Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a363030303a3a2f34382d3438203d3e20323638393338.roa
File:                     323830343a356365383a363030303a3a2f34382d3438203d3e20323638393338.roa (raw, json)
Hash identifier:          4nt+wtes35WmtEtGnvpnEfCXlOCtrp7HWn6zZxSAcq8=
Subject key identifier:   23:BD:56:DC:35:2E:95:61:51:5F:D1:83:F4:8B:91:3B:9E:DE:76:10
Certificate issuer:       /CN=F296B143778F1DB13805ABCD379BEFAFAD6C3E41
Certificate serial:       57AB524E77D5DB07DDC5737E501A792DDD45429F
Authority key identifier: F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a363030303a3a2f34382d3438203d3e20323638393338.roa
Signing time:             Wed 06 Oct 2021 18:16:01 +0000
ROA not before:           Wed 06 Oct 2021 18:11:01 +0000
ROA not after:            Wed 05 Oct 2022 18:16:01 +0000
asID:                     268938
IP address blocks:        2804:5ce8:6000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ab:52:4e:77:d5:db:07:dd:c5:73:7e:50:1a:79:2d:dd:45:42:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F296B143778F1DB13805ABCD379BEFAFAD6C3E41
        Validity
            Not Before: Oct  6 18:11:01 2021 GMT
            Not After : Oct  5 18:16:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:d1:5c:88:ba:8a:3a:91:3f:8d:0b:ad:56:
                    0c:e1:5f:9d:2e:68:a6:95:9a:26:80:66:56:db:cc:
                    4b:27:c7:d0:e6:84:4f:02:0c:e7:e1:bd:1e:33:65:
                    30:de:3a:10:9d:f2:25:08:b0:12:e6:21:05:e5:8a:
                    9d:93:62:7d:96:87:84:e4:c7:77:62:a3:54:b9:82:
                    56:56:45:87:75:1e:0c:12:ee:e4:e3:a2:00:26:d7:
                    8b:32:80:cd:62:ad:da:c1:d7:0e:1d:00:62:98:66:
                    16:d8:96:33:36:7c:bb:6e:ab:7a:4a:42:56:db:84:
                    6e:f5:f7:34:fd:5f:32:26:5f:eb:93:df:3a:2c:5c:
                    c5:33:4a:90:92:18:91:b7:d3:d2:fb:f5:04:0c:16:
                    79:5a:11:c7:67:54:72:4a:1f:2a:fc:09:b8:b7:02:
                    8c:de:7d:3f:d7:f3:5f:a7:c9:41:69:ad:aa:60:14:
                    ad:08:03:69:48:d1:55:b1:b3:47:b3:7e:36:47:f3:
                    f7:20:be:7e:c8:7e:8d:c5:c7:10:18:e6:5c:af:4f:
                    88:3e:b9:86:0e:d5:37:cb:87:1f:06:01:a7:1e:55:
                    b0:13:d1:1d:08:f5:80:d8:37:d5:38:54:9e:eb:f4:
                    0c:71:97:39:f0:77:fa:9b:f3:b0:78:e7:02:b2:1f:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:56:DC:35:2E:95:61:51:5F:D1:83:F4:8B:91:3B:9E:DE:76:10
            X509v3 Authority Key Identifier:
                keyid:F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/323830343a356365383a363030303a3a2f34382d3438203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce8:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:b2:41:ee:b9:e5:84:20:f5:98:71:49:ff:93:d6:0f:6b:
         d8:ae:fc:0c:c0:50:bd:e6:e2:b7:2d:27:15:59:a6:a9:75:f7:
         cc:49:7a:49:58:83:7c:af:7d:ae:5a:0d:f2:39:f1:e1:db:4e:
         74:0e:f1:8c:78:f8:66:b7:2b:31:8c:cc:20:1f:83:50:39:e3:
         3c:2c:2e:0e:1b:38:1e:df:b3:d3:68:9a:7b:a7:a7:16:4d:c4:
         dc:8d:f3:0a:69:32:9e:95:62:c8:c2:90:68:d4:fc:69:3f:c8:
         38:6c:99:97:77:3b:2c:04:a6:4c:55:c3:77:b7:ec:ca:5d:ab:
         90:e9:58:78:2e:92:81:9e:21:dd:48:08:77:44:4f:30:ee:d7:
         f3:7b:46:72:2a:c8:1b:6d:a6:7a:b3:70:36:4c:e6:fd:7b:62:
         b6:21:2b:94:9e:1f:3a:6a:34:5c:f1:c7:53:eb:9f:f7:f2:ab:
         f2:33:aa:d3:9e:d3:1e:91:37:ca:61:16:64:c3:45:f2:e7:3a:
         6b:ed:af:0e:6e:c4:b7:11:a0:42:d0:da:77:34:38:b0:21:5d:
         ca:2b:99:fe:25:43:60:93:12:53:40:6b:af:65:44:5f:3e:c7:
         31:2b:8d:21:db:e0:38:f0:fa:52:a8:81:44:bf:4b:55:4d:7b:
         43:89:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----