Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3232203d3e20323632353838.roa
File:                     3137302e38332e3133322e302f32322d3232203d3e20323632353838.roa (raw, json)
Hash identifier:          ZBm27dBYR91zq9Oz29HHwLzeV0IRpuj0bvmvm7SrNDs=
Subject key identifier:   0B:EE:43:40:A1:38:1E:79:48:FC:C2:79:73:11:42:84:F0:EC:14:D2
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       526D69CB96E664287F98632D1B2B9196AFA0FB1B
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3232203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:18:18 +0000
ROA not before:           Sat 09 Apr 2022 14:13:18 +0000
ROA not after:            Sat 08 Apr 2023 14:18:18 +0000
asID:                     262588
IP address blocks:        170.83.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6d:69:cb:96:e6:64:28:7f:98:63:2d:1b:2b:91:96:af:a0:fb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:13:18 2022 GMT
            Not After : Apr  8 14:18:18 2023 GMT
        Subject: CN=0BEE4340A1381E7948FCC27973114284F0EC14D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:89:d2:28:82:22:46:31:56:25:d7:b0:69:
                    dd:a2:60:f1:4f:90:bd:dd:a4:50:9c:3d:b9:93:44:
                    1f:f4:1d:65:56:c9:c0:88:0d:13:ba:57:22:dc:58:
                    e4:59:8b:41:19:a3:7c:c3:50:ca:64:3b:11:65:a5:
                    4b:8a:a7:e0:92:c1:ca:03:dc:cf:c0:eb:bd:73:4b:
                    ec:b5:f6:cf:52:c5:64:ee:e1:09:8e:75:65:2a:ba:
                    8f:58:3b:ea:77:80:e6:40:e3:75:2c:8f:d9:34:ba:
                    33:35:f8:09:59:85:e7:bb:5b:bc:93:43:ed:2e:78:
                    3b:ad:a1:f8:76:11:7f:e6:7a:4e:bd:5f:d3:c9:16:
                    62:0a:88:c4:8b:f3:3a:84:02:bc:4e:88:91:dc:c8:
                    21:d1:48:b8:de:a8:2d:a1:d8:6e:b9:df:ff:25:ec:
                    1a:b0:77:c0:21:b9:32:b7:9d:36:c5:16:19:75:29:
                    17:ac:58:15:d9:f7:e2:c3:8a:de:a0:72:da:f8:61:
                    8a:2d:11:a4:bf:7e:51:c9:dd:1e:29:bb:8c:b1:55:
                    b2:5f:46:eb:54:a7:70:9e:43:b6:72:f0:ab:a6:f3:
                    78:a7:bf:b0:12:43:c4:02:4f:58:f2:7a:ee:fd:e2:
                    59:fd:c6:2e:1c:ab:94:d0:3b:3c:a2:35:2e:35:cf:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EE:43:40:A1:38:1E:79:48:FC:C2:79:73:11:42:84:F0:EC:14:D2
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3232203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:77:a7:1d:e4:79:20:98:d5:44:93:5e:e5:63:f1:bf:8a:18:
         54:e0:6f:79:25:c6:bb:7d:29:9d:03:4b:13:82:1f:38:96:50:
         b6:70:ab:bb:75:f6:cd:d0:4e:a5:26:62:0c:05:e5:92:90:6c:
         1b:19:e2:ca:c6:40:52:b4:76:9c:44:a3:90:bb:f6:3e:da:94:
         d0:a1:2a:a6:d8:c5:84:20:8e:b8:12:a0:86:9d:35:6e:ef:cd:
         3f:bd:06:1e:0b:66:bd:ed:0a:6f:84:09:21:2b:cb:61:22:15:
         98:7b:6b:60:56:86:58:4c:46:65:20:88:e5:22:b2:14:97:2b:
         20:98:60:b3:6b:e2:bc:c8:41:3b:ed:76:2e:29:1a:96:7d:2f:
         c2:6c:50:88:a6:1e:39:eb:df:d5:27:34:aa:b4:ed:08:95:fc:
         8e:a7:e5:cb:c7:a4:05:83:a0:78:d3:1a:93:62:f6:30:74:ab:
         8f:9f:01:b8:29:dd:ef:1d:4e:85:60:ca:2d:f5:78:77:dd:7a:
         6b:62:d0:37:2a:36:ac:14:1e:bd:a9:3f:88:ea:1d:70:2d:0f:
         a4:4a:f6:ee:ab:78:a4:46:d8:ae:84:48:43:3d:43:38:43:41:
         6d:cf:17:0a:0a:74:1d:8d:cb:d6:2b:0a:5a:76:7e:7b:1c:e9:
         70:f6:96:06
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUm1py5bmZCh/mGMtGyuRlq+g+xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgz
NTQ2QTU3RDAeFw0yMjA0MDkxNDEzMThaFw0yMzA0MDgxNDE4MThaMDMxMTAvBgNV
BAMTKDBCRUU0MzQwQTEzODFFNzk0OEZDQzI3OTczMTE0Mjg0RjBFQzE0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOG4nSKIIiRjFWJdewad2iYPFP
kL3dpFCcPbmTRB/0HWVWycCIDRO6VyLcWORZi0EZo3zDUMpkOxFlpUuKp+CSwcoD
3M/A671zS+y19s9SxWTu4QmOdWUquo9YO+p3gOZA43Usj9k0ujM1+AlZhee7W7yT
Q+0ueDutofh2EX/mek69X9PJFmIKiMSL8zqEArxOiJHcyCHRSLjeqC2h2G653/8l
7Bqwd8AhuTK3nTbFFhl1KResWBXZ9+LDit6gctr4YYotEaS/flHJ3R4pu4yxVbJf
RutUp3CeQ7Zy8Kum83inv7ASQ8QCT1jyeu794ln9xi4cq5TQOzyiNS41z+T9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUC+5DQKE4HnlI/MJ5cxFChPDsFNIwHwYDVR0j
BBgwFoAUXMAujik4r63qRnKJ1MeTWDVGpX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzAvNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgzNTQ2QTU3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0MwMkU4RTI5MzhBRkFERUE0
NjcyODlENEM3OTM1ODM1NDZBNTdELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzEz
NzMwMmUzODMzMmUzMTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIz
NTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKqU4QwDQYJKoZIhvcNAQELBQADggEBAHF3px3keSCY
1USTXuVj8b+KGFTgb3klxrt9KZ0DSxOCHziWULZwq7t19s3QTqUmYgwF5ZKQbBsZ
4srGQFK0dpxEo5C79j7alNChKqbYxYQgjrgSoIadNW7vzT+9Bh4LZr3tCm+ECSEr
y2EiFZh7a2BWhlhMRmUgiOUishSXKyCYYLNr4rzIQTvtdi4pGpZ9L8JsUIimHjnr
39UnNKq07QiV/I6n5cvHpAWDoHjTGpNi9jB0q4+fAbgp3e8dToVgyi31eHfdemti
0DcqNqwUHr2pP4jqHXAtD6RK9u6reKRG2K6ESEM9QzhDQW3PFwoKdB2Ny9YrClp2
fnsc6XD2lgY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:39 2023 by rpki-client on console-fra.rpki-client.org