CERTIFICATE-----
Generated at Mon Nov 2 23:28:25 2026 by rpki-client