Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          Jr5holXi5VRitMQbtG2R1YSWSiYjBVAbTeyQYKIaeUY=
Subject key identifier:   DE:6E:10:DE:BC:90:F9:8F:41:E8:02:0D:1E:96:63:9C:DF:5D:9C:8A
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       5CD6DBFF7E08C8843B806348FEA6A966DAFF315B
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa
Signing time:             Fri 06 Feb 2026 21:00:00 +0000
ROA not before:           Fri 06 Feb 2026 20:55:00 +0000
ROA not after:            Fri 05 Feb 2027 21:00:00 +0000
asID:                     52468
IP address blocks:        2804:2b78:8039::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 05 Feb 2027 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d6:db:ff:7e:08:c8:84:3b:80:63:48:fe:a6:a9:66:da:ff:31:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb  6 20:55:00 2026 GMT
            Not After : Feb  5 21:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:27:09:d0:78:f0:c7:e1:61:0f:76:92:7c:
                    61:3b:b4:24:f8:1b:1b:a0:31:21:d0:49:de:b0:2e:
                    de:82:e1:d4:19:fa:70:48:d4:39:59:6e:5f:ed:3b:
                    66:33:01:a1:3b:74:e9:67:c9:a5:bd:d7:76:ca:89:
                    f9:de:c4:f0:b3:b5:f1:25:ce:e8:04:4f:54:de:c0:
                    eb:ea:5a:b9:d6:71:4c:04:44:ff:31:41:06:34:26:
                    8b:fb:36:8e:d1:53:ec:9f:93:e8:ab:1d:bf:84:8d:
                    c8:24:00:39:44:49:5d:a6:36:88:35:f2:45:81:a2:
                    e5:f9:32:cd:2b:ab:97:10:ec:f3:d2:c5:62:91:7c:
                    73:c0:aa:0f:e7:44:a6:5d:cb:16:82:75:66:c9:5e:
                    79:30:9b:a3:3e:e0:6a:dc:b6:d8:31:9a:47:19:cd:
                    c0:2c:34:c9:27:98:67:0f:17:20:c5:65:43:0c:47:
                    58:e8:81:08:11:82:44:9f:47:b1:09:6f:47:2e:36:
                    be:f6:4a:5b:14:c5:19:dd:07:a0:b2:81:5e:4e:4a:
                    4c:30:ed:a5:8b:bb:da:20:92:39:4b:b8:1a:f3:23:
                    a1:ff:93:aa:12:d5:8e:08:12:6f:39:4d:b9:b6:51:
                    3c:83:52:fa:ec:5f:95:2c:ac:87:c2:1d:44:43:fc:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:10:DE:BC:90:F9:8F:41:E8:02:0D:1E:96:63:9C:DF:5D:9C:8A
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/323830343a326237383a383033393a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b78:8039::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:76:da:f2:b2:31:91:14:90:f6:a4:eb:22:db:da:ef:60:c8:
         5e:07:4c:5a:3c:ce:fc:24:8c:e4:7a:a8:a3:cd:ef:42:aa:cd:
         ba:14:13:56:5f:71:bc:05:35:5a:bb:b6:a3:92:de:59:e8:4a:
         c7:e4:b4:ea:d1:95:56:cb:d4:10:52:21:b8:d2:ef:21:c4:41:
         13:c0:1c:00:86:10:6b:42:8c:fb:70:15:de:27:4a:77:e1:95:
         bd:0d:a9:83:31:15:ad:bf:0e:c4:6f:47:33:60:7a:97:90:c6:
         6d:4f:22:17:b4:8a:09:60:63:24:7b:3a:0f:49:25:52:a8:fb:
         fd:44:3c:24:2e:85:c6:80:05:e8:7f:72:56:04:43:0c:4c:78:
         e3:d8:12:7a:77:b4:60:1f:36:80:98:a5:f4:28:cc:32:a8:84:
         8e:5c:50:30:dd:55:ac:15:e6:6b:4a:e0:9b:86:1c:2a:30:35:
         02:48:04:52:36:dc:27:b2:30:3d:c3:fe:a7:0d:bb:76:eb:b1:
         42:de:12:8a:34:ce:c3:e7:77:87:90:c8:12:09:0f:6b:4e:79:
         8d:ad:69:53:8b:92:aa:12:dd:22:75:67:46:50:b3:ca:1d:af:
         3a:0d:77:48:57:a9:ff:12:ef:7c:ff:fc:f3:8d:e2:21:e3:6c:
         09:15:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:26:57 2026 by rpki-client