Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35372e302f32342d3234203d3e20323632353838.roa
File:                     3137372e37352e35372e302f32342d3234203d3e20323632353838.roa (raw, json)
Hash identifier:          d5exjYcgymS2r2fB7xunzFFUZZPP3Xfxq10RXwNqOl0=
Subject key identifier:   35:02:13:0D:FF:49:A4:68:D8:71:96:C1:1F:FF:C9:24:1B:1F:B1:F7
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       30318CF9FD5EBF310D89C1C007E220D5AC0F50F1
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35372e302f32342d3234203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:20:34 +0000
ROA not before:           Sat 09 Apr 2022 14:15:34 +0000
ROA not after:            Sat 08 Apr 2023 14:20:34 +0000
asID:                     262588
IP address blocks:        177.75.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:31:8c:f9:fd:5e:bf:31:0d:89:c1:c0:07:e2:20:d5:ac:0f:50:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:15:34 2022 GMT
            Not After : Apr  8 14:20:34 2023 GMT
        Subject: CN=3502130DFF49A468D87196C11FFFC9241B1FB1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:4c:6d:d1:f3:3b:51:a1:d4:a2:4e:53:3d:
                    6d:5b:19:d8:93:84:06:43:8e:5d:68:10:09:8c:8b:
                    56:40:68:ff:8b:c0:0e:94:84:0e:39:3e:cf:6c:6b:
                    e2:00:3d:33:cf:72:80:92:71:9c:cd:a2:8c:10:67:
                    77:7a:82:ff:b0:2f:04:9c:14:5e:57:37:eb:59:3a:
                    5a:67:a5:18:a9:e9:25:f3:60:f6:c5:37:80:95:98:
                    30:41:f2:08:88:49:19:d4:6f:70:9b:32:04:df:88:
                    0d:4d:fd:91:5e:25:c3:ef:97:66:11:7d:7f:89:68:
                    b3:61:7f:f1:6a:06:cb:6b:46:9f:02:98:9d:39:dc:
                    a6:c8:bc:3e:d5:fa:b3:10:96:3c:63:a8:a2:44:2c:
                    46:04:33:d2:59:2f:d3:5c:fe:28:b8:fb:a3:b3:57:
                    c2:27:f2:82:f7:26:92:67:d1:bd:d2:90:4e:9d:73:
                    60:c9:c2:54:e3:1e:a3:4c:cb:69:a4:6e:eb:d5:a0:
                    44:e3:f9:1f:38:d5:e2:06:19:08:6d:17:a1:b8:c2:
                    10:c3:02:7b:dd:9b:a6:b2:ca:72:a5:d3:fa:1e:6d:
                    8f:0f:61:36:a5:ff:fd:ab:1e:9e:e1:ad:eb:d9:38:
                    1a:2d:13:01:f6:4a:56:8b:58:d1:45:17:35:6a:15:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:13:0D:FF:49:A4:68:D8:71:96:C1:1F:FF:C9:24:1B:1F:B1:F7
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35372e302f32342d3234203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:96:82:4a:7b:53:6f:2e:29:df:99:12:c5:4f:6f:b4:4b:1e:
         7d:9a:52:b5:19:c9:20:67:f7:99:ed:47:4d:21:32:d8:87:be:
         38:25:c5:ef:f9:8c:99:1e:03:5f:f2:09:7c:3a:88:b4:b6:ea:
         4e:ae:50:9e:22:c1:9a:d7:e1:d6:a3:b2:cd:06:b8:1d:b7:c5:
         c0:89:10:23:3e:64:34:78:56:f5:2f:6d:a1:d8:b5:d2:90:0c:
         74:32:89:37:48:55:5a:3e:a6:74:6a:6b:74:98:bd:b0:0a:8a:
         f1:85:54:18:3a:dc:17:ee:d9:a6:b3:98:6c:c4:76:43:32:4b:
         eb:12:d6:e1:bf:6d:a7:8e:64:8f:b9:98:6b:a8:48:58:ba:80:
         31:5b:0d:b4:c9:39:fc:31:80:fb:9a:e1:0f:81:29:bb:73:61:
         88:b9:cc:0c:16:27:1d:68:70:b7:8a:86:8e:3d:0c:5a:4f:cd:
         2e:69:e5:69:f1:dd:63:14:7f:f4:62:39:a0:7b:b5:81:73:13:
         31:cc:d3:c7:0f:d0:91:ff:f2:f0:57:40:f5:43:00:c7:da:7f:
         a2:aa:88:92:b6:3c:f1:e1:c7:07:7c:fa:30:62:83:8d:b2:51:
         7e:57:bc:81:6d:fe:8b:56:bb:80:48:4e:dd:be:5f:ce:36:07:
         03:2d:91:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:39 2023 by rpki-client on console-fra.rpki-client.org