Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136362e302f32342d3234203d3e203532363730.roa
File:                     3137302e38322e3136362e302f32342d3234203d3e203532363730.roa (raw, json)
Hash identifier:          1b4Aox3QGnZ+pWmfMbLxo441VUy8mRcmUd8gXR65ZDI=
Subject key identifier:   14:BD:30:0B:A4:0F:FE:0E:41:9C:7F:2D:52:0C:02:E2:BC:07:B1:43
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       2D584A3A561FCF9379A7C51B96D8FD3A59324186
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136362e302f32342d3234203d3e203532363730.roa
Signing time:             Tue 20 Jan 2026 13:22:19 +0000
ROA not before:           Tue 20 Jan 2026 13:17:19 +0000
ROA not after:            Tue 19 Jan 2027 13:22:19 +0000
asID:                     52670
IP address blocks:        170.82.166.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 20 Jan 2026 13:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:58:4a:3a:56:1f:cf:93:79:a7:c5:1b:96:d8:fd:3a:59:32:41:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Jan 20 13:17:19 2026 GMT
            Not After : Jan 19 13:22:19 2027 GMT
        Subject: CN=14BD300BA40FFE0E419C7F2D520C02E2BC07B143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:42:76:ed:08:c2:d0:de:db:12:16:fd:42:
                    93:b2:f0:e7:39:53:6a:bc:8f:04:5c:af:15:0b:99:
                    a4:d3:e5:8c:ad:b4:c9:15:9a:d6:24:b2:5e:64:cb:
                    f6:00:06:a9:76:0b:ee:6b:a1:97:8c:75:cd:83:fe:
                    d0:2c:4b:bf:9f:88:1d:00:f4:ee:b5:f8:9f:cf:48:
                    0c:15:44:8c:5f:47:38:a1:40:8f:aa:95:ca:d4:88:
                    f8:0a:09:c4:2a:96:a6:94:7f:81:ed:f9:de:9c:61:
                    74:14:53:73:39:ef:be:59:25:56:0c:ef:5c:db:a3:
                    45:99:9d:07:32:2f:4d:4d:3a:23:a5:a8:0e:d1:a3:
                    8b:01:da:ea:7c:d2:ce:79:08:9b:0f:1b:46:81:13:
                    01:61:b4:49:50:1f:bc:f2:8b:25:3f:2b:18:03:c8:
                    ae:23:a1:78:4b:35:85:d0:68:b2:2c:36:25:1f:b7:
                    a7:3e:8a:7e:e1:36:7a:54:cd:43:fb:d5:36:bb:27:
                    e4:03:8e:a6:0b:5c:88:25:bb:3d:2d:ed:70:d7:26:
                    99:22:35:0a:26:3f:7e:5b:25:86:8f:5c:73:cd:73:
                    7a:7b:80:17:4d:66:3c:6d:79:36:e2:b0:84:ea:29:
                    60:9b:c8:2f:cf:c1:b0:52:f9:50:4d:bb:b1:f7:3a:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:30:0B:A4:0F:FE:0E:41:9C:7F:2D:52:0C:02:E2:BC:07:B1:43
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136362e302f32342d3234203d3e203532363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:52:23:f9:41:4e:8f:f3:8e:90:38:36:12:ef:37:d5:6b:
         96:94:0a:e5:4b:d3:dd:f6:93:a0:44:d6:d1:f2:e0:62:4c:e0:
         61:d2:8c:b4:8f:56:0b:b5:ae:d7:74:4d:1f:41:da:85:8c:09:
         8a:4d:fd:24:a8:22:29:41:36:ca:7b:c1:49:a5:e0:60:a3:df:
         7c:90:b0:4d:fd:cb:92:80:8f:f3:e4:08:91:33:54:de:1a:5b:
         61:d2:7a:cc:9e:36:06:c2:04:5c:b7:69:cb:85:a0:39:7e:21:
         ea:72:45:d9:92:0c:7a:9d:33:0f:1e:34:39:4b:3d:a3:7a:f5:
         66:59:55:72:e3:07:45:41:0d:a5:ce:7f:4f:63:e5:c7:96:c8:
         da:94:08:f6:82:ea:f8:a7:4e:3f:de:09:71:35:ef:68:ea:6f:
         94:c4:bf:bd:36:83:6c:cf:dd:01:39:95:f3:1c:f8:6a:cf:38:
         91:c3:12:dd:4d:32:d8:d5:7b:ca:f5:47:fb:de:07:c5:ba:7b:
         c3:64:d5:46:00:99:b6:fd:52:05:2a:a7:ed:55:db:68:eb:22:
         46:8b:09:61:4c:10:ff:34:1b:47:ff:ac:bf:4f:d2:48:05:3c:
         5b:57:0d:f4:9c:4d:a6:6d:c7:69:d0:25:62:75:ca:8a:11:fe:
         01:af:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 23:41:52 2026 by rpki-client