Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31342e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e31342e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          YxPs/GhHv4+Ao3chn3jGn5C/k3qsZlytc6kUCK5UloU=
Subject key identifier:   91:F8:65:84:2E:3B:1D:27:D5:77:3C:76:BA:38:F4:74:64:01:C2:CC
Certificate issuer:       /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial:       64EF366070301E4C53A14D864B263B7C064D1E4A
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31342e302f32332d3233203d3e203533313536.roa
Signing time:             Thu 03 Apr 2025 22:33:28 +0000
ROA not before:           Thu 03 Apr 2025 22:28:28 +0000
ROA not after:            Thu 02 Apr 2026 22:33:28 +0000
asID:                     53156
IP address blocks:        186.211.14.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 04 Apr 2025 11:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ef:36:60:70:30:1e:4c:53:a1:4d:86:4b:26:3b:7c:06:4d:1e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
        Validity
            Not Before: Apr  3 22:28:28 2025 GMT
            Not After : Apr  2 22:33:28 2026 GMT
        Subject: CN=91F865842E3B1D27D5773C76BA38F4746401C2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:99:9d:23:7f:be:fc:b9:38:4a:ea:81:b2:
                    20:e0:11:6b:80:a0:4d:02:66:2e:5b:64:58:59:c4:
                    8d:3d:52:c2:df:19:5b:73:9b:9a:61:d8:6e:0e:0d:
                    85:5c:82:26:3b:7d:9c:ce:f6:d5:ad:35:c9:64:62:
                    c2:6e:29:ee:f9:22:13:e6:84:09:5c:fe:aa:4d:81:
                    26:79:ba:8d:85:73:d4:dd:c8:5d:88:6c:70:27:80:
                    bf:d0:9d:35:b5:14:6d:d7:62:38:2d:37:33:45:de:
                    fa:52:d4:35:37:21:27:4a:7c:ce:52:b7:cf:69:2c:
                    9b:36:fc:de:34:a1:15:c8:ee:7d:5d:4e:35:16:3e:
                    13:4e:e0:a9:1c:20:b5:e1:e0:47:bf:4b:7b:dd:35:
                    f6:4b:f4:9b:64:e7:c2:b5:63:e6:d4:fb:88:de:72:
                    62:83:15:25:1b:4f:4c:d1:a9:e5:4e:a3:1b:17:5d:
                    28:7b:96:4f:22:72:05:57:ff:a8:82:d5:da:93:f1:
                    72:ae:4d:25:f1:bc:56:bd:2f:86:15:8b:6b:04:5c:
                    bd:5d:16:72:58:c1:e7:11:0e:09:b9:35:68:18:39:
                    49:cc:f9:a6:5d:5a:d6:84:99:e6:50:cc:14:64:47:
                    c2:c1:f5:df:e7:3b:a1:1a:17:d0:a1:16:31:64:5a:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F8:65:84:2E:3B:1D:27:D5:77:3C:76:BA:38:F4:74:64:01:C2:CC
            X509v3 Authority Key Identifier:
                keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e31342e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:3d:3f:f3:46:ca:22:07:43:5c:70:09:56:9c:77:8b:1c:
