Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138362e302f32332d3233203d3e203532363730.roa
File:                     3137372e36372e3138362e302f32332d3233203d3e203532363730.roa (raw, json)
Hash identifier:          kbLZPx67p0Yejt1145ROvqRRZ9WqZiH84LxXGnSuzT0=
Subject key identifier:   45:C4:47:29:A8:8E:53:F6:E7:12:A2:9A:1B:B3:44:93:B1:F4:5A:95
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       2579B96CFC619149E96368D4D8667F1E64AF1FD3
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138362e302f32332d3233203d3e203532363730.roa
Signing time:             Tue 20 Jan 2026 13:13:28 +0000
ROA not before:           Tue 20 Jan 2026 13:08:28 +0000
ROA not after:            Tue 19 Jan 2027 13:13:28 +0000
asID:                     52670
IP address blocks:        177.67.186.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 20 Jan 2026 13:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:79:b9:6c:fc:61:91:49:e9:63:68:d4:d8:66:7f:1e:64:af:1f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Jan 20 13:08:28 2026 GMT
            Not After : Jan 19 13:13:28 2027 GMT
        Subject: CN=45C44729A88E53F6E712A29A1BB34493B1F45A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:ca:b2:8e:10:e4:f4:30:87:d3:b1:f6:72:
                    52:3a:fe:3b:1a:2b:f8:7f:c0:56:75:c5:ce:0a:31:
                    f0:86:16:ea:9a:47:31:97:6d:e6:62:94:15:ff:7b:
                    3b:89:38:8c:dd:06:fc:17:a2:2b:9f:f6:f4:04:f3:
                    d0:ff:54:20:b5:e0:03:60:e3:e0:ca:62:a4:9e:ae:
                    cb:35:ea:d2:6c:24:ca:e1:84:af:f5:9e:81:e9:26:
                    62:4b:02:86:c3:f7:0b:7a:3f:41:55:ab:63:5a:8a:
                    b7:45:33:f9:6b:fb:79:3b:89:66:7d:55:9d:63:4c:
                    64:f1:a1:95:90:01:fe:7d:e5:5d:0a:bd:28:5f:db:
                    21:63:8c:c1:c1:8e:a4:fa:67:41:bd:bd:95:a4:d8:
                    e9:be:87:b9:c9:b9:da:5d:89:fe:0c:fb:e0:e4:e8:
                    5b:81:d5:c7:6f:f4:1c:82:64:5f:2d:94:48:92:94:
                    cd:d3:79:a6:79:db:d0:1a:a9:1f:83:4f:2c:e6:0f:
                    09:ea:3e:67:af:49:db:4b:1c:62:f9:99:4b:d6:b9:
                    a4:90:e4:da:4f:dd:09:ab:bf:7a:58:89:71:61:3d:
                    95:37:c0:9a:93:f4:69:41:74:6c:e8:8f:9b:86:cd:
                    fc:72:53:68:47:78:c8:e4:f1:9f:be:7e:8a:81:c3:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C4:47:29:A8:8E:53:F6:E7:12:A2:9A:1B:B3:44:93:B1:F4:5A:95
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138362e302f32332d3233203d3e203532363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:f4:27:1d:27:ad:92:66:58:a9:b2:2f:21:37:9d:0d:79:f3:
