Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
File:                     34352e372e3232342e302f32322d3234203d3e20323636363135.roa (raw, json)
Hash identifier:          ewTq7MqPyxuXAV3QxpriqhrtkC2jFm5lJTK1CKk/16A=
Subject key identifier:   57:6A:6D:5A:FF:C3:FA:29:7E:2C:9C:F8:12:A5:D8:31:F5:64:5B:24
Certificate issuer:       /CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
Certificate serial:       672BD0F9C64D85FA5768F17A5F8FDB84BF0BF17D
Authority key identifier: D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa
Signing time:             Mon 14 Sep 2026 17:39:58 +0000
ROA not before:           Mon 14 Sep 2026 17:34:58 +0000
ROA not after:            Mon 13 Sep 2027 17:39:58 +0000
asID:                     266615
IP address blocks:        45.7.224.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 14 Sep 2026 19:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2b:d0:f9:c6:4d:85:fa:57:68:f1:7a:5f:8f:db:84:bf:0b:f1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
        Validity
            Not Before: Sep 14 17:34:58 2026 GMT
            Not After : Sep 13 17:39:58 2027 GMT
        Subject: CN=576A6D5AFFC3FA297E2C9CF812A5D831F5645B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:3e:9e:bb:48:78:b1:75:e5:30:f2:64:95:
                    27:9f:40:cd:38:57:bc:c3:c0:fd:84:48:98:87:7d:
                    7f:21:7f:45:77:22:f4:62:eb:d0:18:d1:e0:c0:cc:
                    98:43:12:cb:79:f1:b0:f7:60:fc:f8:db:ba:79:77:
                    37:94:ca:f4:27:d2:09:40:d7:de:27:a3:2b:70:d0:
                    46:0d:e7:be:a5:c2:fe:95:a4:4d:7b:3a:10:39:10:
                    ec:b8:43:87:29:e5:e6:51:64:6a:1a:aa:08:61:d2:
                    24:a3:4a:d4:ec:a7:03:b1:a8:cb:a8:88:0e:61:f2:
                    56:3f:0e:d3:84:1c:e2:c5:98:71:37:d2:f0:91:90:
                    ea:99:d5:8e:f2:fc:9f:8a:39:c2:ed:5e:b7:60:11:
                    01:a5:93:85:c3:a7:37:e6:80:00:46:d7:cc:fa:f2:
                    e0:cf:53:03:69:46:13:6d:90:33:cc:82:c5:a2:a6:
                    58:9a:a3:15:73:19:cc:db:d0:89:19:c7:e9:38:01:
                    57:65:ac:dd:ab:0d:ea:67:75:48:2e:a4:94:21:bd:
                    d3:e5:12:6d:49:22:61:42:04:67:5e:9d:0c:0c:00:
                    dd:15:15:3f:7e:ff:15:07:c6:db:78:80:48:79:00:
                    d0:9f:ee:33:a2:cf:af:db:a6:a3:b5:9f:7a:e6:f5:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:6D:5A:FF:C3:FA:29:7E:2C:9C:F8:12:A5:D8:31:F5:64:5B:24
            X509v3 Authority Key Identifier:
                keyid:D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e372e3232342e302f32322d3234203d3e20323636363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:26:79:da:4c:d0:9f:24:c0:9f:20:15:f7:51:8b:0d:b0:
         1f:7f:2a:5a:36:a0:af:83:06:85:81:39:f5:3e:24:21:7e:76:
         e5:55:09:4f:9e:53:38:97:7a:15:b2:17:94:ba:8d:1d:94:86:
         03:f7:24:03:c2:4c:f2:9f:be:37:67:10:70:8f:f6:bb:66:9a:
         da:23:3b:12:2d:b4:02:40:be:87:06:ce:dd:83:c3:c1:33:bd:
         72:95:67:a2:a9:22:bc:91:7e:d5:a7:02:87:28:24:46:45:29:
         90:15:e4:1c:67:2d:d0:1c:3f:1b:d0:a1:90:e6:35:37:7e:08:
         63:da:93:86:4f:19:aa:1e:d5:d0:40:1c:5e:3b:0a:cd:8c:f8:
         5c:6b:95:c6:2e:10:e1:aa:b9:17:34:57:c5:f4:3f:90:c2:75:
         73:f9:c8:e0:ac:60:ab:10:21:b6:a4:44:c6:1c:7f:21:1a:67:
         79:3e:01:44:9a:5a:70:1a:46:4d:fd:2e:d1:04:81:55:96:39:
         1f:ed:be:3b:5e:8b:a8:f0:e4:66:75:83:56:f3:93:5c:83:05:
         29:b6:c2:6f:5a:9e:f5:26:c1:f8:c7:16:46:3b:e7:eb:3f:20:
         ef:16:01:49:97:e9:17:45:e9:31:19:4f:f9:6b:b9:54:7e:d9:
         36:26:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:16:47 2026 by rpki-client