Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa
File:                     3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          7T7K2B5Djg+m+dcLsemML9zzWkLzqx0b0UyjDGDpwLU=
Subject key identifier:   AD:22:1A:ED:3D:B8:18:FC:10:54:58:B3:7F:EF:D3:33:4A:25:1F:39
Certificate issuer:       /CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Certificate serial:       4ACA10343F3B709D4E1B723DDE220A874F27EFF3
Authority key identifier: 6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa
Signing time:             Mon 07 Sep 2026 18:22:16 +0000
ROA not before:           Mon 07 Sep 2026 18:17:16 +0000
ROA not after:            Mon 06 Sep 2027 18:22:16 +0000
asID:                     263483
IP address blocks:        168.0.165.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 08 Sep 2026 15:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ca:10:34:3f:3b:70:9d:4e:1b:72:3d:de:22:0a:87:4f:27:ef:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
        Validity
            Not Before: Sep  7 18:17:16 2026 GMT
            Not After : Sep  6 18:22:16 2027 GMT
        Subject: CN=AD221AED3DB818FC105458B37FEFD3334A251F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:bf:26:b8:46:06:98:aa:5f:1d:fe:a0:09:
                    d6:be:89:d2:99:84:8c:11:d8:7c:ff:ea:68:d4:2b:
                    6b:0f:fc:ff:77:76:87:7c:22:3e:ac:6e:8e:d4:26:
                    96:4a:02:59:88:c6:32:ed:4d:b5:1b:99:af:ca:23:
                    73:61:83:52:ff:84:ee:a0:fe:7d:23:57:f3:bd:f0:
                    d9:a8:ed:da:5c:72:74:ab:c1:3f:9a:23:84:e0:ee:
                    d9:91:d9:60:b6:cd:fb:9b:cb:24:5d:02:b0:95:0a:
                    d3:53:ce:53:f7:22:ce:43:ab:8d:ba:94:40:b5:2a:
                    0f:d0:05:e2:7c:ca:82:63:b3:16:9f:b2:aa:40:58:
                    13:93:f1:f3:98:e2:91:f7:59:52:a5:e2:cc:db:d4:
                    42:2f:2d:3a:15:41:02:35:9e:11:a6:28:e5:7b:40:
                    52:49:ee:02:4d:cc:a9:e4:f1:90:10:88:f1:9a:3b:
                    bf:6f:7b:23:c9:89:c2:fd:04:fa:01:fa:46:bb:77:
                    5e:cf:0d:3f:38:2a:a0:cc:21:b6:9d:f8:b9:a4:13:
                    e9:15:72:18:35:ca:83:c4:c6:5a:cc:27:f9:bb:01:
                    38:e9:30:67:66:42:26:87:2f:26:4e:b7:35:3e:9b:
                    fe:e0:25:70:ce:ce:a6:6c:71:e2:6b:ab:cb:cb:71:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:1A:ED:3D:B8:18:FC:10:54:58:B3:7F:EF:D3:33:4A:25:1F:39
            X509v3 Authority Key Identifier:
                keyid:6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136352e302f32342d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:bd:5f:6d:3b:b6:cb:b4:5b:d5:ea:7a:35:98:8a:cc:8b:7f:
         55:2e:79:99:24:a6:95:33:e6:8b:1c:ac:e9:dd:c6:67:6c:c5:
         5a:fa:ab:4f:b5:fe:0a:cd:5f:0c:a2:29:be:55:f1:d4:d5:d9:
         aa:3e:e8:87:19:ec:a6:6b:2c:15:78:05:6c:de:26:a7:d9:1b:
         18:f7:32:76:ed:b9:1b:9c:b7:5d:89:64:d5:2a:1f:57:da:cb:
         5c:23:18:f6:07:a8:33:4a:39:12:c7:de:75:d8:57:6f:60:81:
         67:31:2d:bc:a3:60:a1:f6:d3:44:52:08:a3:29:0e:d2:40:3c:
         a6:7c:cf:26:23:58:fe:a5:b8:e1:25:1d:4b:be:bf:d5:18:fe:
         9a:6b:e2:76:22:79:e3:4e:65:87:f5:f8:08:16:88:6d:69:bf:
         7a:19:dd:0c:e1:d5:42:5b:24:77:7f:5e:aa:a2:84:f1:35:3e:
         00:91:de:c1:79:62:88:f9:3e:c0:09:87:82:ff:21:b5:c7:14:
         93:d7:11:e5:c7:eb:a3:32:8b:6a:61:61:b2:2f:97:8d:8c:4e:
         21:48:e8:1b:f5:58:6b:68:d2:bc:67:70:48:b6:ed:34:9b:bd:
         8b:66:25:08:71:42:5f:54:94:cf:a1:85:eb:e6:1b:94:7f:a5:
         53:48:89:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSsoQND87cJ1OG3I93iIKh08n7/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZEOEQwRDY4RjIyMDhFM0VEQzg2Qjk1ODk4OTUyOTU5
N0ZFNUIwNTAeFw0yNjA5MDcxODE3MTZaFw0yNzA5MDYxODIyMTZaMDMxMTAvBgNV
BAMTKEFEMjIxQUVEM0RCODE4RkMxMDU0NThCMzdGRUZEMzMzNEEyNTFGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAL8muEYGmKpfHf6gCda+idKZ
hIwR2Hz/6mjUK2sP/P93dod8Ij6sbo7UJpZKAlmIxjLtTbUbma/KI3Nhg1L/hO6g
/n0jV/O98Nmo7dpccnSrwT+aI4Tg7tmR2WC2zfubyyRdArCVCtNTzlP3Is5Dq426
lEC1Kg/QBeJ8yoJjsxafsqpAWBOT8fOY4pH3WVKl4szb1EIvLToVQQI1nhGmKOV7
QFJJ7gJNzKnk8ZAQiPGaO79veyPJicL9BPoB+ka7d17PDT84KqDMIbad+LmkE+kV
chg1yoPExlrMJ/m7ATjpMGdmQiaHLyZOtzU+m/7gJXDOzqZsceJrq8vLcWUVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrSIa7T24GPwQVFizf+/TM0olHzkwHwYDVR0j
BBgwFoAUb9jQ1o8iCOPtyGuViYlSlZf+WwUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB
VXAvMC82RkQ4RDBENjhGMjIwOEUzRURDODZCOTU4OTg5NTI5NTk3RkU1QjA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRDhEMEQ2OEYyMjA4RTNF
REM4NkI5NTg5ODk1Mjk1OTdGRTVCMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0eE5YdTljWmJKOUFXeWZ0WFV6WFRkc21ENEdzbkMyNTJrOVpBTWRlQVVwLzAv
MzEzNjM4MmUzMDJlMzEzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqAClMA0GCSqGSIb3DQEBCwUAA4IBAQB2vV9tO7bL
tFvV6no1mIrMi39VLnmZJKaVM+aLHKzp3cZnbMVa+qtPtf4KzV8Moim+VfHU1dmq
PuiHGeymaywVeAVs3ian2RsY9zJ27bkbnLddiWTVKh9X2stcIxj2B6gzSjkSx951
2FdvYIFnMS28o2Ch9tNEUgijKQ7SQDymfM8mI1j+pbjhJR1Lvr/VGP6aa+J2Innj
TmWH9fgIFohtab96Gd0M4dVCWyR3f16qooTxNT4Akd7BeWKI+T7ACYeC/yG1xxST
1xHlx+ujMotqYWGyL5eNjE4hSOgb9VhraNK8Z3BItu00m72LZiUIcUJfVJTPoYXr
5huUf6VTSIkp
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:45:10 2026 by rpki-client