Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a383030303a3a2f33332d3333203d3e20323633323736.roa
File:                     323830343a313633383a383030303a3a2f33332d3333203d3e20323633323736.roa (raw, json)
Hash identifier:          LGBN9pDkv82xjvzZX/keajndLYdJB5q96DiJbgft4w4=
Subject key identifier:   19:25:DD:C8:23:87:79:7F:59:6F:5E:36:86:8D:E2:90:32:61:4D:41
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       2BE27A8A889C86D994381B47BBF86FF3B80B98A1
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a383030303a3a2f33332d3333203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:03:00 +0000
ROA not before:           Wed 07 Oct 2026 18:58:00 +0000
ROA not after:            Wed 06 Oct 2027 19:03:00 +0000
asID:                     263276
IP address blocks:        2804:1638:8000::/33 maxlen: 33
Validation:               Failed, certificate revoked on Tue 20 Oct 2026 17:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e2:7a:8a:88:9c:86:d9:94:38:1b:47:bb:f8:6f:f3:b8:0b:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:58:00 2026 GMT
            Not After : Oct  6 19:03:00 2027 GMT
        Subject: CN=1925DDC82387797F596F5E36868DE29032614D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:8e:e7:19:12:4b:e2:4a:41:64:c4:b5:96:
                    d8:93:3f:1b:30:0f:3d:b8:f6:7e:47:b0:b6:38:d7:
                    f7:1a:d8:eb:e4:ac:74:a8:78:85:1a:c2:25:a4:69:
                    35:e8:f9:6c:ac:ba:cb:17:fc:d5:e5:b6:cf:f1:6b:
                    97:0a:ef:e8:f4:91:48:90:07:af:47:d4:28:41:2e:
                    22:58:b2:c0:fc:58:30:9d:5e:fe:5f:14:71:5f:67:
                    4e:93:4c:ab:e1:ae:7e:f0:5d:21:b3:f1:bb:d7:84:
                    29:a7:60:fc:a0:3c:00:fd:75:56:7c:06:b0:d1:8d:
                    e3:d1:d2:df:0b:a0:c4:9f:dc:38:cc:04:9e:f2:93:
                    9a:4d:6a:31:07:bc:99:5a:b1:50:b2:55:d4:5b:ba:
                    55:e2:02:d4:7f:3f:55:49:dd:88:67:d7:c1:35:c1:
                    e6:fc:33:6d:d9:8e:3c:97:47:c9:bd:8d:c3:d0:0a:
                    eb:67:c5:9a:90:ee:ec:ad:ca:df:c1:26:74:80:65:
                    5f:78:df:bf:b9:f6:d7:b4:01:ae:c2:80:e7:51:c8:
                    dc:1f:f1:5a:95:78:54:0f:21:14:1b:b1:ca:9e:ca:
                    b9:25:5e:15:ba:df:0a:bd:e6:e6:63:ea:29:9c:b3:
                    57:41:02:c9:a6:38:c2:0c:8c:d6:48:41:a3:f7:f8:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:DD:C8:23:87:79:7F:59:6F:5E:36:86:8D:E2:90:32:61:4D:41
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a383030303a3a2f33332d3333203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         cb:4d:e8:79:93:43:3d:28:76:1f:77:92:f8:e8:93:2c:41:4e:
         d5:5d:23:c0:2c:0b:84:99:79:79:c1:c5:db:f9:59:3a:0a:77:
         db:b8:4b:ea:92:8a:39:ac:83:a7:b8:e0:77:d6:d1:cc:80:0a:
         44:b8:2e:6b:5d:73:7b:83:ab:e8:ae:30:6b:e7:21:64:2c:e9:
         6d:99:d5:db:56:83:62:7b:f5:c4:c9:d1:f0:b9:1c:8d:9d:8e:
         ed:78:5d:a3:22:95:cc:59:e8:e5:23:00:67:40:a4:1f:fb:77:
         b4:38:1d:61:17:60:f1:77:fb:b3:8c:79:a5:39:4a:8d:40:56:
         c5:62:13:41:cf:58:00:41:71:27:84:e0:c5:25:f2:62:6c:10:
         a6:bf:0d:24:4d:14:dc:99:3a:0b:3c:7b:36:32:3b:41:9d:3c:
         8a:c9:4b:6b:82:b5:d6:ae:00:4f:9a:e5:ca:7c:c5:33:fa:37:
         aa:7d:7e:f6:a5:11:9f:ea:4e:08:02:df:23:70:0e:db:5e:82:
         ed:13:a1:6d:2f:7a:af:33:88:a6:cb:03:7c:51:59:ae:6d:7e:
         2d:0b:8b:ab:2e:7f:12:31:d2:9e:38:ec:fb:fd:51:f7:ed:77:
         ba:87:00:0c:96:fa:b5:19:f2:eb:f5:a0:dc:93:46:28:17:c1:
         91:b3:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:54:26 2026 by rpki-client