Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a3a2f33322d3438203d3e20323639313630.roa
File:                     323830343a363035343a3a2f33322d3438203d3e20323639313630.roa (raw, json)
Hash identifier:          eqghyYZLxaeLiB2n9aLiBC/VieSTUdPet1o8qowtgNI=
Subject key identifier:   F5:18:0E:23:B4:F2:13:B8:D2:29:63:F6:14:C9:4E:02:1F:83:E7:56
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       7D33D2E2A95B282FE7A8FCBFA8D5F370CFB93213
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a3a2f33322d3438203d3e20323639313630.roa
Signing time:             Wed 08 Jun 2022 04:58:35 +0000
ROA not before:           Wed 08 Jun 2022 04:53:35 +0000
ROA not after:            Wed 07 Jun 2023 04:58:35 +0000
asID:                     269160
IP address blocks:        2804:6054::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:33:d2:e2:a9:5b:28:2f:e7:a8:fc:bf:a8:d5:f3:70:cf:b9:32:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Jun  8 04:53:35 2022 GMT
            Not After : Jun  7 04:58:35 2023 GMT
        Subject: CN=F5180E23B4F213B8D22963F614C94E021F83E756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:de:fc:a1:a1:91:e1:c7:65:df:5f:85:86:
                    63:b2:21:a5:77:1b:f0:3f:d9:f2:e1:23:92:ae:dc:
                    cd:62:60:9c:b9:2a:3d:7c:39:c6:aa:55:3d:9c:dd:
                    e8:d9:2f:34:7e:12:ee:9b:51:83:07:26:94:6e:e6:
                    6c:81:60:eb:2d:e0:e7:80:7a:b8:b1:b2:e9:c9:e7:
                    03:e8:82:f8:de:c8:2a:8c:0d:26:65:ba:26:8e:f2:
                    6c:e4:3c:43:11:eb:05:98:89:37:b8:14:d5:dc:a0:
                    da:d6:fa:25:25:3c:00:d0:b9:e3:32:bb:ac:7a:b9:
                    1f:33:f8:1e:27:a1:83:e4:c4:59:c8:75:08:8e:42:
                    3f:67:a1:23:9e:08:7d:5f:a1:6e:6a:77:b9:df:f9:
                    72:46:64:6d:6f:68:08:16:40:b2:59:5f:29:9f:cd:
                    49:ea:50:75:bd:60:40:60:ac:f1:f5:3a:e0:17:36:
                    5e:d6:94:48:3b:18:f7:7c:3a:ba:db:28:8e:31:a3:
                    16:86:14:0b:8e:96:20:d6:da:79:63:35:9a:54:2f:
                    1f:56:19:d9:37:4b:71:04:d8:9e:86:12:d2:f3:95:
                    56:ef:7b:b6:e5:4a:88:ac:ff:5d:8e:8d:df:bc:57:
                    23:ba:dc:22:5d:c7:6e:76:9c:35:25:be:d1:79:3b:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:18:0E:23:B4:F2:13:B8:D2:29:63:F6:14:C9:4E:02:1F:83:E7:56
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/323830343a363035343a3a2f33322d3438203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6054::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:f0:12:b3:46:59:c5:ce:94:68:66:1e:93:b0:be:aa:82:03:
         55:66:a4:37:93:61:cc:37:f9:ec:6a:b6:4c:0a:e1:f6:4c:bf:
         87:88:99:b9:7f:f2:c4:c4:fa:02:b6:4c:9e:ac:58:64:f2:19:
         ae:3f:72:91:83:8c:55:85:1d:22:fc:af:f9:50:a0:38:d5:11:
         66:dd:12:d5:00:69:8b:f4:23:3f:3b:09:00:79:9d:7c:71:a9:
         77:ca:4c:00:7a:25:be:31:9f:26:5f:f1:43:78:b3:a7:ec:30:
         2a:68:d6:cf:7f:1b:52:1e:b3:61:a7:5d:0e:a3:9e:bd:1c:eb:
         5f:ad:af:26:37:39:d9:0a:1c:97:7c:f8:b9:10:bc:dc:99:38:
         60:6a:26:d7:1b:f9:f7:c0:b7:5d:ab:1b:c6:33:f1:9c:53:2f:
         84:2e:ff:0e:06:0f:77:f8:5c:cc:7a:c6:53:f6:82:c3:e0:21:
         14:72:44:97:2e:bc:99:4d:cf:30:82:5b:03:94:f9:db:2d:a2:
         5d:a8:2e:45:bd:12:b1:b0:3c:f8:c3:e8:d9:0b:3d:c6:0e:67:
         79:6b:2d:b3:50:35:51:b3:9c:7c:2b:8d:b8:22:a0:b8:21:b1:
         08:dd:bf:68:fb:de:2c:6e:3a:03:ff:ae:a6:9c:be:79:38:9f:
         14:2a:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----