Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138342e302f32322d3232203d3e203532363730.roa
File:                     3137372e36372e3138342e302f32322d3232203d3e203532363730.roa (raw, json)
Hash identifier:          TLF8G/VPC8nt8l+vGGR6jpjnUUMWZ+hiH+fP6qGSGm0=
Subject key identifier:   0C:FE:C8:F1:3E:92:C1:19:94:93:22:3C:55:5F:7D:56:E4:D6:33:A4
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       13C7D414D12806D072F14ABA2CEF0B796A049821
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138342e302f32322d3232203d3e203532363730.roa
Signing time:             Tue 20 Jan 2026 13:13:26 +0000
ROA not before:           Tue 20 Jan 2026 13:08:26 +0000
ROA not after:            Tue 19 Jan 2027 13:13:26 +0000
asID:                     52670
IP address blocks:        177.67.184.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 20 Jan 2026 13:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c7:d4:14:d1:28:06:d0:72:f1:4a:ba:2c:ef:0b:79:6a:04:98:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Jan 20 13:08:26 2026 GMT
            Not After : Jan 19 13:13:26 2027 GMT
        Subject: CN=0CFEC8F13E92C1199493223C555F7D56E4D633A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:1b:e0:15:89:c5:16:18:d1:42:39:e4:75:
                    71:96:e8:f2:0c:15:bd:dd:d5:5d:01:bf:14:9b:91:
                    3c:71:73:1c:65:9a:9a:37:84:5d:a5:1d:04:fa:fd:
                    72:a8:dd:6c:02:6e:fb:c5:d9:e0:dc:29:f4:9a:b4:
                    aa:81:cb:cb:43:ab:09:96:8e:53:c4:a5:cd:cd:18:
                    0e:dc:3b:bd:42:79:33:ed:22:06:2a:94:18:d5:58:
                    09:65:a2:0c:ab:8f:fd:6d:df:f5:05:34:40:15:1d:
                    71:e1:bc:c4:d5:4e:65:9b:0c:a3:1e:8c:3a:9b:d9:
                    b7:d2:68:83:63:80:2a:f0:a3:7f:3f:a2:19:cf:96:
                    4b:b6:5e:8c:a1:05:0e:f0:f0:84:33:4f:22:00:98:
                    ab:4f:66:22:99:79:5b:8f:3b:91:b7:8b:3d:b9:ee:
                    ed:41:d7:11:6d:be:83:39:26:e0:9d:4d:9c:88:27:
                    13:f7:c5:d9:f4:b0:92:13:fe:3c:b2:e2:0c:2e:03:
                    4d:6e:d3:1e:a2:ab:9e:1c:99:9b:a2:ce:3b:0a:6b:
                    e0:ac:74:74:c9:3b:c3:d5:0a:4e:87:d6:62:b2:dd:
                    3d:80:65:e5:85:c8:69:da:5d:69:79:95:16:e2:8c:
                    a6:b2:ca:c3:70:3a:0f:cc:ef:37:3f:aa:7d:49:90:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:C8:F1:3E:92:C1:19:94:93:22:3C:55:5F:7D:56:E4:D6:33:A4
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138342e302f32322d3232203d3e203532363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:04:86:59:5d:d6:f5:48:21:f0:7e:ab:bf:fa:be:a5:38:32:
         26:97:25:b5:ca:fd:d2:79:18:66:7a:79:79:15:43:5a:2b:73:
         b3:73:fe:d0:a5:7e:ea:79:05:30:9e:51:b5:7a:42:fd:73:ee:
         71:97:33:b5:f5:e7:fc:d4:8b:8d:68:86:d7:91:04:e4:db:fd:
         7a:73:4f:16:40:52:5c:e4:5a:3a:12:3d:ba:60:3b:9c:96:d4:
         42:c4:0c:66:e3:c8:21:69:ab:73:a1:b8:31:cb:54:af:b8:30:
         4e:50:4e:ee:0b:84:80:ae:ab:9e:bc:48:09:09:03:8a:4b:78:
         30:6f:33:3b:9f:da:d4:f8:7e:7a:7c:72:32:ac:db:f6:69:04:
         92:ae:f8:5d:b2:62:5a:a6:57:fe:46:b2:33:6a:88:26:aa:0f:
         59:e2:39:13:30:62:d9:b3:53:93:a1:71:a1:d6:13:5f:90:da:
         0f:6a:73:90:89:60:55:f6:6c:56:9e:a7:dc:e2:5f:a9:c3:0e:
         fc:71:ba:5f:8c:24:23:c3:38:c9:3b:e2:92:4e:70:b4:cf:ec:
         e4:0b:77:63:2e:39:d0:60:ce:bd:b6:a9:7a:81:70:39:47:db:
         fa:af:00:7c:8c:93:0b:81:75:36:2f:1a:bc:27:df:0e:64:c7:
         b1:bd:b7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 23:41:55 2026 by rpki-client