Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3332203d3e20323639313832.roa
File:                     323830343a363061383a3a2f33322d3332203d3e20323639313832.roa (raw, json)
Hash identifier:          x8MXc94ZIH2nhwE+WPekA5SX6mus0uBlklmlTrpFOEY=
Subject key identifier:   D5:11:36:E6:D5:B7:84:B7:6A:49:AC:5B:96:23:8D:FB:BA:79:60:71
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       1D148186B11B93BCB02CBE8BC45F8CAD7CA0730D
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3332203d3e20323639313832.roa
Signing time:             Wed 02 Sep 2026 14:06:33 +0000
ROA not before:           Wed 02 Sep 2026 14:01:33 +0000
ROA not after:            Wed 01 Sep 2027 14:06:33 +0000
asID:                     269182
IP address blocks:        2804:60a8::/32 maxlen: 32
Validation:               Failed, certificate revoked on Sun 11 Oct 2026 11:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:14:81:86:b1:1b:93:bc:b0:2c:be:8b:c4:5f:8c:ad:7c:a0:73:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Sep  2 14:01:33 2026 GMT
            Not After : Sep  1 14:06:33 2027 GMT
        Subject: CN=D51136E6D5B784B76A49AC5B96238DFBBA796071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:7b:e9:62:25:ff:dd:77:81:3a:b6:86:d3:
                    cf:77:a2:9c:65:21:d9:cc:6c:21:48:17:e3:6d:b9:
                    37:bf:f6:56:a3:80:83:81:12:e5:b8:d6:40:7a:0f:
                    a2:f5:a6:be:7b:5c:1c:19:18:e6:e5:9d:7d:b5:0f:
                    52:33:86:fa:08:66:d6:70:fc:35:de:54:ed:8b:03:
                    24:fe:de:7e:73:e8:12:48:9a:e9:dc:8a:a6:8b:ed:
                    fb:a0:e4:3a:16:a7:65:31:0f:05:2d:1c:12:2d:f1:
                    2f:17:8a:f5:51:75:a3:98:b1:f1:18:df:d5:a2:fe:
                    d0:d1:ae:51:93:06:f5:a6:6f:66:ce:2d:79:0e:54:
                    e2:16:d5:b6:b5:71:a2:ac:03:bf:a3:40:49:94:2c:
                    ca:3f:98:de:0e:57:b6:15:67:d6:9c:ed:d9:24:7e:
                    2a:80:bb:a7:29:99:5a:29:91:34:58:44:39:d3:84:
                    87:00:9c:22:7b:bb:73:60:35:4a:27:e5:55:27:f7:
                    60:8e:df:1a:8c:2c:57:67:c8:c0:53:c9:27:52:6c:
                    a9:01:80:27:ae:a8:e5:c3:fb:fb:20:04:4d:9f:2b:
                    f7:d8:19:60:e4:56:c7:ca:c0:72:8f:9b:99:df:84:
                    35:23:84:39:25:3c:33:f6:5e:8f:52:17:09:95:1a:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:36:E6:D5:B7:84:B7:6A:49:AC:5B:96:23:8D:FB:BA:79:60:71
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a3a2f33322d3332203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:09:e0:d9:b0:94:ee:8b:9d:42:79:8d:27:3c:0a:e8:fd:ae:
         ff:21:ae:7c:ee:45:5e:5a:a3:12:0c:6c:b4:81:e6:c4:ce:75:
         41:7b:60:20:85:5f:77:d0:03:dd:0d:ff:0d:a7:a2:85:18:75:
         9b:32:ff:5a:0d:c3:a5:09:70:af:83:de:16:d4:cc:0e:c2:fb:
         6a:ca:ea:0b:d5:c0:32:45:fc:9f:2b:8f:49:70:48:43:da:48:
         d1:a4:e4:c3:0b:68:9f:92:a6:c6:77:54:2f:4d:24:43:71:ad:
         f0:88:0f:19:7c:c1:28:af:f4:c7:a4:f3:c4:52:0f:40:a1:24:
         4d:9a:ea:ff:3c:d5:ab:ec:ac:03:88:0f:7d:1d:17:26:4a:12:
         52:c1:dc:ec:f3:4c:91:84:c1:92:74:d7:95:95:65:6f:13:44:
         22:57:06:e6:75:03:05:93:23:9f:85:a9:3a:3f:48:7a:e5:d1:
         fb:2a:a2:51:ba:b3:88:31:fd:02:29:f3:e4:aa:2d:ef:f5:e5:
         64:9a:78:a5:1b:3f:53:60:3f:ae:75:07:0d:d9:3a:12:e4:51:
         39:e7:1e:f4:7d:2b:a6:1a:55:ac:1d:be:e0:93:a2:14:ff:b8:
         18:27:42:4a:a9:d3:6c:2c:ad:7e:78:48:c2:37:a8:79:4e:f5:
         e9:c2:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:43:36 2026 by rpki-client