Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32302d3332203d3e203533313536.roa
File:                     3138362e3231312e302e302f32302d3332203d3e203533313536.roa (raw, json)
Hash identifier:          HthHJRt7fiMb+bTucheDUYQRv4e13cG70LNU2yaku98=
Subject key identifier:   7D:A5:DE:69:DF:B6:E9:BF:99:30:84:1A:37:7C:D7:C1:97:12:FA:CB
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       1577AEA2E79332BFC43E0E47B34770505238019D
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32302d3332203d3e203533313536.roa
Signing time:             Thu 03 Apr 2025 22:35:33 +0000
ROA not before:           Thu 03 Apr 2025 22:30:33 +0000
ROA not after:            Thu 02 Apr 2026 22:35:33 +0000
asID:                     53156
IP address blocks:        186.211.0.0/20 maxlen: 32
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 11:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:77:ae:a2:e7:93:32:bf:c4:3e:0e:47:b3:47:70:50:52:38:01:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  3 22:30:33 2025 GMT
            Not After : Apr  2 22:35:33 2026 GMT
        Subject: CN=7DA5DE69DFB6E9BF9930841A377CD7C19712FACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:4f:9c:b1:9f:6c:5b:23:13:a7:e2:19:b8:
                    73:c9:f4:84:ce:97:f1:28:39:c4:a3:96:f0:2c:d0:
                    1e:4f:e2:cb:d3:10:1e:6e:5a:d3:fb:3a:3f:37:9e:
                    8c:c5:b3:b7:5f:54:4f:6d:e2:81:b5:96:61:de:8f:
                    c1:a3:46:7f:8b:10:75:15:61:52:c1:fa:b5:87:80:
                    fd:7c:ac:ba:0a:a4:bd:d9:80:da:8b:fd:d9:16:d8:
                    60:f0:05:28:e7:a8:3c:8c:c0:a0:55:25:c8:d8:33:
                    e7:9f:64:f5:f0:ce:ef:49:c4:c2:1e:95:41:18:be:
                    f4:26:26:75:d2:6c:20:43:82:d3:41:ed:ee:fe:e9:
                    a6:0f:68:e3:59:b3:c3:95:ca:a2:5a:97:82:ad:b7:
                    31:80:f5:b7:5e:df:60:9d:de:4e:79:d5:d3:b8:70:
                    55:c4:7d:fc:5b:8c:99:ce:d0:19:65:c0:5c:49:e3:
                    aa:45:c8:f3:40:9b:57:8c:94:a4:5c:48:d8:35:b3:
                    87:26:32:f2:cf:50:75:76:08:4e:fb:b4:aa:8e:61:
                    7e:a6:d0:ad:6f:67:8f:8c:75:e6:bf:55:64:5e:8a:
                    cc:6c:0f:bf:22:f9:b4:24:ec:1e:c8:5b:a4:cf:4c:
                    36:d7:1e:0a:4d:33:76:bb:62:b3:14:d6:5f:91:0f:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:DE:69:DF:B6:E9:BF:99:30:84:1A:37:7C:D7:C1:97:12:FA:CB
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32302d3332203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:f9:82:c1:f1:c0:cf:64:6f:53:3f:01:9c:e5:c1:5e:72:
         9a:42:3d:66:77:cc:a1:7e:91:87:b2:c4:65:df:ec:fa:22:5a:
         1e:a5:cf:42:9f:34:81:e4:95:50:fd:80:87:68:10:ed:71:a7:
         dc:15:5a:e2:d7:c8:9c:0f:c0:90:d5:e1:95:a0:1f:71:cd:6f:
         4d:b2:02:f0:c0:26:89:4b:fc:00:ae:85:7e:f6:0a:16:57:fc:
         de:66:fc:5d:ce:a6:25:74:bd:c8:32:94:1b:07:40:dd:a0:b7:
         9b:d5:5a:3a:0f:da:b8:02:64:92:db:22:5d:82:6a:e1:60:8c:
         4b:b7:4a:d4:0a:28:f7:24:73:54:93:27:6b:4b:3a:d0:24:51:
         0e:99:a2:9d:be:7c:e5:5e:6b:2e:4b:a0:93:5c:93:36:ae:db:
         be:20:85:b8:05:78:a9:32:17:e6:ea:2c:cc:da:2e:73:0a:53:
         5b:1a:56:98:d9:26:41:dd:64:9b:1f:52:4f:ea:25:e5:6b:cd:
         3d:ab:e9:52:e4:00:78:73:7a:74:3a:38:89:71:74:76:e2:8a:
         8d:0a:50:f7:9d:c6:2a:d8:71:1f:e9:50:4e:34:75:fe:b0:d6:
         cc:22:bc:50:b6:52:b7:81:63:cd:c6:40:b9:67:70:a4:16:9a:
         44:09:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:04:33 2025 by rpki-client