         78:b9:37:39:10:94:a5:57:09:14:43:0b:ea:bd:44:d3:52:fb:
         a7:29:5c:34:98:c5:f9:92:0c:83:21:c4:52:b2:45:0c:12:b5:
         08:18:d4:9d:08:6f:48:d1:1e:4f:50:ae:cb:f3:6b:2a:0c:7c:
         8d:1b:e4:b3:9e:7b:2a:6c:71:98:b7:cc:dd:2e:31:46:c0:a3:
         75:0d:a5:ce:13:94:ac:87:fb:37:71:f6:cd:cd:a7:48:37:11:
         1e:db:2d:7f:ad:72:e9:b1:b6:6e:04:c1:f0:65:11:e0:5e:ad:
         5a:bf:eb:6e:8c:2c:e4:d4:64:f1:12:c5:89:5f:26:dc:fa:30:
         73:84:37:12:3e:33:2c:1b:34:85:32:b6:56:4a:7e:52:8f:b8:
         1f:c5:16:6e:b7:18:f2:9c:6a:1e:07:5b:ff:e3:1c:8a:72:43:
         79:6c:84:69:91:38:8d:25:76:40:99:78:f4:f0:9b:17:65:3a:
         20:a9:93:8c:cd:5b:e5:16:42:d4:44:6a:b4:fe:14:aa:da:a3:
         8c:3c:06:8c:2c:1f:cf:a9:df:3e:3b:54:a9:72:4b:34:c6:0f:
         15:3e:57:76:d2:57:aa:5d:f3:35:ab:7f:f2:6e:bd:ca:52:2a:
         72:ac:df:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZO82YHAwHkxToU2GSyY7fAZNHkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVENDAwQTczRjU4QzkxQTg4MThEODgzMEMwM0FENjlB
OTM5QjlCMDAeFw0yNTA0MDMyMjI4MjhaFw0yNjA0MDIyMjMzMjhaMDMxMTAvBgNV
BAMTKDkxRjg2NTg0MkUzQjFEMjdENTc3M0M3NkJBMzhGNDc0NjQwMUMyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nJmdI3++/Lk4SuqBsiDgEWuA
oE0CZi5bZFhZxI09UsLfGVtzm5ph2G4ODYVcgiY7fZzO9tWtNclkYsJuKe75IhPm
hAlc/qpNgSZ5uo2Fc9TdyF2IbHAngL/QnTW1FG3XYjgtNzNF3vpS1DU3ISdKfM5S
t89pLJs2/N40oRXI7n1dTjUWPhNO4KkcILXh4Ee/S3vdNfZL9Jtk58K1Y+bU+4je
cmKDFSUbT0zRqeVOoxsXXSh7lk8icgVX/6iC1dqT8XKuTSXxvFa9L4YVi2sEXL1d
FnJYwecRDgm5NWgYOUnM+aZdWtaEmeZQzBRkR8LB9d/nO6EaF9ChFjFkWlKZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkfhlhC47HSfVdzx2ujj0dGQBwswwHwYDVR0j
BBgwFoAUvtQApz9YyRqIGNiDDAOtaak5ubAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0p0d0hzQ3BmUUV6Rm5uRWpVaU5ROUM3N0J6UEVUOHU4Y2l5eHZKTnBC
N28vMC9CRUQ0MDBBNzNGNThDOTFBODgxOEQ4ODMwQzAzQUQ2OUE5MzlCOUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFRDQwMEE3M0Y1OEM5MUE4
ODE4RDg4MzBDMDNBRDY5QTkzOUI5QjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dKdHdIc0NwZlFFekZubkVqVWlOUTlDNzdCelBFVDh1OGNpeXh2Sk5wQjdvLzAv
MzEzODM2MmUzMjMxMzEyZTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzEzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQButMOMA0GCSqGSIb3DQEBCwUAA4IBAQAYsD0/80bK
IgdDXHAJVpx3ixx4uTc5EJSlVwkUQwvqvUTTUvunKVw0mMX5kgyDIcRSskUMErUI
GNSdCG9I0R5PUK7L82sqDHyNG+SznnsqbHGYt8zdLjFGwKN1DaXOE5Ssh/s3cfbN
zadINxEe2y1/rXLpsbZuBMHwZRHgXq1av+tujCzk1GTxEsWJXybc+jBzhDcSPjMs
GzSFMrZWSn5Sj7gfxRZutxjynGoeB1v/4xyKckN5bIRpkTiNJXZAmXj08JsXZTog
qZOMzVvlFkLURGq0/hSq2qOMPAaMLB/Pqd8+O1Spcks0xg8VPld20leqXfM1q3/y
br3KUipyrN8X
-----END CERTIFICATE-----
Generated at Fri May 2 17:25:00 2025 by rpki-client