Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35332e302f32342d3234203d3e20323632353838.roa
File:                     3137372e37352e35332e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier:          F9/VjQNVYUM7WgxCxzekyRRuDJ3PmpX07kl2XBb5c+4=
Subject key identifier:   76:A4:FF:BE:94:65:C0:D5:83:08:C9:5D:5A:56:31:EC:3F:AB:77:45
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       4673621AF44193BD9B903110CA039B6E20124462
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35332e302f32342d3234203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:19:27 +0000
ROA not before:           Sat 09 Apr 2022 14:14:27 +0000
ROA not after:            Sat 08 Apr 2023 14:19:27 +0000
asID:                     262588
IP address blocks:        177.75.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:73:62:1a:f4:41:93:bd:9b:90:31:10:ca:03:9b:6e:20:12:44:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:14:27 2022 GMT
            Not After : Apr  8 14:19:27 2023 GMT
        Subject: CN=76A4FFBE9465C0D58308C95D5A5631EC3FAB7745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:f4:f9:e6:85:fd:1c:5e:1f:8f:de:da:9b:
                    6d:74:7b:71:00:ac:4f:22:b6:29:30:0d:01:f3:65:
                    38:bf:fd:ff:6b:36:ae:da:7f:9c:12:be:2c:ec:32:
                    62:e0:0c:75:45:e2:fc:e9:4b:01:46:f1:02:6b:ae:
                    56:b1:17:8b:4a:4e:2c:ae:94:f2:d3:26:5c:c1:70:
                    d4:a2:ef:f0:1c:b3:57:e8:0c:68:11:c2:fe:c1:98:
                    55:8c:f1:8b:70:bd:e3:c6:65:55:8b:15:cd:3f:2b:
                    49:1f:b2:ac:02:a9:cf:4a:5b:e3:51:e8:9a:d1:f8:
                    7f:bd:85:ad:8f:9e:c7:ff:96:81:55:39:96:69:25:
                    34:cb:93:42:8e:24:38:cf:af:57:1c:07:d8:74:2a:
                    58:49:94:8c:01:bc:b4:2d:1f:f4:e6:65:7c:da:80:
                    8c:36:62:3d:f1:bc:dc:c3:e9:d8:ea:97:7e:2e:01:
                    40:c7:91:64:b1:f3:38:b6:1b:a5:6e:c3:02:6e:5a:
                    7a:6e:65:be:ef:fd:a6:bb:19:64:bb:e9:b0:a9:df:
                    4a:a0:01:9c:e4:f8:4c:f9:c6:e9:b0:b2:d6:f0:31:
                    61:f1:9c:47:8a:a8:86:c5:fa:f4:0c:cb:7b:b4:af:
                    78:8b:f4:a3:6d:19:48:50:d5:07:08:91:35:82:b4:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A4:FF:BE:94:65:C0:D5:83:08:C9:5D:5A:56:31:EC:3F:AB:77:45
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35332e302f32342d3234203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:77:f1:5a:9c:05:e4:91:47:d1:85:62:ca:de:5f:44:3c:6c:
         d3:fe:6c:03:89:e2:be:38:68:68:4d:4c:17:f8:2f:ea:91:08:
         b6:36:d0:f1:29:8c:cd:4c:84:28:86:6b:77:85:a8:98:90:3e:
         10:50:f9:e7:5e:f7:ac:f2:b6:29:f3:96:59:5b:2a:2c:cc:6e:
         f0:57:7f:df:d2:6f:9e:b3:ce:21:da:d7:d2:0b:03:b9:81:34:
         72:1a:7d:25:d5:f5:c7:9e:65:f9:fe:28:e4:cd:81:1b:25:da:
         d3:fa:e6:52:97:b2:19:e3:c2:cc:12:63:2f:4d:ae:3e:ba:b4:
         a2:f4:7d:d9:24:f7:d8:67:a5:28:45:3b:99:d5:b3:49:53:4f:
         7c:2a:9a:07:fa:70:ae:43:37:8d:57:c1:9d:71:00:39:6b:ff:
         68:d4:2c:8b:1b:bf:da:c5:14:1d:47:50:ec:a5:71:42:b3:9c:
         cc:04:cf:8f:57:ff:7a:e3:c5:a9:f2:cf:59:12:cf:c8:9d:92:
         3d:66:8f:9a:da:79:61:cd:b6:ad:3f:6a:a2:eb:73:e5:21:d8:
         5a:58:7d:93:8a:4f:36:60:15:f3:74:79:56:6d:66:3d:19:59:
         c3:99:f3:51:bb:ee:43:76:ca:02:75:2a:64:fb:36:36:87:18:
         00:b6:2e:28
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIURnNiGvRBk72bkDEQygObbiASRGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgz
NTQ2QTU3RDAeFw0yMjA0MDkxNDE0MjdaFw0yMzA0MDgxNDE5MjdaMDMxMTAvBgNV
BAMTKDc2QTRGRkJFOTQ2NUMwRDU4MzA4Qzk1RDVBNTYzMUVDM0ZBQjc3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+/T55oX9HF4fj97am210e3EA
rE8itikwDQHzZTi//f9rNq7af5wSvizsMmLgDHVF4vzpSwFG8QJrrlaxF4tKTiyu
lPLTJlzBcNSi7/Acs1foDGgRwv7BmFWM8YtwvePGZVWLFc0/K0kfsqwCqc9KW+NR
6JrR+H+9ha2Pnsf/loFVOZZpJTTLk0KOJDjPr1ccB9h0KlhJlIwBvLQtH/TmZXza
gIw2Yj3xvNzD6djql34uAUDHkWSx8zi2G6VuwwJuWnpuZb7v/aa7GWS76bCp30qg
AZzk+Ez5xumwstbwMWHxnEeKqIbF+vQMy3u0r3iL9KNtGUhQ1QcIkTWCtGWlAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUdqT/vpRlwNWDCMldWlYx7D+rd0UwHwYDVR0j
BBgwFoAUXMAujik4r63qRnKJ1MeTWDVGpX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB
LzAvNUNDMDJFOEUyOTM4QUZBREVBNDY3Mjg5RDRDNzkzNTgzNTQ2QTU3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0MwMkU4RTI5MzhBRkFERUE0
NjcyODlENEM3OTM1ODM1NDZBNTdELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzEz
NzM3MmUzNzM1MmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAsUs1MA0GCSqGSIb3DQEBCwUAA4IBAQDCd/FanAXkkUfR
hWLK3l9EPGzT/mwDieK+OGhoTUwX+C/qkQi2NtDxKYzNTIQohmt3haiYkD4QUPnn
Xves8rYp85ZZWyoszG7wV3/f0m+es84h2tfSCwO5gTRyGn0l1fXHnmX5/ijkzYEb
JdrT+uZSl7IZ48LMEmMvTa4+urSi9H3ZJPfYZ6UoRTuZ1bNJU098KpoH+nCuQzeN
V8GdcQA5a/9o1CyLG7/axRQdR1DspXFCs5zMBM+PV/9648Wp8s9ZEs/InZI9Zo+a
2nlhzbatP2qi63PlIdhaWH2Tik82YBXzdHlWbWY9GVnDmfNRu+5DdsoCdSpk+zY2
hxgAti4o
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:51 2023 by rpki-client on console-ams.rpki-client.org