Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa
File:                     3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          01uz9rc7kMWP3d2AWnbAdqIXymN7XBeFUufBwlZs2Nw=
Subject key identifier:   F2:73:27:A0:91:06:ED:83:F3:7D:6B:C6:D8:4E:8C:8B:5F:3C:05:71
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       4613B54ED63D9DD5F382702BFE0C5CD68A971C93
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa
Signing time:             Wed 03 Sep 2025 16:41:13 +0000
ROA not before:           Wed 03 Sep 2025 16:36:13 +0000
ROA not after:            Wed 02 Sep 2026 16:41:13 +0000
asID:                     269359
IP address blocks:        168.194.250.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 03 Sep 2025 20:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:b5:4e:d6:3d:9d:d5:f3:82:70:2b:fe:0c:5c:d6:8a:97:1c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Sep  3 16:36:13 2025 GMT
            Not After : Sep  2 16:41:13 2026 GMT
        Subject: CN=F27327A09106ED83F37D6BC6D84E8C8B5F3C0571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:03:a4:87:d0:cb:86:4c:2b:09:e4:89:46:7b:
                    bc:34:17:98:54:68:58:90:0b:70:51:de:73:df:62:
                    8d:14:bf:2f:d2:80:47:d6:43:1a:93:f6:e3:a6:5f:
                    f4:f8:a3:f0:22:20:bf:f4:c9:3f:eb:26:55:5a:fc:
                    04:7c:82:20:44:c5:6c:d0:46:e9:6d:a8:47:91:72:
                    60:3e:2a:4e:07:a9:3d:eb:16:d6:41:a1:09:ea:5c:
                    03:b6:e5:a8:6d:fd:9c:55:02:91:f7:fd:60:2b:39:
                    c2:50:09:71:99:fb:4f:89:6a:b9:38:d2:2e:2c:b1:
                    11:8a:a3:3e:2d:69:1f:b1:47:0e:cc:ef:7e:fd:f0:
                    27:29:91:78:14:4b:ee:96:30:08:88:9a:7e:2d:9d:
                    21:e2:32:94:72:dc:82:d6:99:91:d7:3a:fb:7c:c9:
                    d6:0f:b3:2c:ae:59:7a:f5:53:47:cc:46:69:a9:6c:
                    56:82:8c:b6:d7:a3:15:0b:dd:a7:d3:7d:5e:2b:d8:
                    d7:75:06:59:c7:53:11:71:13:1f:0c:f4:77:99:d1:
                    3c:ca:ce:1a:a7:7f:c4:21:e9:41:a8:55:40:44:ee:
                    ff:f6:fb:6c:f9:a2:13:14:5c:e3:84:2d:5d:33:51:
                    43:d3:de:f5:85:b2:19:19:b5:77:e6:2b:7b:1c:a1:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:73:27:A0:91:06:ED:83:F3:7D:6B:C6:D8:4E:8C:8B:5F:3C:05:71
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:53:19:da:f2:15:5f:73:aa:02:66:c3:38:a9:94:b1:68:
         62:c4:e0:47:a7:58:7c:51:48:84:9a:5e:ad:7a:44:32:dc:21:
         3d:98:28:a6:ba:40:2c:80:03:65:79:64:c3:b0:7f:06:d6:17:
         a2:f3:29:e9:e1:89:84:68:da:95:72:33:d9:f6:75:5b:6f:31:
         0d:b5:d9:17:19:b4:a0:2e:de:c2:4d:14:1d:66:d3:06:2b:6f:
         fd:62:f8:44:73:5b:4f:be:06:42:0a:9a:a5:0b:8b:85:57:37:
         f3:ac:ad:51:0d:bd:f1:be:8d:c1:3b:51:12:e3:72:33:7c:ae:
         21:d4:fc:67:b8:62:f7:26:d6:c5:36:1b:86:38:83:f4:ec:97:
         2e:86:1a:60:d5:04:43:c4:02:94:a0:4d:eb:c4:fb:1a:46:bb:
         f7:02:95:79:7e:18:99:2d:5a:39:3b:3e:66:30:09:dd:2e:44:
         0f:4a:88:5b:fe:16:49:73:bd:54:8d:f7:3c:b0:73:95:5d:9b:
         8f:af:7f:9f:da:b1:1d:81:ca:98:d4:7c:a5:31:3f:f6:68:4c:
         8e:69:71:cc:58:7a:d6:75:29:49:e7:ec:1f:3d:56:5f:06:48:
         5a:3f:3d:cb:98:18:a9:22:48:17:7f:fa:43:b2:83:04:9a:c3:
         33:05:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:53:24 2025 by rpki-client