Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa
File:                     3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          O0q6Kyed7mAb7WGz/gIb7bM36NG0Ds1CEz/USbDAuto=
Subject key identifier:   9E:0F:AB:BC:4E:16:54:74:31:36:8F:D6:4C:AC:4F:1F:AB:85:49:26
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       6F21CA0930998FB25C9EF55875623FF5D72E4911
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa
Signing time:             Wed 03 Sep 2025 16:41:13 +0000
ROA not before:           Wed 03 Sep 2025 16:36:13 +0000
ROA not after:            Wed 02 Sep 2026 16:41:13 +0000
asID:                     269359
IP address blocks:        168.194.251.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 03 Sep 2025 20:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:21:ca:09:30:99:8f:b2:5c:9e:f5:58:75:62:3f:f5:d7:2e:49:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Sep  3 16:36:13 2025 GMT
            Not After : Sep  2 16:41:13 2026 GMT
        Subject: CN=9E0FABBC4E16547431368FD64CAC4F1FAB854926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:b4:de:ae:25:e1:b2:d5:46:48:60:2e:a7:
                    c3:be:ac:26:8d:20:e2:c1:92:52:eb:15:c8:27:63:
                    04:28:b7:ce:4d:21:92:03:5d:05:56:ca:a4:f1:28:
                    7b:ac:11:d6:06:56:1e:da:06:e8:7f:8e:db:d7:75:
                    7b:08:48:f3:9c:69:0b:07:b4:54:fe:0e:fe:93:f4:
                    c9:bf:5b:80:84:5a:76:db:fc:78:e5:e9:29:ea:31:
                    3a:6d:c9:94:49:61:24:f1:0c:49:64:82:71:9b:41:
                    a6:5a:8e:33:e0:e7:e3:2c:36:73:7a:b9:19:c2:53:
                    3a:d6:59:36:36:80:a4:fe:a1:ff:7a:3d:6d:50:87:
                    eb:cd:c6:3d:0f:e9:34:03:1a:01:ef:14:55:17:88:
                    13:12:30:0f:05:26:e2:a5:ed:08:63:64:0c:de:a4:
                    f2:4b:2a:0d:c6:60:23:9a:d1:e0:28:84:93:53:4d:
                    b1:fd:c9:d2:a8:0e:a4:ff:6c:e3:3d:7b:33:d7:7f:
                    2b:b3:5a:f2:8c:d7:09:bc:a1:bb:36:be:1d:43:53:
                    ee:a2:67:30:3d:79:f2:23:ab:92:80:a9:34:2f:bc:
                    e4:f7:f5:36:8f:b9:ca:2c:49:90:d7:e5:cb:22:a4:
                    77:cf:48:c1:8a:5f:73:bf:f5:89:93:5a:6f:73:e7:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0F:AB:BC:4E:16:54:74:31:36:8F:D6:4C:AC:4F:1F:AB:85:49:26
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235312e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:70:13:3a:39:15:38:32:e3:3d:01:d7:76:5e:e7:f0:b6:
         b1:d6:48:fe:55:6d:f4:8d:f8:67:a2:29:38:18:b3:5e:02:d3:
         7f:e1:28:ec:59:46:35:6c:53:d7:3b:df:bd:5b:32:71:c8:8c:
         50:83:4d:21:21:89:c8:29:0f:b4:29:4a:b6:f4:f3:1a:c8:8d:
         b0:7e:26:69:40:2a:36:28:a1:33:71:a4:fa:62:a5:df:a7:56:
         53:36:94:dd:82:be:14:0b:9c:03:c9:8e:3e:4c:16:f9:75:10:
         c3:14:01:cd:9d:3c:9c:b0:a7:3e:b4:7a:2b:a5:2b:4d:6d:2f:
         77:39:37:5c:97:1d:17:80:b6:a4:16:f6:13:ae:b4:1d:af:14:
         ab:2e:c3:4e:6a:a3:32:a3:a7:1c:4a:83:fb:f6:83:1c:47:fd:
         33:2e:e0:a5:ef:a0:66:34:c1:73:21:4d:9c:d1:e1:46:60:f2:
         b0:35:df:a8:63:10:3b:32:91:be:77:0f:22:cc:df:14:92:73:
         80:32:4c:af:a7:ed:78:8e:76:28:54:a6:58:13:30:b2:4a:60:
         2b:42:3a:bb:93:56:24:8d:71:f7:c6:33:aa:35:39:9f:09:7f:
         02:20:39:28:52:90:7e:da:eb:bb:6f:f2:ea:17:d5:24:d9:9b:
         16:74:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:53:19 2025 by rpki-client