Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e302e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          0YA9W11+BLMf7UUYzNvTmKgPBbjeLpXzYwf2loUp6wI=
Subject key identifier:   92:66:B6:01:94:EA:4D:D4:91:87:C2:C3:A5:25:8B:C5:0E:34:3C:7C
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       430E33F219D73424D861B7C399E827955C1A145E
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32332d3233203d3e203533313536.roa
Signing time:             Thu 03 Apr 2025 22:33:22 +0000
ROA not before:           Thu 03 Apr 2025 22:28:22 +0000
ROA not after:            Thu 02 Apr 2026 22:33:22 +0000
asID:                     53156
IP address blocks:        186.211.0.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 11:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0e:33:f2:19:d7:34:24:d8:61:b7:c3:99:e8:27:95:5c:1a:14:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  3 22:28:22 2025 GMT
            Not After : Apr  2 22:33:22 2026 GMT
        Subject: CN=9266B60194EA4DD49187C2C3A5258BC50E343C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:00:fa:74:b5:1f:08:d2:d4:53:44:6c:37:
                    5f:a7:ad:78:4f:b0:47:e9:a0:d8:49:88:18:54:db:
                    59:4a:ca:19:bf:59:6d:58:5f:74:8d:5b:7c:ff:c9:
                    27:e2:af:f7:46:8a:4b:3b:01:7b:61:5d:76:23:21:
                    89:ea:e3:c0:ea:a1:9e:5d:56:67:20:b3:48:3b:f7:
                    18:6b:96:c5:2f:06:20:69:5f:c5:ba:8c:13:a8:1a:
                    dc:b3:e4:ce:c3:23:e6:11:da:67:c5:29:a0:96:5c:
                    9e:5b:8c:e5:8f:62:ca:b4:fc:b5:f7:6c:b7:e5:ac:
                    28:39:f8:6a:e9:91:ff:34:c7:e2:71:3a:75:36:e3:
                    3c:7a:66:e5:24:8b:14:06:58:a5:03:28:11:3f:7e:
                    eb:38:9a:59:2e:1c:9f:51:ba:c4:9b:22:dd:42:45:
                    5c:87:f7:00:fe:a1:96:cb:1f:8c:b0:a8:e6:c6:b2:
                    2c:95:19:94:f3:ab:c5:04:a8:3a:85:ae:ed:40:1b:
                    ea:3a:57:97:06:b5:69:15:ad:65:9f:7b:a1:9d:b1:
                    b5:99:45:0f:85:06:e9:70:59:3a:7a:9a:9d:ab:ef:
                    1b:8d:b8:64:f5:bf:80:da:52:a4:70:07:dd:2a:b3:
                    45:b4:51:6a:2d:b0:b1:9b:88:26:54:ce:6f:76:88:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:B6:01:94:EA:4D:D4:91:87:C2:C3:A5:25:8B:C5:0E:34:3C:7C
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e302e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:f3:4d:7c:be:73:ad:20:d1:af:4f:20:d7:93:f2:2c:77:
         50:26:36:45:ee:81:e1:44:06:d8:9b:8a:f2:c6:18:f3:7a:5a:
         78:64:64:94:0f:84:a6:96:dd:20:7a:16:ab:a4:c5:fc:5d:01:
         31:50:f1:28:c3:3f:f0:ac:e3:92:e8:e7:ea:75:05:8e:87:55:
         6a:b5:fa:83:e7:d2:f9:0d:fa:5e:ad:85:4d:e7:7f:d9:d3:9e:
         5f:ea:b5:ed:79:ec:2d:07:66:48:25:4c:7f:e7:d6:7b:35:54:
         dd:a1:85:6c:33:6a:44:23:05:9e:33:17:ff:79:7c:51:ba:df:
         74:72:dd:22:95:05:0d:28:2b:90:79:2e:d3:67:b4:5d:16:28:
         ec:d5:1b:81:1e:43:43:d4:c2:a9:b9:96:29:ac:94:14:93:b2:
         e4:e5:64:e9:84:42:8a:7b:64:c4:48:c0:2a:ce:7b:46:79:b8:
         e6:e9:15:40:26:3a:52:74:20:ac:f7:d2:61:30:d4:68:3c:e2:
         89:8e:bf:7a:9e:e4:b3:c6:55:76:84:fc:c5:5b:de:c8:23:4a:
         b1:0a:8c:50:1a:0b:43:c7:88:9f:16:c8:35:8f:b0:e5:d0:61:
         38:c9:60:09:11:33:9d:39:7f:16:f4:2f:68:b6:dd:47:19:10:
         4f:a2:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:04:49 2025 by rpki-client