Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35342e302f32342d3234203d3e20323732343732.roa
File:                     3230302e33392e35342e302f32342d3234203d3e20323732343732.roa (raw, json)
Hash identifier:          fNkYRT7lid877Cycr6aCatJh2h2mZ8jJcwce/HQU3j0=
Subject key identifier:   2F:C9:6B:43:24:ED:88:6C:95:6C:E7:8B:92:DA:FA:72:D7:66:E8:E7
Certificate issuer:       /CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
Certificate serial:       047A292A0EA36C88DA09BA26370ADF1EC85DFA6C
Authority key identifier: 91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35342e302f32342d3234203d3e20323732343732.roa
Signing time:             Wed 08 Dec 2021 19:56:40 +0000
ROA not before:           Wed 08 Dec 2021 19:51:40 +0000
ROA not after:            Wed 07 Dec 2022 19:56:40 +0000
asID:                     272472
IP address blocks:        200.39.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7a:29:2a:0e:a3:6c:88:da:09:ba:26:37:0a:df:1e:c8:5d:fa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
        Validity
            Not Before: Dec  8 19:51:40 2021 GMT
            Not After : Dec  7 19:56:40 2022 GMT
        Subject: CN=3082010A0282010100B1FA0E36852004C97AB7CE6AB83DA7B9C9439CABBEF0234733924AD36051A1B649EC1B1D5B717BE289D25CB1F10754C9ACA25E7BFD713D04F5D7993F4B04CD8ED7E0A07823E524065D389E3802E0F42F2907394D5AA9367ABCEF11F2D8DA49E5F16F9940F1F74F5305B1DC05B25CB88546E397CF5A244488DE97DB1AA62AAD24426F24CE40440660693F94982CA303186EA5B4D4608E754A63429A21BC81FC6A47260A8A45E52C87CE364D14A0F9B4DCE4D677995ECE00E0CCC1B50AA9293ED466FD51BDBBE08BC5E4E605A03629151B7649F2B1B05A3E7DE77F99EB93DCEF9B5E997C498D1910B8DF8843E3120DD787B5CBDD75D6C47A6F87983297A42741790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:0e:36:85:20:04:c9:7a:b7:ce:6a:b8:3d:
                    a7:b9:c9:43:9c:ab:be:f0:23:47:33:92:4a:d3:60:
                    51:a1:b6:49:ec:1b:1d:5b:71:7b:e2:89:d2:5c:b1:
                    f1:07:54:c9:ac:a2:5e:7b:fd:71:3d:04:f5:d7:99:
                    3f:4b:04:cd:8e:d7:e0:a0:78:23:e5:24:06:5d:38:
                    9e:38:02:e0:f4:2f:29:07:39:4d:5a:a9:36:7a:bc:
                    ef:11:f2:d8:da:49:e5:f1:6f:99:40:f1:f7:4f:53:
                    05:b1:dc:05:b2:5c:b8:85:46:e3:97:cf:5a:24:44:
                    88:de:97:db:1a:a6:2a:ad:24:42:6f:24:ce:40:44:
                    06:60:69:3f:94:98:2c:a3:03:18:6e:a5:b4:d4:60:
                    8e:75:4a:63:42:9a:21:bc:81:fc:6a:47:26:0a:8a:
                    45:e5:2c:87:ce:36:4d:14:a0:f9:b4:dc:e4:d6:77:
                    99:5e:ce:00:e0:cc:c1:b5:0a:a9:29:3e:d4:66:fd:
                    51:bd:bb:e0:8b:c5:e4:e6:05:a0:36:29:15:1b:76:
                    49:f2:b1:b0:5a:3e:7d:e7:7f:99:eb:93:dc:ef:9b:
                    5e:99:7c:49:8d:19:10:b8:df:88:43:e3:12:0d:d7:
                    87:b5:cb:dd:75:d6:c4:7a:6f:87:98:32:97:a4:27:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C9:6B:43:24:ED:88:6C:95:6C:E7:8B:92:DA:FA:72:D7:66:E8:E7
            X509v3 Authority Key Identifier:
                keyid:91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35342e302f32342d3234203d3e20323732343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:66:1c:96:fe:fa:e5:43:94:43:5f:dc:8e:4b:f8:4b:86:
         59:37:61:b4:85:2b:be:9b:59:dc:e4:7e:07:44:41:af:9f:57:
         a8:7e:cd:d2:64:5e:5e:6a:21:a5:f7:72:8b:dc:b8:9d:d2:52:
         f0:84:1a:af:3c:44:b0:ec:ce:75:7e:88:30:14:5c:3c:37:dd:
         10:93:b4:84:7d:ab:ab:3d:19:de:1d:e2:a3:b0:0c:f4:83:4f:
         5e:76:b7:6d:54:4b:b3:5f:5c:0b:32:ca:ae:be:bf:09:5e:d9:
         5e:2f:20:9f:6f:da:ac:b4:32:39:4b:a7:86:99:6b:55:0f:bc:
         8c:bd:a7:63:d8:52:f3:25:25:7a:d4:9c:54:14:51:76:67:9a:
         c1:7b:95:44:10:d0:23:7e:b8:8f:d3:a4:d4:59:f4:25:b8:7e:
         d3:2f:bd:45:00:70:21:2c:1e:89:58:eb:07:7c:b1:5b:46:8d:
         c9:0f:fa:53:3f:72:ed:d5:ff:bd:a7:ad:0f:a4:86:58:cb:d5:
         93:ae:e8:48:b0:f4:e0:6b:37:37:b9:be:ca:4a:fc:25:46:0a:
         88:16:30:27:da:fe:22:98:95:20:42:7b:17:d0:26:c5:80:fe:
         34:a8:23:53:7b:32:60:8d:ae:0b:b7:f4:9e:41:8a:f7:f2:9c:
         1c:5b:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:46 2023 by rpki-client on console-ams.rpki-client.org