Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa
File:                     3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          ByAGInqCXlAsa0R5YfdgasniVYj2TT5ya6gmaLeEv5M=
Subject key identifier:   5F:67:23:42:55:D5:A9:A1:E5:D7:1A:27:ED:EB:16:AB:58:A0:83:DF
Certificate issuer:       /CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Certificate serial:       35F3020D46F77239B18DE3E47AE2CB5341FBDAF2
Authority key identifier: 6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa
Signing time:             Mon 07 Sep 2026 18:22:00 +0000
ROA not before:           Mon 07 Sep 2026 18:17:00 +0000
ROA not after:            Mon 06 Sep 2027 18:22:00 +0000
asID:                     263483
IP address blocks:        168.0.164.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 08 Sep 2026 15:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f3:02:0d:46:f7:72:39:b1:8d:e3:e4:7a:e2:cb:53:41:fb:da:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
        Validity
            Not Before: Sep  7 18:17:00 2026 GMT
            Not After : Sep  6 18:22:00 2027 GMT
        Subject: CN=5F67234255D5A9A1E5D71A27EDEB16AB58A083DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:a4:b6:c4:07:4a:bb:67:82:96:6a:0f:b2:
                    25:0b:5f:4c:14:fd:53:11:a3:d7:01:7d:18:c2:27:
                    45:93:d3:b5:91:27:44:24:c4:56:94:ab:87:98:ef:
                    eb:06:ec:ac:c5:08:29:d6:66:4a:e3:8f:d0:a7:ce:
                    7c:d3:56:35:e0:e8:c3:80:91:ae:13:8f:d6:45:c4:
                    3e:98:c5:8b:9b:58:93:95:6b:8b:3c:eb:bb:7d:b8:
                    7a:35:07:44:06:a3:9d:fe:7b:ed:98:b3:92:bc:2d:
                    c5:36:a5:72:3d:87:9c:68:d1:94:d7:19:e2:ea:62:
                    d9:0c:13:e0:4f:1a:66:ba:18:95:eb:17:2d:fa:d9:
                    4d:4c:90:d3:4a:d4:fb:70:04:1c:b7:d0:68:b3:96:
                    44:03:fd:82:59:8a:84:8c:3a:24:4e:c1:fb:01:4f:
                    6f:56:08:fa:96:c3:3e:ed:16:26:ee:1f:1f:d2:d4:
                    bf:46:f8:dc:5f:1b:bb:47:7d:78:08:3b:60:22:a0:
                    f2:21:58:5d:76:7a:7a:e2:f5:45:4c:60:e7:a5:c4:
                    5d:2c:d2:ff:db:13:fa:a7:25:ae:4e:d8:51:48:6c:
                    e2:44:2d:33:44:9e:4b:09:f3:f5:07:1b:09:bf:77:
                    ee:07:03:73:2b:d4:19:2c:90:d6:dd:d3:fc:92:0a:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:67:23:42:55:D5:A9:A1:E5:D7:1A:27:ED:EB:16:AB:58:A0:83:DF
            X509v3 Authority Key Identifier:
                keyid:6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32342d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:0e:bb:38:9e:9a:ff:df:76:c2:9d:fd:44:cf:22:87:7c:
         9f:b3:d2:27:36:3c:52:8e:63:58:33:0e:b2:33:3e:8e:18:fa:
         bd:3f:6f:cd:1c:37:e2:a8:b2:6a:62:9b:89:71:09:8f:1f:4c:
         44:22:37:04:df:65:db:f5:f5:bf:42:15:34:df:d1:dc:89:17:
         c5:e7:e3:db:08:76:aa:8f:18:4c:46:26:73:6c:8d:44:cd:55:
         26:d0:4b:22:df:22:53:2b:46:ee:61:e7:a2:65:64:d3:5d:7a:
         2d:91:84:a4:47:99:b2:79:49:d2:92:5e:f0:17:2e:e0:52:29:
         32:2b:b7:7b:5c:ce:a2:5d:1a:42:12:dc:b5:b5:41:2d:8c:1c:
         d6:90:4b:0a:91:81:85:3f:91:c4:4e:4b:5a:75:48:64:3c:10:
         5c:c0:88:1d:8c:cb:63:bc:39:3f:05:23:cc:eb:d9:10:a6:c4:
         5c:c5:4d:87:df:8b:ac:36:b3:a0:05:c4:dd:3c:f6:d4:89:91:
         1f:80:18:15:31:a8:96:95:34:20:02:0d:a0:aa:63:14:4f:6d:
         0c:d5:78:38:db:42:b6:e4:b6:d9:93:c6:4a:3b:a3:e8:d0:a0:
         6e:37:4a:0a:e3:62:7b:30:0c:51:c4:01:c6:9b:fa:72:9a:a4:
         5a:31:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:51:19 2026 by rpki-client