         9b:11:ee:2f:bf:cb:a0:ae:e6:04:05:f1:d6:4c:31:62:a2:ec:
         94:bf:0f:9f:7d:68:4d:bd:cd:03:b5:6a:84:d9:b2:46:63:a4:
         c9:fb:1b:2f:e0:60:ca:dd:7e:52:e7:3e:45:c2:3c:66:71:28:
         09:60:da:9f:82:8c:8a:d0:bb:9b:bd:1d:21:c6:a8:fc:17:ad:
         14:68:35:47:8f:0b:ff:e2:0c:a4:31:b5:46:53:e3:ce:ff:57:
         a0:0c:c4:78:b3:ea:66:41:ac:5f:13:81:df:2c:04:85:59:63:
         77:75:50:73:30:65:78:39:be:77:6f:0f:bb:98:96:c0:58:af:
         50:7c:2b:78:9c:4e:6a:0b:36:f9:2a:9d:d9:33:bf:d7:78:a9:
         09:e0:34:eb:12:8c:d9:7d:cb:a4:46:a5:30:c8:1e:fe:4f:98:
         0d:46:75:bc:0b:c4:d2:fd:3e:1b:73:df:6f:8c:2a:e3:ec:bd:
         8c:24:1b:27:e6:37:0d:9b:48:d8:1b:49:4c:3d:af:fe:f9:a8:
         67:2a:91:11:fc:de:52:bb:81:e4:84:6b:32:a3:f4:5a:3c:99:
         f7:d4:72:0b:2a:e4:68:b1:a7:15:94:97:78:e1:46:90:e5:19:
         88:7f:bc:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJXm5bPxhkUnpY2jU2GZ/HmSvH9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRUE0MDRBRkRBQzdENUE5QTE3NTVGM0EyN0ZGNUNB
RTEyREE3QjAeFw0yNjAxMjAxMzA4MjhaFw0yNzAxMTkxMzEzMjhaMDMxMTAvBgNV
BAMTKDQ1QzQ0NzI5QTg4RTUzRjZFNzEyQTI5QTFCQjM0NDkzQjFGNDVBOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJfcqyjhDk9DCH07H2clI6/jsa
K/h/wFZ1xc4KMfCGFuqaRzGXbeZilBX/ezuJOIzdBvwXoiuf9vQE89D/VCC14ANg
4+DKYqSerss16tJsJMrhhK/1noHpJmJLAobD9wt6P0FVq2NairdFM/lr+3k7iWZ9
VZ1jTGTxoZWQAf595V0KvShf2yFjjMHBjqT6Z0G9vZWk2Om+h7nJudpdif4M++Dk
6FuB1cdv9ByCZF8tlEiSlM3TeaZ529AaqR+DTyzmDwnqPmevSdtLHGL5mUvWuaSQ
5NpP3Qmrv3pYiXFhPZU3wJqT9GlBdGzoj5uGzfxyU2hHeMjk8Z++foqBw4UBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURcRHKaiOU/bnEqKaG7NEk7H0WpUwHwYDVR0j
BBgwFoAU6a6kBK/ax9WpoXVfOif/XK4S2nswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2
VHYvMC9FOUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVBNDA0QUZEQUM3RDVB
OUExNzU1RjNBMjdGRjVDQUUxMkRBN0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NTQnRFV20ya0ViRXNFaXlaWGZURjJiYzE0aVR6Q3ptTThTVGloMWpKdlR2LzAv
MzEzNzM3MmUzNjM3MmUzMTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUO6MA0GCSqGSIb3DQEBCwUAA4IBAQA89CcdJ62S
Zlipsi8hN50NefObEe4vv8ugruYEBfHWTDFiouyUvw+ffWhNvc0DtWqE2bJGY6TJ
+xsv4GDK3X5S5z5FwjxmcSgJYNqfgoyK0LubvR0hxqj8F60UaDVHjwv/4gykMbVG
U+PO/1egDMR4s+pmQaxfE4HfLASFWWN3dVBzMGV4Ob53bw+7mJbAWK9QfCt4nE5q
Czb5Kp3ZM7/XeKkJ4DTrEozZfcukRqUwyB7+T5gNRnW8C8TS/T4bc99vjCrj7L2M
JBsn5jcNm0jYG0lMPa/++ahnKpER/N5Su4HkhGsyo/RaPJn31HILKuRosacVlJd4
4UaQ5RmIf7xQ
-----END CERTIFICATE-----
Generated at Sun Apr 12 23:41:56 2026 by rpki-client